[GH-ISSUE #3318] [Feature Request] Please clarify TLS usage in the docs

gitea-mirror commented

2026-05-05 13:42:52 -06:00

Owner

Originally created by @AndrewBedscastle on GitHub (Feb 17, 2023).
Original GitHub issue: https://github.com/fatedier/frp/issues/3318

Describe the feature request

in frpc.ini I have
tls_enable = true
in frps.ini I have
tls_only = true

That works fine. According to wireshark it's encrypted

I did not configure

tls_cert_file = certificate.crt
tls_key_file = certificate.key
tls_trusted_ca_file = ca.crt

Docs say:

You will need a root CA cert and at least one SSL/TLS certificate. It can be self-signed or regular (such as Let's Encrypt or another SSL/TLS certificate provider).

Even though I did not configure it, it works without adding certificates. What happens in this case? Does it use generated certs?
Please clarify in the docs

Thank you very much

PS: Awesome project, Thank you very much <3

Describe alternatives you've considered

No response

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @AndrewBedscastle on GitHub (Feb 17, 2023). Original GitHub issue: https://github.com/fatedier/frp/issues/3318 ### Describe the feature request in frpc.ini I have `tls_enable = true` in frps.ini I have `tls_only = true` That works fine. According to wireshark it's encrypted I did not configure ``` tls_cert_file = certificate.crt tls_key_file = certificate.key tls_trusted_ca_file = ca.crt ``` Docs say: > You will need a root CA cert and at least one SSL/TLS certificate. It can be self-signed or regular (such as Let's Encrypt or another SSL/TLS certificate provider). Even though I did not configure it, it works without adding certificates. What happens in this case? Does it use generated certs? Please clarify in the docs Thank you very much PS: Awesome project, Thank you very much <3 ### Describe alternatives you've considered _No response_ ### Affected area - [X] Docs - [ ] Installation - [ ] Performance and Scalability - [X] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [ ] Client Plugin - [ ] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror

2026-05-05 13:42:52 -06:00

closed this issue
added the
lifecycle/stale
label

gitea-mirror commented

2026-05-05 13:42:55 -06:00

Author

Owner

@fatedier commented on GitHub (Feb 22, 2023):

It uses auto generated certs in memory.

@fatedier commented on GitHub (Feb 22, 2023): It uses auto generated certs in memory.

gitea-mirror commented

2026-05-05 13:42:56 -06:00

Author

Owner

@github-actions[bot] commented on GitHub (Mar 25, 2023):

Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.

@github-actions[bot] commented on GitHub (Mar 25, 2023): Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.

gitea-mirror commented

2026-05-05 13:42:57 -06:00

Author

Owner

@yuliu commented on GitHub (Jun 4, 2024):

IMO, the TLS configuration is well documented in frp docs' Chinese version at https://gofrp.org/zh-cn/docs/features/common/network/network-tls/ , and the English version of README.md in the repo may be updated accordingly.

@yuliu commented on GitHub (Jun 4, 2024): IMO, the TLS configuration is well documented in frp docs' Chinese version at https://gofrp.org/zh-cn/docs/features/common/network/network-tls/ , and the English version of README.md in the repo may be updated accordingly.

gitea-mirror referenced this issue

2026-05-05 14:45:17 -06:00

[PR #2656] [CLOSED] Added startup file for init.d #4607