diff --git a/README.md b/README.md index adf4e12e..7626c3e4 100644 --- a/README.md +++ b/README.md @@ -646,8 +646,8 @@ To **enforce** `frps` to only accept TLS connections - configure `transport.tls. ```toml transport.tls.enable = true -transport.tls.certFile = "certificate.crt" -transport.tls.keyFile = "certificate.key" +transport.tls.certFile = "client.crt" +transport.tls.keyFile = "client.key" transport.tls.trustedCaFile = "ca.crt" ``` @@ -655,8 +655,8 @@ transport.tls.trustedCaFile = "ca.crt" ```toml transport.tls.force = true -transport.tls.certFile = "certificate.crt" -transport.tls.keyFile = "certificate.key" +transport.tls.certFile = "server.crt" +transport.tls.keyFile = "server.key" transport.tls.trustedCaFile = "ca.crt" ``` @@ -716,6 +716,11 @@ openssl x509 -req -days 365 -sha256 \ -extfile <(printf "subjectAltName=DNS:localhost,IP:127.0.0.1,DNS:example.server.com") \ -out server.crt ``` +**Note: The above IP must be changed to your server IP, otherwise an error message will be displayed:** + +``` +tls: failed to verify certificate: x509: certificate is valid for 127.0.0.1, not your_ IP +``` * build frpc certificates: ```