Merge b57bba48a9a35fdbea1a620260a7cb5a71a65354 into cf025d63207b4a2872ba946dc32ab56b3f98053a

This commit is contained in:
2024-02-04 18:02:31 +08:00 committed by GitHub
commit 4d0e30fbaa
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -646,8 +646,8 @@ To **enforce** `frps` to only accept TLS connections - configure `transport.tls.
```toml ```toml
transport.tls.enable = true transport.tls.enable = true
transport.tls.certFile = "certificate.crt" transport.tls.certFile = "client.crt"
transport.tls.keyFile = "certificate.key" transport.tls.keyFile = "client.key"
transport.tls.trustedCaFile = "ca.crt" transport.tls.trustedCaFile = "ca.crt"
``` ```
@ -655,8 +655,8 @@ transport.tls.trustedCaFile = "ca.crt"
```toml ```toml
transport.tls.force = true transport.tls.force = true
transport.tls.certFile = "certificate.crt" transport.tls.certFile = "server.crt"
transport.tls.keyFile = "certificate.key" transport.tls.keyFile = "server.key"
transport.tls.trustedCaFile = "ca.crt" transport.tls.trustedCaFile = "ca.crt"
``` ```
@ -716,6 +716,11 @@ openssl x509 -req -days 365 -sha256 \
-extfile <(printf "subjectAltName=DNS:localhost,IP:127.0.0.1,DNS:example.server.com") \ -extfile <(printf "subjectAltName=DNS:localhost,IP:127.0.0.1,DNS:example.server.com") \
-out server.crt -out server.crt
``` ```
**Note: The above IP must be changed to your server IP, otherwise an error message will be displayed:**
```
tls: failed to verify certificate: x509: certificate is valid for 127.0.0.1, not your_ IP
```
* build frpc certificates * build frpc certificates
``` ```