[GH-ISSUE #1913] [RFC] frp should have TLS certificate auth #1516

New issue

Closed

opened 2026-05-05 12:57:32 -06:00 by gitea-mirror · 5 comments

gitea-mirror commented

2026-05-05 12:57:32 -06:00

Owner

Originally created by @ghost on GitHub (Jul 22, 2020).
Original GitHub issue: https://github.com/fatedier/frp/issues/1913

https://golang.org/src/crypto/tls/auth.go

As a sad story said. the FRP token base auth may be a bit weakness.

So please provided us the TLS certificate auth.

User must have the valid private cert , to pass the auth progress.

Originally created by @ghost on GitHub (Jul 22, 2020). Original GitHub issue: https://github.com/fatedier/frp/issues/1913 https://golang.org/src/crypto/tls/auth.go <img width="627" alt="微信图片_20200722165213" src="https://user-images.githubusercontent.com/66301650/88156532-24756980-cc3c-11ea-8659-cb19359f5a2d.png"> As a sad story said. the FRP token base auth may be a bit weakness. So please provided us the TLS certificate auth. User must have the valid private cert , to pass the auth progress.

gitea-mirror

2026-05-05 12:57:32 -06:00

closed this issue
added the
todo
label

gitea-mirror commented

2026-05-05 12:57:35 -06:00

Author

Owner

@fatedier commented on GitHub (Jul 23, 2020):

We have already planned to support the certificate auth for TLS.

But maybe it's doesn't solve the problem in the image you paste. stcp is designed to avoid this security issue.

@fatedier commented on GitHub (Jul 23, 2020): We have already planned to support the certificate auth for TLS. But maybe it's doesn't solve the problem in the image you paste. [stcp](https://github.com/fatedier/frp#expose-your-service-privately) is designed to avoid this security issue.

gitea-mirror commented

2026-05-05 12:57:36 -06:00

Author

Owner

@ghost commented on GitHub (Jul 23, 2020):

I am using sctp already, but the authenticated really really need to improve. Not just by token. it's short and may be crack .
The certificate may be harder to crack

@ghost commented on GitHub (Jul 23, 2020): I am using sctp already, but the authenticated really really need to improve. Not just by token. it's short and may be crack . The certificate may be harder to crack

gitea-mirror commented

2026-05-05 12:57:37 -06:00

Author

Owner

@limaofu commented on GitHub (Aug 17, 2020):

你这个情况和frp有什么关系吗？

@limaofu commented on GitHub (Aug 17, 2020): 你这个情况和frp有什么关系吗？

gitea-mirror commented

2026-05-05 12:57:38 -06:00

Author

Owner

@QQ2017 commented on GitHub (Aug 19, 2020):