【注意：此文章为博主原创文章！转载需注意，请带原文链接，至少也要是txt格式！】

有很多朋友在使用openclash的时候会出现如下错误，比如使用机场或者自建VPS的科学上网节点的时候，报错如下：

2025-06-03 22:05:00 level=warning msg="[TCP] dial  漏网之鱼 (match Match/) 10.10.10.20:2630 --> derp25c.tailscale.com:443 error: aexgzbgp01.00117163.xyz:14391 connect error: tls: failed to verify certificate: x509: certificate relies on legacy Common Name field, use SANs instead"

2025-06-03 22:07:21 level=warning msg="because  香港节点 failed multiple times, active health check"
2025-06-03 22:07:21 level=warning msg="[TCP] dial  漏网之鱼 (match Match/) 10.10.10.20:7368 --> api.segment.io:443 error: aexgzbgp01.00117163.xyz:14391 connect error: tls: failed to verify certificate: x509: certificate relies on legacy Common Name field, use SANs instead"
2025-06-03 22:07:20 level=warning msg="[TCP] dial  漏网之鱼 (match Match/) 10.10.10.20:7368 --> api.segment.io:443 error: aexgzbgp01.00117163.xyz:14391 connect error: tls: failed to verify certificate: x509: certificate relies on legacy Common Name field, use SANs instead"
2025-06-03 22:07:20 level=warning msg="[TCP] dial  漏网之鱼 (match Match/) 10.10.10.20:7368 --> api.segment.io:443 error: aexgzbgp01.00117163.xyz:14391 connect error: tls: failed to verify certificate: x509: certificate relies on legacy Common Name field, use SANs instead"
2025-06-03 22:07:19 level=warning msg="because  香港节点 failed multiple times, active health check"
2025-06-03 22:07:19 level=warning msg="[TCP] dial  漏网之鱼 (match Match/) 10.10.10.20:7357 --> www.notion.so:443 error: aexgzbgp01.00117163.xyz:14391 connect error: tls: failed to verify certificate: x509: certificate relies on legacy Common Name field, use SANs instead"

对于上述的问题，其实就是你本机的Openclash连接节点的时候，没有成功。更主要的是，比如你的节点是aexgzbgp01.00117163.xyz:14391，现在openclash连接不上这个aexgzbgp01.00117163.xyz域名。

针对这个问题如何解决呢，其实也简单，要么换成IP，要么可以去覆写设置 dns里面把域名加到fakeip黑名单就行了！