[BUG]TLS1.3下无法正确使用指定的密码套件

[CC-3301]

配置
"tlsSettings": {
"rejectUnknownSni": true,
"minVersion": "1.3",
"cipherSuites": "TLS_CHACHA20_POLY1305_SHA256",
"certificates": [
{
"certificateFile": "path",
"keyFile": "path"
}
]
}
TLS1.3抓包

TLS1.2下则正常
"tlsSettings": {
"rejectUnknownSni": true,
"minVersion": "1.2",
"maxVersion": "1.2",
"cipherSuites": "TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256",
"certificates": [
{
"certificateFile": "path",
"keyFile": "path"
}
]
}
TLS1.2抓包

[cross-hello]

UTLS has changed ciphersuites of client, so it may be can't specify explicity.

[CC-3301]

UTLS has changed ciphersuites of client, so it may be can't specify explicity.

Even if UTLS is not used, TLS1.3 cannot use the specified cipher suite
However, if TLS1.2 is used, the specified cipher suite works properly with or without UTLS

[cross-hello]

Can you pose the cipher suites of server?

[yuhan6665]

It is not supported by Go.
golang/go#29349 (comment)