From 10ef29f5cdc82e21ad8c725e70eec8a598b0e690 Mon Sep 17 00:00:00 2001
From: wwqgtxx <wwqgtxx@gmail.com>
Date: Tue, 23 Dec 2025 23:15:52 +0800
Subject: [PATCH] chore: apply global ca in sudoku code

---
 transport/sudoku/obfs/httpmask/tunnel.go | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/transport/sudoku/obfs/httpmask/tunnel.go b/transport/sudoku/obfs/httpmask/tunnel.go
index 65449408..fc91c5fb 100644
--- a/transport/sudoku/obfs/httpmask/tunnel.go
+++ b/transport/sudoku/obfs/httpmask/tunnel.go
@@ -18,6 +18,8 @@ import (
 	"sync"
 	"time"
 
+	"github.com/metacubex/mihomo/component/ca"
+
 	"github.com/metacubex/http"
 	"github.com/metacubex/http/httputil"
 	"github.com/metacubex/tls"
@@ -211,9 +213,12 @@ func newHTTPClient(serverAddress string, opts TunnelDialOptions, maxIdleConns in
 		},
 	}
 	if scheme == "https" {
-		transport.TLSClientConfig = &tls.Config{
+		transport.TLSClientConfig, err = ca.GetTLSConfig(ca.Option{TLSConfig: &tls.Config{
 			ServerName: serverName,
 			MinVersion: tls.VersionTLS12,
+		}})
+		if err != nil {
+			return nil, httpClientTarget{}, err
 		}
 	}