diff --git a/Cargo.lock b/Cargo.lock
index ca4023a0d..7997328a8 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -647,7 +647,7 @@ dependencies = [
  "public-suffix",
  "rand",
  "regex",
- "rustls",
+ "rustls 0.21.6",
  "security-framework",
  "serde",
  "serde_yaml",
@@ -2271,6 +2271,18 @@ dependencies = [
  "webpki",
 ]
 
+[[package]]
+name = "rustls"
+version = "0.21.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1feddffcfcc0b33f5c6ce9a29e341e4cd59c3f78e7ee45f4a40c038b1d6cbb"
+dependencies = [
+ "log",
+ "ring",
+ "rustls-webpki",
+ "sct",
+]
+
 [[package]]
 name = "rustls-pemfile"
 version = "1.0.3"
@@ -2280,6 +2292,16 @@ dependencies = [
  "base64 0.21.2",
 ]
 
+[[package]]
+name = "rustls-webpki"
+version = "0.101.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7d93931baf2d282fff8d3a532bbfd7653f734643161b87e3e01e59a04439bf0d"
+dependencies = [
+ "ring",
+ "untrusted",
+]
+
 [[package]]
 name = "rustversion"
 version = "1.0.14"
@@ -2772,7 +2794,7 @@ version = "0.23.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "c43ee83903113e03984cb9e5cebe6c04a5116269e900e3ddba8f068a62adda59"
 dependencies = [
- "rustls",
+ "rustls 0.20.8",
  "tokio",
  "webpki",
 ]
@@ -2999,7 +3021,7 @@ dependencies = [
  "ipnet",
  "lazy_static",
  "rand",
- "rustls",
+ "rustls 0.20.8",
  "rustls-pemfile",
  "smallvec",
  "thiserror",
diff --git a/clash_lib/Cargo.toml b/clash_lib/Cargo.toml
index 983a9f7cd..de2cd2be7 100644
--- a/clash_lib/Cargo.toml
+++ b/clash_lib/Cargo.toml
@@ -54,7 +54,7 @@ serde_yaml = "0.9"
 trust-dns-client = "0.22"
 trust-dns-proto = { version = "0.22", features = ["dns-over-rustls", "dns-over-https-rustls"]}
 # DoH
-rustls = { version  = "0.20", features=["dangerous_configuration"] }
+rustls = { version  = "0.21", features=["dangerous_configuration"] }
 webpki-roots = "0.22"
 dhcproto = "0.8"