[Feature Request] 使用tls时新增自定义san配置 - Githubissues

fatedier / frp

A fast reverse proxy to help you expose a local server behind a NAT or firewall to the internet.

Apache License 2.0

86.46k stars 13.37k forks source link

[Feature Request] 使用tls时新增自定义san配置 #2933

Closed hyhy01 closed 2 years ago

hyhy01 commented 2 years ago

Describe the feature request

错误：

 login to server failed: x509: cannot validate certificate for xxxxxxxxx because it doesn't contain any IP SANs

我没有使用自签名证书。我生成的证书的域名绑定了cdn，因此在连接frp时填写了ip而不是域名。我在用trojan-go时记得可以单独设置sni。

发现客户端可以不需要验证证书，好像也不是那么必要。

Describe alternatives you've considered

No response

Affected area

[ ] Docs
[ ] Installation
[ ] Performance and Scalability
[ ] Security
[X] User Experience
[ ] Test and Release
[ ] Developer Infrastructure
[ ] Client Plugin
[ ] Server Plugin
[ ] Extensions
[ ] Others

fatedier commented 2 years ago

https://github.com/fatedier/frp/blob/dev/conf/frpc_full.ini#L103