mirror of https://github.com/huashengdun/webssh
Fixed typo
parent
0c6f740e39
commit
2755a9871c
|
@ -133,7 +133,7 @@ location / {
|
||||||
|
|
||||||
Running as a standalone server
|
Running as a standalone server
|
||||||
```bash
|
```bash
|
||||||
wssh --port=8080 --sslport=4433 --certfile='/path/to/cert.crt' --keyfile='/path/to/cert.key' --xheaders=False --policy=reject
|
wssh --port=8080 --sslport=4433 --certfile='cert.crt' --keyfile='cert.key' --xheaders=False --policy=reject
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
@ -141,4 +141,4 @@ wssh --port=8080 --sslport=4433 --certfile='/path/to/cert.crt' --keyfile='/path/
|
||||||
|
|
||||||
* For whatever deployment choice you choose, don't forget to enable SSL.
|
* For whatever deployment choice you choose, don't forget to enable SSL.
|
||||||
* If you choose running this app as a standalone server, redirecting http to https is enabled by default, and only http requests from a public network will be redirected.
|
* If you choose running this app as a standalone server, redirecting http to https is enabled by default, and only http requests from a public network will be redirected.
|
||||||
* Try to use reject policy as the missing host key policy along with your verified known_hosts, this will prevent man-in-the-middle attacks. The idea is that it checks the system host keys file("~/.ssh/known_hosts") and the application host keys file("./known_hosts") in order, if the ssh server's hostname is not found or the key is not matched, the connection will be ab
|
* Try to use reject policy as the missing host key policy along with your verified known_hosts, this will prevent man-in-the-middle attacks. The idea is that it checks the system host keys file("~/.ssh/known_hosts") and the application host keys file("./known_hosts") in order, if the ssh server's hostname is not found or the key is not matched, the connection will be aborted.
|
||||||
|
|
|
@ -145,7 +145,7 @@ Running as a standalone server
|
||||||
|
|
||||||
.. code:: bash
|
.. code:: bash
|
||||||
|
|
||||||
wssh --port=8080 --sslport=4433 --certfile='/path/to/cert.crt' --keyfile='/path/to/cert.key' --xheaders=False --policy=reject
|
wssh --port=8080 --sslport=4433 --certfile='cert.crt' --keyfile='cert.key' --xheaders=False --policy=reject
|
||||||
|
|
||||||
Tips
|
Tips
|
||||||
----
|
----
|
||||||
|
@ -160,7 +160,7 @@ Tips
|
||||||
attacks. The idea is that it checks the system host keys
|
attacks. The idea is that it checks the system host keys
|
||||||
file("~/.ssh/known\_hosts") and the application host keys
|
file("~/.ssh/known\_hosts") and the application host keys
|
||||||
file("./known\_hosts") in order, if the ssh server's hostname is not
|
file("./known\_hosts") in order, if the ssh server's hostname is not
|
||||||
found or the key is not matched, the connection will be ab
|
found or the key is not matched, the connection will be aborted.
|
||||||
|
|
||||||
.. |Build Status| image:: https://travis-ci.org/huashengdun/webssh.svg?branch=master
|
.. |Build Status| image:: https://travis-ci.org/huashengdun/webssh.svg?branch=master
|
||||||
:target: https://travis-ci.org/huashengdun/webssh
|
:target: https://travis-ci.org/huashengdun/webssh
|
||||||
|
|
Loading…
Reference in New Issue