jinql
/
webssh
mirror of https://github.com/huashengdun/webssh
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Updated README

pull/58/head
Sheng 2018-12-15 21:40:16 +08:00
parent 47fb789a7e
commit c126856daa
2 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
README.md
View File

@ -69,7 +69,7 @@ wssh --log-file-prefix=main.log
wssh --help wssh --help
``` ```
### Use console ### Browser console
```javascript ```javascript
// connect to your ssh server // connect to your ssh server
@ -140,5 +140,5 @@ wssh --port=8080 --sslport=4433 --certfile='cert.crt' --keyfile='cert.key' --xhe
## Tips ## Tips
* For whatever deployment choice you choose, don't forget to enable SSL. * For whatever deployment choice you choose, don't forget to enable SSL.
* If you choose running this app as a standalone server, redirecting http to https is enabled by default, and only http requests from a public network will be redirected. * By default plain http requests from a public network will be either redirected or blocked and being redirected takes precedence over being blocked.
* Try to use reject policy as the missing host key policy along with your verified known_hosts, this will prevent man-in-the-middle attacks. The idea is that it checks the system host keys file("~/.ssh/known_hosts") and the application host keys file("./known_hosts") in order, if the ssh server's hostname is not found or the key is not matched, the connection will be aborted. * Try to use reject policy as the missing host key policy along with your verified known_hosts, this will prevent man-in-the-middle attacks. The idea is that it checks the system host keys file("~/.ssh/known_hosts") and the application host keys file("./known_hosts") in order, if the ssh server's hostname is not found or the key is not matched, the connection will be aborted.

10
README.rst
View File

@ -73,8 +73,8 @@ Server options
# more options # more options
wssh --help wssh --help
Use console Browser console
~~~~~~~~~~~ ~~~~~~~~~~~~~~~
.. code:: javascript .. code:: javascript
@ -152,9 +152,9 @@ Tips
- For whatever deployment choice you choose, don't forget to enable - For whatever deployment choice you choose, don't forget to enable
SSL. SSL.
- If you choose running this app as a standalone server, redirecting - By default plain http requests from a public network will be either
http to https is enabled by default, and only http requests from a redirected or blocked and being redirected takes precedence over
public network will be redirected. being blocked.
- Try to use reject policy as the missing host key policy along with - Try to use reject policy as the missing host key policy along with
your verified known\_hosts, this will prevent man-in-the-middle your verified known\_hosts, this will prevent man-in-the-middle
attacks. The idea is that it checks the system host keys attacks. The idea is that it checks the system host keys