Files
ykxmz/_build/wire_tls_compat.py
xmz7891 b62ac865ea ykxmz 1.5.0:修复手表端 TLS 证书校验 + MTU 修复网络稳定性
被控端
- 修复 MTU 问题:夹 MSS + 路径 MTU 探测(公网可用率 48% -> 100%)
- 复用 HTTP 连接(免掉每次新建 TLS 的 30% 握手失败)
- 每分钟回头找局域网,自动切回快 400 倍的路径
- 画面心跳帧:静止时省流量,客户端仍知道流是活的
- 锁屏时给出可操作的提示

手表端
- 内置 GTS Root R4 / GlobalSign Root CA,修 SSLHandshakeException
- 连接错误翻译成人话(证书/时间/解析/超时分别提示)
- 经中转连上后用服务器报的地址刷新已配对记录
- 新增局域网连接页面、服务器延迟检测

服务器端
- 支持 chunked 请求体(修每 16 秒一次的连接错乱与大面积 502)
- 网络调优脚本 net-tune.sh(开机自动应用)
- 管理页:批量删除、网络体检、下载区
- 隧道改 HTTP/2 + 双连接

文档
- 许可协议 / 安装前必读 / 安装后须知(作者:小麦子)
2026-10-06 19:01:05 +08:00

111 lines
4.1 KiB
Python
Raw Permalink Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
# -*- coding: utf-8 -*-
"""把 TlsCompat 接进 RelayTransport —— 让 HTTPS 用上内置根证书。
原来:
(HttpURLConnection) new URL(baseUrl + path).openConnection();
HTTPS 时拿到的是 HttpsURLConnection,用的是**系统默认** SSL 上下文。
老手表缺 GTS Root R4 -> Chain validation failed。
改后:
TlsCompat.open(...) -> 挂上"系统库 或 内置库"的组合信任。
"""
from __future__ import annotations
import ast
import sys
from pathlib import Path
ROOT = Path(r"C:\Users\shu\Desktop\deepseekagent\LanRemote")
TRANSPORT = (ROOT / "android" / "src" / "com" / "lanremote" / "watch"
/ "RelayTransport.java")
TLS = (ROOT / "android" / "src" / "com" / "lanremote" / "watch"
/ "TlsCompat.java")
# ---------- 1. RelayTransport 改用它 ----------
OLD = ''' HttpURLConnection connection =
(HttpURLConnection) new URL(baseUrl + path).openConnection();
try {
connection.setRequestMethod("POST");'''
NEW = ''' // 走 TlsCompat:老手表缺根证书时用内置的那两个补上。
// 不这么改会报 SSLHandshakeException: Chain validation failed
// (廉价手表的系统根证书库常缺 GTS Root R4)。
HttpURLConnection connection = TlsCompat.open(baseUrl + path);
try {
connection.setRequestMethod("POST");'''
# ---------- 2. TlsCompat.open 改成抛 IOException ----------
SIG_OLD = ''' public static HttpURLConnection open(String urlText, int timeoutMs)
throws Exception {
HttpURLConnection connection =
(HttpURLConnection) new URL(urlText).openConnection();
connection.setConnectTimeout(timeoutMs);
connection.setReadTimeout(timeoutMs);
connection.setRequestProperty("User-Agent", "LanRemote/1.4.0");
connection.setRequestProperty("Accept-Encoding", "identity");
if (connection instanceof HttpsURLConnection) {
SSLSocketFactory ssl = factory();
if (ssl != null) {
((HttpsURLConnection) connection).setSSLSocketFactory(ssl);
}
}
return connection;
}'''
SIG_NEW = ''' public static HttpURLConnection open(String urlText) throws IOException {
HttpURLConnection connection =
(HttpURLConnection) new URL(urlText).openConnection();
connection.setUseCaches(false);
if (connection instanceof HttpsURLConnection) {
SSLSocketFactory ssl = factory();
if (ssl != null) {
((HttpsURLConnection) connection).setSSLSocketFactory(ssl);
}
}
return connection;
}'''
def main() -> int:
ok = True
# ---- RelayTransport ----
text = TRANSPORT.read_text(encoding="utf-8")
if "TlsCompat.open(" in text:
print(" RelayTransport 已经改过")
elif OLD in text:
text = text.replace(OLD, NEW, 1)
TRANSPORT.write_text(text, encoding="utf-8", newline="\n")
print(" RelayTransport:改用 TlsCompat.open()")
else:
print(" [失败] RelayTransport 锚点没找到")
ok = False
# ---- TlsCompat 签名 ----
text = TLS.read_text(encoding="utf-8")
if SIG_OLD in text:
text = text.replace(SIG_OLD, SIG_NEW, 1)
TLS.write_text(text, encoding="utf-8", newline="\n")
print(" TlsCompat:open() 改成抛 IOException")
elif "throws IOException" in text and "TlsCompat.open" not in text:
print(" TlsCompat:签名已经是 IOException")
else:
print(" TlsCompat:签名已经改过")
# ---- 补 import ----
text = TLS.read_text(encoding="utf-8")
if "import java.io.IOException;" not in text:
text = text.replace("import java.io.ByteArrayInputStream;",
"import java.io.ByteArrayInputStream;\n"
"import java.io.IOException;", 1)
TLS.write_text(text, encoding="utf-8", newline="\n")
print(" TlsCompat:补了 import java.io.IOException")
return 0 if ok else 1
if __name__ == "__main__":
sys.exit(main())