feat: 添加自签名证书

.gitignore

@@ -3,5 +3,3 @@
 .idea
 .DS_Store
 logs
-*.key
-*.crt

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "shuttle"
-version = "0.4.2"
+version = "0.4.3"
 edition = "2021"
 
 # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html

README.md

@@ -29,10 +29,10 @@ Connect to networks without pain
 #example/shuttles.yaml
 addrs:
   - addr: 0.0.0.0:4843
-#    key: xxx  最好使用正式域名证书的方式,或者使用自签名证书
-#    cert: xxx
+    cert: examples/server.crt # 最好使用正式域名证书的方式
+    key: examples/server.key
 trojan:
-  local_addr: 127.0.0.1:80 #nginx
+  local_addr: 127.0.0.1:80 #nginx伪装
   passwords:
     - sQtfRnfhcNoZYZh1wY9u
 ```
@@ -46,9 +46,9 @@ trojan:
 ```yaml
 run_type: proxy #运行类型 代理模式
 ssl_enable: true
-invalid_certs: false
+invalid_certs: true
 proxy_addr: 127.0.0.1:4080 #本地代理地址
-remote_addr: 127.0.0.1:4843 #服务器地址
+remote_addr: 127.0.0.1:4843 #服务器地址, 最好是域名
 password: sQtfRnfhcNoZYZh1wY9u #对应服务器密码
 ```
 
@@ -70,8 +70,8 @@ Enjoy
 #example/shuttles.yaml
 addrs:
   - addr: 0.0.0.0:4843
-#    key: xxx
-#    cert: xxx
+    cert: examples/server.crt
+    key: examples/server.key
 rathole:
   passwords:
     - 58JCEmvcBkRAk1XkK1iH

examples/gen_cert.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+openssl genrsa  -out server.key 2048
+openssl req -new -key server.key -out server.csr -subj /C=CH/ST=Fun/L=Fun/O=Aman/OU=Aman/CN=www.example.com
+openssl x509 -req -days 3650 -in server.csr -signkey server.key -out server.crt

examples/server.crt

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

examples/server.csr

@@ -0,0 +1,17 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

examples/server.key

@@ -0,0 +1,27 @@
+-----BEGIN RSA PRIVATE KEY-----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+-----END RSA PRIVATE KEY-----

examples/shuttlec-proxy.yaml

@@ -1,6 +1,6 @@
 run_type: proxy
 proxy_addr: 127.0.0.1:4080
 remote_addr: 127.0.0.1:4843
-ssl_enable: false # better to set true
-invalid_certs: false
+ssl_enable: true
+invalid_certs: true
 password: sQtfRnfhcNoZYZh1wY9u

examples/shuttlec-rathole.yaml

@@ -1,6 +1,6 @@
 run_type: rathole
 remote_addr: 127.0.0.1:4843
-ssl_enable: false # better to set true
+ssl_enable: true # better to set true
 password: 58JCEmvcBkRAk1XkK1iH
 
 holes:

examples/shuttles.yaml

@@ -1,7 +1,7 @@
 addrs:
   - addr: 0.0.0.0:4843
-#    key: xxx
-#    cert: xxx
+    cert: examples/server.crt
+    key: examples/server.key
 admin:
   addr: 127.0.0.1:4890
 trojan: