chore: apply ntp time function more place

wwqgtxx · wwqgtxx · commit a0f1ac4ef55a · 2025-09-13T14:21:33.000+08:00
diff --git a/component/ca/config.go b/component/ca/config.go
@@ -12,6 +12,7 @@ import (
 
 	"github.com/metacubex/mihomo/common/once"
 	C "github.com/metacubex/mihomo/constant"
+	"github.com/metacubex/mihomo/ntp"
 )
 
 var globalCertPool *x509.CertPool
@@ -110,6 +111,7 @@ func GetTLSConfig(opt Option) (tlsConfig *tls.Config, err error) {
 	if tlsConfig == nil {
 		tlsConfig = &tls.Config{}
 	}
+	tlsConfig.Time = ntp.Now
 
 	if opt.ZeroTrust {
 		tlsConfig.RootCAs = zeroTrustCertPool()
diff --git a/hub/route/server.go b/hub/route/server.go
@@ -20,6 +20,7 @@ import (
 	tlsC "github.com/metacubex/mihomo/component/tls"
 	C "github.com/metacubex/mihomo/constant"
 	"github.com/metacubex/mihomo/log"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/tunnel/statistic"
 
 	"github.com/go-chi/chi/v5"
@@ -201,7 +202,7 @@ func startTLS(cfg *Config) {
 		}
 
 		log.Infoln("RESTful API tls listening at: %s", l.Addr().String())
-		tlsConfig := &tlsC.Config{}
+		tlsConfig := &tlsC.Config{Time: ntp.Now}
 		tlsConfig.NextProtos = []string{"h2", "http/1.1"}
 		tlsConfig.Certificates = []tlsC.Certificate{tlsC.UCertificate(cert)}
 
diff --git a/listener/anytls/server.go b/listener/anytls/server.go
@@ -17,6 +17,7 @@ import (
 	C "github.com/metacubex/mihomo/constant"
 	LC "github.com/metacubex/mihomo/listener/config"
 	"github.com/metacubex/mihomo/listener/sing"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/anytls/padding"
 	"github.com/metacubex/mihomo/transport/anytls/session"
 
@@ -42,7 +43,7 @@ func New(config LC.AnyTLSServer, tunnel C.Tunnel, additions ...inbound.Addition)
 		}
 	}
 
-	tlsConfig := &tlsC.Config{}
+	tlsConfig := &tlsC.Config{Time: ntp.Now}
 	if config.Certificate != "" && config.PrivateKey != "" {
 		cert, err := ca.LoadTLSKeyPair(config.Certificate, config.PrivateKey, C.Path)
 		if err != nil {
diff --git a/listener/http/server.go b/listener/http/server.go
@@ -12,6 +12,7 @@ import (
 	authStore "github.com/metacubex/mihomo/listener/auth"
 	LC "github.com/metacubex/mihomo/listener/config"
 	"github.com/metacubex/mihomo/listener/reality"
+	"github.com/metacubex/mihomo/ntp"
 )
 
 type Listener struct {
@@ -65,7 +66,7 @@ func NewWithConfig(config LC.AuthServer, tunnel C.Tunnel, additions ...inbound.A
 		return nil, err
 	}
 
-	tlsConfig := &tlsC.Config{}
+	tlsConfig := &tlsC.Config{Time: ntp.Now}
 	var realityBuilder *reality.Builder
 
 	if config.Certificate != "" && config.PrivateKey != "" {
diff --git a/listener/mixed/mixed.go b/listener/mixed/mixed.go
@@ -16,6 +16,7 @@ import (
 	"github.com/metacubex/mihomo/listener/http"
 	"github.com/metacubex/mihomo/listener/reality"
 	"github.com/metacubex/mihomo/listener/socks"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/socks4"
 	"github.com/metacubex/mihomo/transport/socks5"
 )
@@ -61,7 +62,7 @@ func NewWithConfig(config LC.AuthServer, tunnel C.Tunnel, additions ...inbound.A
 		return nil, err
 	}
 
-	tlsConfig := &tlsC.Config{}
+	tlsConfig := &tlsC.Config{Time: ntp.Now}
 	var realityBuilder *reality.Builder
 
 	if config.Certificate != "" && config.PrivateKey != "" {
diff --git a/listener/sing_hysteria2/server.go b/listener/sing_hysteria2/server.go
@@ -20,6 +20,7 @@ import (
 	LC "github.com/metacubex/mihomo/listener/config"
 	"github.com/metacubex/mihomo/listener/sing"
 	"github.com/metacubex/mihomo/log"
+	"github.com/metacubex/mihomo/ntp"
 
