From 0c2014bb402ae3214f92d5a82ebb453e83105cc7 Mon Sep 17 00:00:00 2001
From: gVisor bot <gvisor-bot@google.com>
Date: Mon, 20 Jun 2022 22:30:04 +0800
Subject: [PATCH] fix: disable doq skip verify cert

---
 dns/doq.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dns/doq.go b/dns/doq.go
index af4c3833..aafea97f 100644
--- a/dns/doq.go
+++ b/dns/doq.go
@@ -129,7 +129,7 @@ func (dc *quicClient) getSession(ctx context.Context) (quic.Connection, error) {
 
 func (dc *quicClient) openSession(ctx context.Context) (quic.Connection, error) {
 	tlsConfig := &tls.Config{
-		InsecureSkipVerify: true,
+		InsecureSkipVerify: false,
 		NextProtos: []string{
 			NextProtoDQ,
 		},