[GH-ISSUE #3710] [Feature Request] How to configure SNI in frps.toml? #2954

Closed
opened 2026-05-05 13:54:26 -06:00 by gitea-mirror · 3 comments
Owner

Originally created by @SidneyLann on GitHub (Oct 22, 2023).
Original GitHub issue: https://github.com/fatedier/frp/issues/3710

Describe the feature request

Every subdomains have their own certification files, how to confige them? ERR_SSL_UNRECOGNIZED_NAME_ALERT alert if configue only one cert file.

Describe alternatives you've considered

transport.tls.certFile.www = "www.pc.com_bundle.crt"
transport.tls.keyFile.www = "www.pc.com.key"

transport.tls.certFile.sz = "sz.pc.com_bundle.crt"
transport.tls.keyFile.sz = "sz.pc.com.key"

transport.tls.certFile.sh = "sh.pc.com_bundle.crt"
transport.tls.keyFile.sh = "sh.pc.com.key"

Affected area

  • Docs
  • Installation
  • Performance and Scalability
  • Security
  • User Experience
  • Test and Release
  • Developer Infrastructure
  • Client Plugin
  • Server Plugin
  • Extensions
  • Others
Originally created by @SidneyLann on GitHub (Oct 22, 2023). Original GitHub issue: https://github.com/fatedier/frp/issues/3710 ### Describe the feature request Every subdomains have their own certification files, how to confige them? ERR_SSL_UNRECOGNIZED_NAME_ALERT alert if configue only one cert file. ### Describe alternatives you've considered transport.tls.certFile.www = "www.pc.com_bundle.crt" transport.tls.keyFile.www = "www.pc.com.key" transport.tls.certFile.sz = "sz.pc.com_bundle.crt" transport.tls.keyFile.sz = "sz.pc.com.key" transport.tls.certFile.sh = "sh.pc.com_bundle.crt" transport.tls.keyFile.sh = "sh.pc.com.key" ### Affected area - [ ] Docs - [ ] Installation - [ ] Performance and Scalability - [ ] Security - [ ] User Experience - [ ] Test and Release - [ ] Developer Infrastructure - [ ] Client Plugin - [x] Server Plugin - [ ] Extensions - [ ] Others
gitea-mirror 2026-05-05 13:54:26 -06:00
Author
Owner

@fatedier commented on GitHub (Oct 23, 2023):

transport.tls in frps.toml is used for connections from frpc, not user.

Your current requirement is not supported. I suggest using a proxy like nginx.

<!-- gh-comment-id:1774340064 --> @fatedier commented on GitHub (Oct 23, 2023): `transport.tls` in frps.toml is used for connections from frpc, not user. Your current requirement is not supported. I suggest using a proxy like nginx.
Author
Owner

@SidneyLann commented on GitHub (Oct 26, 2023):

How spring cloud gateway or nginx forward to frp?

<!-- gh-comment-id:1781026443 --> @SidneyLann commented on GitHub (Oct 26, 2023): How spring cloud gateway or nginx forward to frp?
Author
Owner

@github-actions[bot] commented on GitHub (Nov 26, 2023):

Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.

<!-- gh-comment-id:1826453326 --> @github-actions[bot] commented on GitHub (Nov 26, 2023): Issues go stale after 30d of inactivity. Stale issues rot after an additional 7d of inactivity and eventually close.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/frp#2954
No description provided.