 	"github.com/metacubex/sing-quic/hysteria2"
 
@@ -61,6 +62,7 @@ func New(config LC.Hysteria2Server, tunnel C.Tunnel, additions ...inbound.Additi
 		return nil, err
 	}
 	tlsConfig := &tlsC.Config{
+		Time:       ntp.Now,
 		MinVersion: tlsC.VersionTLS13,
 	}
 	tlsConfig.Certificates = []tlsC.Certificate{tlsC.UCertificate(cert)}
diff --git a/listener/sing_vless/server.go b/listener/sing_vless/server.go
@@ -15,6 +15,7 @@ import (
 	LC "github.com/metacubex/mihomo/listener/config"
 	"github.com/metacubex/mihomo/listener/reality"
 	"github.com/metacubex/mihomo/listener/sing"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/gun"
 	"github.com/metacubex/mihomo/transport/vless/encryption"
 	mihomoVMess "github.com/metacubex/mihomo/transport/vmess"
@@ -75,7 +76,7 @@ func New(config LC.VlessServer, tunnel C.Tunnel, additions ...inbound.Addition)
 		}()
 	}
 
-	tlsConfig := &tlsC.Config{}
+	tlsConfig := &tlsC.Config{Time: ntp.Now}
 	var realityBuilder *reality.Builder
 	var httpServer http.Server
 
diff --git a/listener/sing_vmess/server.go b/listener/sing_vmess/server.go
@@ -76,7 +76,7 @@ func New(config LC.VmessServer, tunnel C.Tunnel, additions ...inbound.Addition)
 
 	sl = &Listener{false, config, nil, service}
 
-	tlsConfig := &tlsC.Config{}
+	tlsConfig := &tlsC.Config{Time: ntp.Now}
 	var realityBuilder *reality.Builder
 	var httpServer http.Server
 
diff --git a/listener/socks/tcp.go b/listener/socks/tcp.go
@@ -15,6 +15,7 @@ import (
 	authStore "github.com/metacubex/mihomo/listener/auth"
 	LC "github.com/metacubex/mihomo/listener/config"
 	"github.com/metacubex/mihomo/listener/reality"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/socks4"
 	"github.com/metacubex/mihomo/transport/socks5"
 )
@@ -60,7 +61,7 @@ func NewWithConfig(config LC.AuthServer, tunnel C.Tunnel, additions ...inbound.A
 		return nil, err
 	}
 
-	tlsConfig := &tlsC.Config{}
+	tlsConfig := &tlsC.Config{Time: ntp.Now}
 	var realityBuilder *reality.Builder
 
 	if config.Certificate != "" && config.PrivateKey != "" {
diff --git a/listener/trojan/server.go b/listener/trojan/server.go
@@ -15,6 +15,7 @@ import (
 	LC "github.com/metacubex/mihomo/listener/config"
 	"github.com/metacubex/mihomo/listener/reality"
 	"github.com/metacubex/mihomo/listener/sing"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/gun"
 	"github.com/metacubex/mihomo/transport/shadowsocks/core"
 	"github.com/metacubex/mihomo/transport/socks5"
@@ -70,7 +71,7 @@ func New(config LC.TrojanServer, tunnel C.Tunnel, additions ...inbound.Addition)
 	}
 	sl = &Listener{false, config, nil, keys, pickCipher, h}
 
-	tlsConfig := &tlsC.Config{}
+	tlsConfig := &tlsC.Config{Time: ntp.Now}
 	var realityBuilder *reality.Builder
 	var httpServer http.Server
 
diff --git a/listener/tuic/server.go b/listener/tuic/server.go
@@ -14,6 +14,7 @@ import (
 	LC "github.com/metacubex/mihomo/listener/config"
 	"github.com/metacubex/mihomo/listener/sing"
 	"github.com/metacubex/mihomo/log"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/socks5"
 	"github.com/metacubex/mihomo/transport/tuic"
 
@@ -53,6 +54,7 @@ func New(config LC.TuicServer, tunnel C.Tunnel, additions ...inbound.Addition) (
 		return nil, err
 	}
 	tlsConfig := &tlsC.Config{
+		Time:       ntp.Now,
 		MinVersion: tlsC.VersionTLS13,
 	}
 	tlsConfig.Certificates = []tlsC.Certificate{tlsC.UCertificate(cert)}
diff --git a/transport/simple-obfs/tls.go b/transport/simple-obfs/tls.go
@@ -6,9 +6,9 @@ import (
 	"encoding/binary"
 	"io"
 	"net"
-	"time"
 
