[GH-ISSUE #2580] [Feature Request] 启用TLS后，当服务端单向鉴权客户端时，以安全的方法传入证书

No labels

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/frp#2054

gitea-mirror commented

2026-05-05 13:19:29 -06:00

Owner

Originally created by @RuofengX on GitHub (Sep 17, 2021).
Original GitHub issue: https://github.com/fatedier/frp/issues/2580

Describe the feature request

单向鉴权场景中，客户端的tls证书文件明文暴露在用户的电脑中，恶意用户可以通过获取泄漏的证书来制造中间人攻击。
用户电脑环境往往缺乏完善的权限机制和安全保护。

Describe alternatives you've considered

启动后对密钥文件进行必要的加密，并进行替换；
使用stdin或命令行启动参数提供加密密码；
类似实现有OpenSSL客户端

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @RuofengX on GitHub (Sep 17, 2021). Original GitHub issue: https://github.com/fatedier/frp/issues/2580 ### Describe the feature request 单向鉴权场景中，客户端的tls证书文件明文暴露在用户的电脑中，恶意用户可以通过获取泄漏的证书来制造中间人攻击。用户电脑环境往往缺乏完善的权限机制和安全保护。 ### Describe alternatives you've considered 启动后对密钥文件进行必要的加密，并进行替换；使用stdin或命令行启动参数提供加密密码；类似实现有OpenSSL客户端 ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [ ] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [ ] Client Plugin - [ ] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror closed this issue

2026-05-05 13:19:30 -06:00

Rows
Columns

[GH-ISSUE #2580] [Feature Request] 启用TLS后，当服务端单向鉴权客户端时，以安全的方法传入证书 #2054

Describe the feature request

Describe alternatives you've considered

Affected area