[Bug]: The feature "allowInsecure" has been removed， "allowInsecure" will be removed automatically after 2026-06-01, please use "pinnedPeerCertSha256"

[zeyudada]

操作系统和版本

windows 11

预期情况

使用hysteria类型节点

实际情况

Failed to start: main: failed to load config files: [configTest5612532013057212165.json] > infra/conf: failed to build outbound config with tag proxy > infra/conf: failed to build stream settings for outbound detour > infra/conf: Failed to build TLS config. > common/errors: The feature "allowInsecure" has been removed and migrated to "pinnedPeerCertSha256". Please update your config(s) according to release note and documentation.

复现方法

只要使用hysteria类型节点均有此问题

软件日志

2026-06-01 09:05:25.0301-DEBUG CoreHandler,运行 Core 失败，请查看提示信息
2026-06-01 09:05:25.0301-DEBUG at ServiceLib.Manager.CoreManager.RunProcessNormal(String fileName, CoreInfo coreInfo, String configPath, Boolean displayLog) in /home/runner/work/v2rayN/v2rayN/v2rayN/ServiceLib/Manager/CoreManager.cs:line 275
at ServiceLib.Manager.CoreManager.RunProcess(CoreInfo coreInfo, String configPath, Boolean displayLog, Boolean mayNeedSudo) in /home/runner/work/v2rayN/v2rayN/v2rayN/ServiceLib/Manager/CoreManager.cs:line 241

内核日志

Xray 26.5.9 (Xray, Penetrates Everything.) 1bdb488 (go1.26.3 windows/amd64)

额外信息

复现使用配置如下

{
    "tag": "proxy",
    "protocol": "hysteria",
    "settings": {
        "address": "127.6.6.6",
        "port": 1234,
        "version": 2
    },
    "streamSettings": {
        "network": "hysteria",
        "security": "tls",
        "tlsSettings": {
            "allowInsecure": true,
            "serverName": "www.bing.com"
        },
        "hysteriaSettings": {
            "version": 2,
            "auth": "a23b014e-c0f1-4146-9eaf-b6891414ae31"
        },
        "finalmask": {
            "quicParams": {
                "congestion": "brutal",
                "brutalUp": "100mbps",
                "brutalDown": "100mbps",
                "udpHop": {
                    "ports": "50000-55000",
                    "interval": "30"
                }
            }
        }
    },
    "mux": {
        "enabled": false
    }
}

我确认已更新至最新版本

• 是

我确认已查询历史issues

• 是

我确认系统版本是受支持的

• 是

[xiaozou-wine]

同样的问题

[2dust]

Failed to start: main: failed to load config files: [configTest5612532013057212165.json] > infra/conf: failed to build outbound config with tag proxy > infra/conf: failed to build stream settings for outbound detour > infra/conf: Failed to build TLS config. > common/errors: The feature "allowInsecure" has been removed and migrated to "pinnedPeerCertSha256". Please update your config(s) according to release note and documentation.

功能“allowInsecure”已被移除并迁移到“pinnedPeerCertSha256”。请根据发行说明和文档更新您的配置。

请把这段翻译成你能看得懂的文字； 上面核心中文意思贴出来了。
还是不明白，可以去 xray 社区问。

[tsctsc6]

trojan 协议也有同样的问题。确实，虽然前几个月就看到这个警告，但是不明白是什么意思。我查看配置，也没看到“allowInsecure”“pinnedPeerCertSha256”这个关键字啊。之前，我也看到 v2rayN 最近的 v7.21.3 的更新日志，“xray core TLS 将移除了 allowInsecure 配置项，请使用 pinnedPeerCertSha256 代替，且支持分享，日志中会有明显提示”，我也跟随更新，依然有该警告。

[tsctsc6]

好吧，原来需要重新更新一下订阅（

[2dust]

https://xtls.github.io/config/transports/tls.html#tlsobject
搜索 allowInsecure ，写的很清楚
allowInsecure = true 已经强制启动失败了

[liyifu0302]

供应商不更新，拜拜，换clash了

[TJUTmayao]

问题是我手动从config.json 删除这项配置，重启 v2ray 后软件又将其添加回去，导致无法使用

[nanchiccc]

不懂啊，大佬们，如何解决

[nanchiccc]

今天出现相同问题

[CandyMuj]

我也是今天出现这个问题了，但是很奇怪，我没有做任何更新，为什么会突然出现这个问题呢？

[zouyongk]

换sing_box就可以了 ，先这样用着吧

[qweenhool]

我也很莫名其妙就用不了了，换clash就好了

[zz541843]

卧槽，我也是莫名其妙用不了，我服了，从来不更新这个软件，这也能中招，用了好几年了都不舍得换，失去梯子的这十几分钟我好痛苦啊...更痛苦的是没梯子的网络搞到梯子...