 	"github.com/metacubex/mihomo/common/pool"
+	"github.com/metacubex/mihomo/ntp"
 )
 
 const (
@@ -145,7 +145,7 @@ func makeClientHelloMsg(data []byte, server string) []byte {
 	buf.Write([]byte{0x03, 0x03})
 
 	// random with timestamp, sid len, sid
-	binary.Write(buf, binary.BigEndian, uint32(time.Now().Unix()))
+	binary.Write(buf, binary.BigEndian, uint32(ntp.Now().Unix()))
 	buf.Write(random)
 	buf.WriteByte(32)
 	buf.Write(sessionID)
diff --git a/transport/ssr/obfs/tls1.2_ticket_auth.go b/transport/ssr/obfs/tls1.2_ticket_auth.go
@@ -7,9 +7,9 @@ import (
 	"encoding/binary"
 	"net"
 	"strings"
-	"time"
 
 	"github.com/metacubex/mihomo/common/pool"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/ssr/tools"
 
 	"github.com/metacubex/randv2"
@@ -182,7 +182,7 @@ func packData(buf *bytes.Buffer, data []byte) {
 }
 
 func (t *tls12Ticket) packAuthData(buf *bytes.Buffer) {
-	binary.Write(buf, binary.BigEndian, uint32(time.Now().Unix()))
+	binary.Write(buf, binary.BigEndian, uint32(ntp.Now().Unix()))
 	tools.AppendRandBytes(buf, 18)
 	buf.Write(t.hmacSHA1(buf.Bytes()[buf.Len()-22:])[:10])
 }
diff --git a/transport/ssr/protocol/base.go b/transport/ssr/protocol/base.go
@@ -8,10 +8,10 @@ import (
 	"encoding/base64"
 	"encoding/binary"
 	"sync"
-	"time"
 
 	"github.com/metacubex/mihomo/common/pool"
 	"github.com/metacubex/mihomo/log"
+	"github.com/metacubex/mihomo/ntp"
 	"github.com/metacubex/mihomo/transport/shadowsocks/core"
 
 	"github.com/metacubex/randv2"
@@ -49,15 +49,15 @@ func (a *authData) next() *authData {
 }
 
 func (a *authData) putAuthData(buf *bytes.Buffer) {
-	binary.Write(buf, binary.LittleEndian, uint32(time.Now().Unix()))
+	binary.Write(buf, binary.LittleEndian, uint32(ntp.Now().Unix()))
 	buf.Write(a.clientID[:])
 	binary.Write(buf, binary.LittleEndian, a.connectionID)
 }
 
 func (a *authData) putEncryptedData(b *bytes.Buffer, userKey []byte, paddings [2]int, salt string) error {
 	encrypt := pool.Get(16)
 	defer pool.Put(encrypt)
-	binary.LittleEndian.PutUint32(encrypt, uint32(time.Now().Unix()))
+	binary.LittleEndian.PutUint32(encrypt, uint32(ntp.Now().Unix()))
 	copy(encrypt[4:], a.clientID[:])
 	binary.LittleEndian.PutUint32(encrypt[8:], a.connectionID)
 	binary.LittleEndian.PutUint16(encrypt[12:], uint16(paddings[0]))

Original file line number	Diff line number	Diff line change
`@@ -12,6 +12,7 @@ import (`
`12`	`12`
`13`	`13`	`"github.com/metacubex/mihomo/common/once"`
`14`	`14`	`C "github.com/metacubex/mihomo/constant"`
	`15`	`+ "github.com/metacubex/mihomo/ntp"`
`15`	`16`	`)`
`16`	`17`
`17`	`18`	`var globalCertPool *x509.CertPool`
`@@ -110,6 +111,7 @@ func GetTLSConfig(opt Option) (tlsConfig *tls.Config, err error) {`
`110`	`111`	`if tlsConfig == nil {`
`111`	`112`	`tlsConfig = &tls.Config{}`
`112`	`113`	`}`
	`114`	`+ tlsConfig.Time = ntp.Now`
`113`	`115`
`114`	`116`	`if opt.ZeroTrust {`
`115`	`117`	`tlsConfig.RootCAs = zeroTrustCertPool()`
Original file line number	Diff line number	Diff line change
`@@ -17,6 +17,7 @@ import (`
`17`	`17`	`C "github.com/metacubex/mihomo/constant"`
`18`	`18`	`LC "github.com/metacubex/mihomo/listener/config"`
`19`	`19`	`"github.com/metacubex/mihomo/listener/sing"`
	`20`	`+ "github.com/metacubex/mihomo/ntp"`
`20`	`21`	`"github.com/metacubex/mihomo/transport/anytls/padding"`
`21`	`22`	`"github.com/metacubex/mihomo/transport/anytls/session"`
`22`	`23`
`@@ -42,7 +43,7 @@ func New(config LC.AnyTLSServer, tunnel C.Tunnel, additions ...inbound.Addition)`
`42`	`43`	`}`
`43`	`44`	`}`
`44`	`45`
`45`		`- tlsConfig := &tlsC.Config{}`
	`46`	`+ tlsConfig := &tlsC.Config{Time: ntp.Now}`
`46`	`47`	`if config.Certificate != "" && config.PrivateKey != "" {`
`47`	`48`	`cert, err := ca.LoadTLSKeyPair(config.Certificate, config.PrivateKey, C.Path)`
`48`	`49`	`if err != nil {`
Original file line number	Diff line number	Diff line change
`@@ -16,6 +16,7 @@ import (`
`16`	`16`	`"github.com/metacubex/mihomo/listener/http"`
`17`	`17`	`"github.com/metacubex/mihomo/listener/reality"`
`18`	`18`	`"github.com/metacubex/mihomo/listener/socks"`
	`19`	`+ "github.com/metacubex/mihomo/ntp"`
`19`	`20`	`"github.com/metacubex/mihomo/transport/socks4"`
`20`	`21`	`"github.com/metacubex/mihomo/transport/socks5"`
`21`	`22`	`)`
`@@ -61,7 +62,7 @@ func NewWithConfig(config LC.AuthServer, tunnel C.Tunnel, additions ...inbound.A`
`61`	`62`	`return nil, err`
`62`	`63`	`}`
`63`	`64`
`64`		`- tlsConfig := &tlsC.Config{}`
	`65`	`+ tlsConfig := &tlsC.Config{Time: ntp.Now}`
`65`	`66`	`var realityBuilder *reality.Builder`
`66`	`67`
`67`	`68`	`if config.Certificate != "" && config.PrivateKey != "" {`
Original file line number	Diff line number	Diff line change
`@@ -20,6 +20,7 @@ import (`
`20`	`20`	`LC "github.com/metacubex/mihomo/listener/config"`
`21`	`21`	`"github.com/metacubex/mihomo/listener/sing"`
`22`	`22`	`"github.com/metacubex/mihomo/log"`
	`23`	`+ "github.com/metacubex/mihomo/ntp"`
`23`	`24`
`24`	`25`	`"github.com/metacubex/sing-quic/hysteria2"`
`25`	`26`
`@@ -61,6 +62,7 @@ func New(config LC.Hysteria2Server, tunnel C.Tunnel, additions ...inbound.Additi`
`61`	`62`	`return nil, err`
`62`	`63`	`}`
`63`	`64`	`tlsConfig := &tlsC.Config{`
	`65`	`+ Time: ntp.Now,`
`64`	`66`	`MinVersion: tlsC.VersionTLS13,`
`65`	`67`	`}`
`66`	`68`	`tlsConfig.Certificates = []tlsC.Certificate{tlsC.UCertificate(cert)}`
Original file line number	Diff line number	Diff line change
`@@ -15,6 +15,7 @@ import (`
`15`	`15`	`authStore "github.com/metacubex/mihomo/listener/auth"`
`16`	`16`	`LC "github.com/metacubex/mihomo/listener/config"`
`17`	`17`	`"github.com/metacubex/mihomo/listener/reality"`
	`18`	`+ "github.com/metacubex/mihomo/ntp"`
`18`	`19`	`"github.com/metacubex/mihomo/transport/socks4"`
`19`	`20`	`"github.com/metacubex/mihomo/transport/socks5"`
`20`	`21`	`)`
`@@ -60,7 +61,7 @@ func NewWithConfig(config LC.AuthServer, tunnel C.Tunnel, additions ...inbound.A`
`60`	`61`	`return nil, err`
`61`	`62`	`}`
`62`	`63`
`63`		`- tlsConfig := &tlsC.Config{}`
	`64`	`+ tlsConfig := &tlsC.Config{Time: ntp.Now}`
`64`	`65`	`var realityBuilder *reality.Builder`
`65`	`66`
`66`	`67`	`if config.Certificate != "" && config.PrivateKey != "" {`