Removed X25519MLKEM768 from optional supported groups

proxy/fake_tls.py

@@ -272,6 +272,7 @@ async def probe_appdata_len(domain: str, port: int = 443,
     writer = None
     try:
         ctx = ssl.create_default_context()
+        ctx.set_ecdh_curve('X25519')
         ctx.check_hostname = False
         ctx.verify_mode = ssl.CERT_NONE
         ctx.minimum_version = ssl.TLSVersion.TLSv1_3

proxy/utils.py

@@ -149,6 +149,7 @@ def create_ssl_context(*, check_hostname: bool = True) -> ssl.SSLContext:
               if bundle_dir else certifi.where())
     context = ssl.create_default_context(cafile=cafile)
     context.load_default_certs()
+    context.set_ecdh_curve('X25519')
     context.check_hostname = check_hostname
     return context