Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

最新版gost无法创建证书,与文档不一致 #605

Open
revintec opened this issue Nov 5, 2024 · 2 comments
Open

最新版gost无法创建证书,与文档不一致 #605

revintec opened this issue Nov 5, 2024 · 2 comments

Comments

@revintec
Copy link

revintec commented Nov 5, 2024

使用 gost_3.0.0-nightly.20241102_darwin_arm64 当前的最新版

单独运行 gost
创建 gost.yaml 并运行 gost, 并运行 gost -C gost.yaml

tls:
  validity: 87600h
  commonName: gost.run
  organization: GOST

创建 gost.yaml 并运行 gost -C gost.yaml -L socks5+tls://...@:... -F ...

均不能在运行目录自动生成证书,与文档不符
https://gost.run/tutorials/tls/#_1
image

目录放在 ~/Downloads 下面和放在 ~ 下面都无法生成证书,运行 gost 的终端已被授权访问磁盘上的所有文件

@telanflow
Copy link

自动生成证书不会生成文件,而是直接生成后使用的。生成的证书公钥私钥都在内存里

@revintec
Copy link
Author

revintec commented Nov 9, 2024

@telanflow 感谢回复.我的疑问是,socks+tls的证书,如果不能导出成文件并配置到shadowsocks iOS客户端中,是否存在中间人攻击并截获socks认证用户名和密码的可能?我感觉只有tls客户端+服务端证书双向认证是不是才安全

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants