{"record":{"id":"e1da327b07d522a3","repo":"XTLS/Xray-core","slug":"incorrect-pinnedpeercertsha256-length","errorCode":null,"errorMessage":"incorrect pinnedPeerCertSha256 length: ","messagePattern":"incorrect pinnedPeerCertSha256 length: ","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"infra/conf/transport_security.go","lineNumber":376,"sourceCode":"\tconfig.RejectUnknownSni = c.RejectUnknownSNI\n\tconfig.MasterKeyLog = c.MasterKeyLog\n\n\tif c.AllowInsecure {\n\t\treturn nil, errors.PrintRemovedFeatureError(`\"allowInsecure\"`, `\"pinnedPeerCertSha256\"(pcs) and \"verifyPeerCertByName\"(vcn)`)\n\t}\n\tif c.PinnedPeerCertSha256 != \"\" {\n\t\tfor v := range strings.SplitSeq(c.PinnedPeerCertSha256, \",\") {\n\t\t\tv = strings.TrimSpace(v)\n\t\t\tif v == \"\" {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\t// remove colons for OpenSSL format\n\t\t\thashValue, err := hex.DecodeString(strings.ReplaceAll(v, \":\", \"\"))\n\t\t\tif err != nil {\n\t\t\t\treturn nil, err\n\t\t\t}\n\t\t\tif len(hashValue) != 32 {\n\t\t\t\treturn nil, errors.New(\"incorrect pinnedPeerCertSha256 length: \", v)\n\t\t\t}\n\t\t\tconfig.PinnedPeerCertSha256 = append(config.PinnedPeerCertSha256, hashValue)\n\t\t}\n\t}\n\tif c.VerifyPeerCertByName != \"\" {\n\t\tfor v := range strings.SplitSeq(c.VerifyPeerCertByName, \",\") {\n\t\t\tv = strings.TrimSpace(v)\n\t\t\tif v == \"\" {\n\t\t\t\tcontinue\n\t\t\t}\n\t\t\tconfig.VerifyPeerCertByName = append(config.VerifyPeerCertByName, v)\n\t\t}\n\t}\n\n\tif c.ECHServerKeys != \"\" {\n\t\tEchPrivateKey, err := base64.StdEncoding.DecodeString(c.ECHServerKeys)\n\t\tif err != nil {\n\t\t\treturn nil, errors.New(\"invalid ECH Config\", c.ECHServerKeys)","sourceCodeStart":358,"sourceCodeEnd":394,"githubUrl":"https://github.com/XTLS/Xray-core/blob/7d214f8b094f75322fa3990f8aadad1c912f24f5/infra/conf/transport_security.go#L358-L394","documentation":"Error \"incorrect pinnedPeerCertSha256 length: \" thrown in XTLS/Xray-core.","triggerScenarios":"Thrown at infra/conf/transport_security.go:376 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"7d214f8b094f75322fa3990f8aadad1c912f24f5","analyzedAt":"2026-08-15T14:26:24.325Z","schemaVersion":2},"datasetVersion":"2026-08-15T17:31:12.345Z"}