AetherRoute 1.2.0

Build 2026100501 · Oct 5, 2026 · Apple silicon · macOS 15+

Self-signed nodes no longer need skip-cert-verify: every TLS protocol honours a pinned certificate fingerprint and Hysteria2 / TUIC accept a custom CA, as in Mihomo; a bad certificate setting only affects its own node. Verified by the protocol interoperability gate and a six-way matrix on physical Apple Silicon.

Certificate Compatibility

VMess, VLESS, Trojan, AnyTLS, HTTP(S), SOCKS5, Hysteria2 and TUIC honour certificate pins; handshake signatures are always verified.
Hysteria2 and TUIC accept ca / ca-str; readable CA files are inlined when a profile is imported.
A bad pin or CA only makes its own node refuse to connect, with the reason.

Experience & Verification

Manual nodes gain a certificate fingerprint field; Hysteria2 links keep pinSHA256; the TUN local proxy setting explains when it is needed.
The protocol interoperability gate now checks pinning, custom CAs and wrong pins, and runs for every release.

Download and verify

AetherRoute-1.2.0-build-2026100501-arm64.dmg

SHA-256

d0ffbeca1db388df302091ac62857bc231239427d38d80e3a259e185853fb8fe

After downloading, run this in Terminal and confirm the output matches:
shasum -a 256 ~/Downloads/AetherRoute-1.2.0-build-2026100501-arm64.dmg