[GH-ISSUE #3385] [Feature Request] 请问能使用自己用IP地址生成的SSL证书吗？

gitea-mirror commented

2026-05-05 13:44:43 -06:00

Owner

Copy link

Originally created by @itsyuyi on GitHub (Apr 2, 2023).
Original GitHub issue: https://github.com/fatedier/frp/issues/3385

Describe the feature request

自己用IP地址制作了SSL证书，想通过vhost_https_port实现内网穿透。

Describe alternatives you've considered

No response

Affected area

Docs
Installation
Performance and Scalability
Security
User Experience
Test and Release
Developer Infrastructure
Client Plugin
Server Plugin
Extensions
Others

Originally created by @itsyuyi on GitHub (Apr 2, 2023). Original GitHub issue: https://github.com/fatedier/frp/issues/3385 ### Describe the feature request 自己用IP地址制作了SSL证书，想通过vhost_https_port实现内网穿透。 ### Describe alternatives you've considered _No response_ ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [X] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [ ] Client Plugin - [ ] Server Plugin - [ ] Extensions - [ ] Others

gitea-mirror

2026-05-05 13:44:43 -06:00

closed this issue
added the
lifecycle/stale
label

gitea-mirror commented

2026-05-05 13:44:47 -06:00

Author

Owner

Copy link

@Becods commented on GitHub (Apr 3, 2023):

vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以

实践是检验真理的唯一标准

@Becods commented on GitHub (Apr 3, 2023): vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以 **实践是检验真理的唯一标准**

gitea-mirror commented

2026-05-05 13:44:48 -06:00

Author

Owner

Copy link

@xqzr commented on GitHub (Apr 9, 2023):

vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以

实践是检验真理的唯一标准

vhost_http 依靠 host。
vhost_https 依靠 SNI。但 IP 访问不带 SNI。

@xqzr commented on GitHub (Apr 9, 2023): > vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以 > > **实践是检验真理的唯一标准** `vhost_http` 依靠 host。 `vhost_https` 依靠 SNI。但 IP 访问不带 SNI。

gitea-mirror commented

2026-05-05 13:44:48 -06:00

Author

Owner

Copy link

@xqzr commented on GitHub (Apr 9, 2023):

type = tcp

@xqzr commented on GitHub (Apr 9, 2023): `type = tcp`

gitea-mirror commented

2026-05-05 13:44:49 -06:00

Author

Owner

Copy link

@itsyuyi commented on GitHub (Apr 16, 2023):

vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以

实践是检验真理的唯一标准

如何添加host标头？

@itsyuyi commented on GitHub (Apr 16, 2023): > vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以 > > **实践是检验真理的唯一标准** 如何添加host标头？

gitea-mirror commented

2026-05-05 13:44:50 -06:00

Author

Owner

Copy link

@itsyuyi commented on GitHub (Apr 16, 2023):

vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以
实践是检验真理的唯一标准

vhost_http 依靠 host。 vhost_https 依靠 SNI。但 IP 访问不带 SNI。

你的意思是不能用IP地址生成的SSL证书？

@itsyuyi commented on GitHub (Apr 16, 2023): > > vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以 > > **实践是检验真理的唯一标准** > > `vhost_http` 依靠 host。 `vhost_https` 依靠 SNI。但 IP 访问不带 SNI。你的意思是不能用IP地址生成的SSL证书？

gitea-mirror commented

2026-05-05 13:44:50 -06:00

Author

Owner

Copy link

@itsyuyi commented on GitHub (Apr 16, 2023):

type = tcp

frpc的配置文件里是按照这个配置的

@itsyuyi commented on GitHub (Apr 16, 2023): > `type = tcp` frpc的配置文件里是按照这个配置的

gitea-mirror commented

2026-05-05 13:44:50 -06:00

Author

Owner

Copy link

@itsyuyi commented on GitHub (Apr 16, 2023):

亲测有效

@itsyuyi commented on GitHub (Apr 16, 2023): > 亲测有效

gitea-mirror commented

2026-05-05 13:44:51 -06:00

Author

Owner

Copy link

@xqzr commented on GitHub (Apr 17, 2023):

vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以
实践是检验真理的唯一标准

vhost_http 依靠 host。 vhost_https 依靠 SNI。但 IP 访问不带 SNI。

你的意思是不能用IP地址生成的SSL证书？

可以，但需要 type = tcp

@xqzr commented on GitHub (Apr 17, 2023): > > > vhost 依靠 host 标头，而 ip访问也会带 host 标头，你猜可不可以 > > > **实践是检验真理的唯一标准** > > > > > > `vhost_http` 依靠 host。 `vhost_https` 依靠 SNI。但 IP 访问不带 SNI。 > > 你的意思是不能用IP地址生成的SSL证书？可以，但需要 `type = tcp`

gitea-mirror commented

2026-05-05 13:44:51 -06:00

Author

Owner

Copy link

@github-actions[bot] commented on GitHub (May 18, 2023):

Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.

@github-actions[bot] commented on GitHub (May 18, 2023): Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.

No Branch/Tag specified