frp/Release.md at 26742060b1e55a64509f4d0bfb073470f81f1af3

mirror of https://github.com/fatedier/frp.git synced 2026-10-18 17:23:28 +08:00

Files

T

fatedierandGitHub 26742060b1 feat(client): add useSystemCa and combine it with trustedCaFile (#5572 )

Move the frpc-only TLS option into the shared TLSConfig as
transport.tls.useSystemCa, replacing the unpublished useSystemRoots.
When set, frpc verifies the server with the system CAs; when
trustedCaFile is also set, its CAs are appended to the system pool so
both are trusted. Failures to load either source abort the connection
instead of falling back. Enabling the option without effective TLS is a
configuration error, and the field is rejected in frps transport.tls
and in both webServer.tls sections.

Fixes #5545

2026-10-18 16:00:02 +08:00

120 B

Raw Blame History

Features

frpc can verify server certificates using system CAs, optionally combined with CAs from trustedCaFile.

120 B Raw Blame History

Features

120 B

Raw Blame History