Change SNI Files/CLI/Handler

core/cli.py

@@ -22,6 +22,7 @@ class Command(Enum):
     UPDATE_HYSTERIA2 = os.path.join(SCRIPT_DIR, 'hysteria2', 'update.sh')
     RESTART_HYSTERIA2 = os.path.join(SCRIPT_DIR, 'hysteria2', 'restart.sh')
     CHANGE_PORT_HYSTERIA2 = os.path.join(SCRIPT_DIR, 'hysteria2', 'change_port.sh')
+    CHANGE_SNI_HYSTERIA2 = os.path.join(SCRIPT_DIR, 'hysteria2', 'change_sni.sh')
     GET_USER = os.path.join(SCRIPT_DIR, 'hysteria2', 'get_user.sh')
     ADD_USER = os.path.join(SCRIPT_DIR, 'hysteria2', 'add_user.sh')
     EDIT_USER = os.path.join(SCRIPT_DIR, 'hysteria2', 'edit_user.sh')
@@ -103,6 +104,11 @@ def restart_hysteria2():
 def change_hysteria2_port(port: int):
     run_cmd(['bash', Command.CHANGE_PORT_HYSTERIA2.value, str(port)])
 
+@cli.command('change-hysteria2-sni')
+@click.option('--sni', '-s', required=True, help='New SNI for Hysteria2', type=str)
+def change_hysteria2_sni(sni: str):
+    run_cmd(['bash', Command.CHANGE_SNI_HYSTERIA2.value, sni])
+
 @cli.command('get-user')
 @click.option('--username', '-u', required=True, help='Username for the user to get', type=str)
 def get_user(username: str):

core/scripts/hysteria2/change_sni.sh

@@ -0,0 +1,63 @@
+#!/bin/bash
+
+# Source the necessary paths
+source /etc/hysteria/core/scripts/path.sh
+
+update_sni() {
+    local sni=$1
+
+    if [ -z "$sni" ]; then
+        echo "Invalid SNI. Please provide a valid SNI."
+        return 1
+    fi
+
+    cd /etc/hysteria/ || exit
+    rm -f ca.key ca.crt
+
+    echo "Generating CA key and certificate for SNI: $sni ..."
+    openssl ecparam -genkey -name prime256v1 -out ca.key >/dev/null 2>&1
+    openssl req -new -x509 -days 36500 -key ca.key -out ca.crt -subj "/CN=$sni" >/dev/null 2>&1
+    chown hysteria:hysteria /etc/hysteria/ca.key /etc/hysteria/ca.crt
+    chmod 640 /etc/hysteria/ca.key /etc/hysteria/ca.crt
+    fingerprint=$(openssl x509 -noout -fingerprint -sha256 -inform pem -in ca.crt | sed 's/.*=//;s/://g')
+
+    sha256=$(python3 - <<EOF
+import base64
+import binascii
+
+# Hexadecimal string
+hex_string = "$fingerprint"
+
+# Convert hex to binary
+binary_data = binascii.unhexlify(hex_string)
+
+# Encode binary data to base64
+base64_encoded = base64.b64encode(binary_data).decode('utf-8')
+
+# Print the result prefixed with 'sha256/'
+print('sha256/' + base64_encoded)
+EOF
+)
+    echo "SHA-256 fingerprint generated: $sha256"
+
+    if [ -f "$CONFIG_FILE" ]; then
+        jq --arg sha256 "$sha256" '.tls.pinSHA256 = $sha256' "$CONFIG_FILE" > "${CONFIG_FILE}.temp" && mv "${CONFIG_FILE}.temp" "$CONFIG_FILE"
+        echo "SHA-256 updated successfully in $CONFIG_FILE"
+    else
+        echo "Error: Config file $CONFIG_FILE not found."
+        return 1
+    fi
+
+    if [ -f "$CONFIG_ENV" ]; then
+        sed -i "s/^SNI=.*/SNI=$sni/" "$CONFIG_ENV"
+        echo "SNI updated successfully in .config.env"
+    else
+        echo "SNI=$sni" > "$CONFIG_ENV"
+        echo "Created .config.env with new SNI."
+    fi
+
+    python3 "$CLI_PATH" restart-hysteria2 > /dev/null 2>&1
+    echo "Hysteria2 restarted successfully with new SNI: $sni."
+}
+
+update_sni "$1"

core/scripts/path.sh

@@ -2,6 +2,7 @@ CLI_PATH="/etc/hysteria/core/cli.py"
 USERS_FILE="/etc/hysteria/users.json"
 TRAFFIC_FILE="/etc/hysteria/traffic_data.json"
 CONFIG_FILE="/etc/hysteria/config.json"
+CONFIG_ENV="/etc/hysteria/.config.env"
 TELEGRAM_ENV="/etc/hysteria/core/scripts/telegrambot/.env"
 SINGBOX_ENV="/etc/hysteria/core/scripts/singbox/.env"
 ONLINE_API_URL="http://127.0.0.1:25413/online"