From eb0f5bafde0dc2ea06144f7d5e97dcc4ebe71508 Mon Sep 17 00:00:00 2001
From: DHR60 <dehongren60@gmail.com>
Date: Sun, 1 Feb 2026 15:34:04 +0800
Subject: [PATCH] Disable insecure when cert pinned (#8733)

---
 .../ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs b/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs
index 3db5a420..1f5ad4ef 100644
--- a/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs
+++ b/v2rayN/ServiceLib/Services/CoreConfig/V2ray/V2rayOutboundService.cs
@@ -325,6 +325,7 @@ public partial class CoreConfigV2rayService
                 else if (!node.CertSha.IsNullOrEmpty())
                 {
                     tlsSettings.pinnedPeerCertSha256 = node.CertSha;
+                    tlsSettings.allowInsecure = false;
                 }
                 streamSettings.tlsSettings = tlsSettings;
             }