@@ -87,7 +87,7 @@ and then visit [localhost:3000](http://localhost:3000/), we should see a directo
8787 with $ md-tmpl -w README.md -->
8888
8989<!-- tmpl,code=plain:echo "$ chisel --help" && go run main.go --help | sed 's#0.0.0-src (go1\..*)#X.Y.Z#' -->
90- ``` plain
90+ ``` plain
9191$ chisel --help
9292
9393 Usage: chisel [command] [--help]
@@ -106,7 +106,7 @@ $ chisel --help
106106
107107
108108<!-- tmpl,code=plain:echo "$ chisel server --help" && go run main.go server --help | cat | sed 's#0.0.0-src (go1\..*)#X.Y.Z#' -->
109- ``` plain
109+ ``` plain
110110$ chisel server --help
111111
112112 Usage: chisel server [options]
@@ -169,27 +169,6 @@ $ chisel server --help
169169 --reverse, Allow clients to specify reverse port forwarding remotes
170170 in addition to normal remotes.
171171
172- --tls-key, Enables TLS and provides optional path to a PEM-encoded
173- TLS private key. When this flag is set, you must also set --tls-cert,
174- and you cannot set --tls-domain.
175-
176- --tls-cert, Enables TLS and provides optional path to a PEM-encoded
177- TLS certificate. When this flag is set, you must also set --tls-key,
178- and you cannot set --tls-domain.
179-
180- --tls-domain, Enables TLS and automatically acquires a TLS key and
181- certificate using LetsEncrypt. Setting --tls-domain requires port 443.
182- You may specify multiple --tls-domain flags to serve multiple domains.
183- The resulting files are cached in the "$HOME/.cache/chisel" directory.
184- You can modify this path by setting the CHISEL_LE_CACHE variable,
185- or disable caching by setting this variable to "-". You can optionally
186- provide a certificate notification email by setting CHISEL_LE_EMAIL.
187-
188- --tls-ca, a path to a PEM encoded CA certificate bundle or a directory
189- holding multiple PEM encode CA certificate bundle files, which is used to
190- validate client connections. The provided CA certificates will be used
191- instead of the system roots. This is commonly used to implement mutual-TLS.
192-
193172 --pid Generate pid file in current working directory
194173
195174 -v, Enable verbose logging
@@ -212,7 +191,7 @@ $ chisel server --help
212191
213192
214193<!-- tmpl,code=plain:echo "$ chisel client --help" && go run main.go client --help | sed 's#0.0.0-src (go1\..*)#X.Y.Z#' -->
215- ``` plain
194+ ``` plain
216195$ chisel client --help
217196
218197 Usage: chisel client [options] <server> <remote> [remote] [remote] ...
@@ -267,7 +246,7 @@ $ chisel client --help
267246 client's internal SOCKS5 proxy.
268247
269248 When stdio is used as local-host, the tunnel will connect standard
270- input/output of this program with the remote. This is useful when
249+ input/output of this program with the remote. This is useful when
271250 combined with ssh ProxyCommand. You can use
272251 ssh -o ProxyCommand='chisel client chiselserver stdio:%h:%p' \
273252 user@example.com
@@ -311,28 +290,6 @@ $ chisel client --help
311290 --hostname, Optionally set the 'Host' header (defaults to the host
312291 found in the server url).
313292
314- --sni, Override the ServerName when using TLS (defaults to the
315- hostname).
316-
317- --tls-ca, An optional root certificate bundle used to verify the
318- chisel server. Only valid when connecting to the server with
319- "https" or "wss". By default, the operating system CAs will be used.
320-
321- --tls-skip-verify, Skip server TLS certificate verification of
322- chain and host name (if TLS is used for transport connections to
323- server). If set, client accepts any TLS certificate presented by
324- the server and any host name in that certificate. This only affects
325- transport https (wss) connection. Chisel server's public key
326- may be still verified (see --fingerprint) after inner connection
327- is established.
328-
329- --tls-key, a path to a PEM encoded private key used for client
330- authentication (mutual-TLS).
331-
332- --tls-cert, a path to a PEM encoded certificate matching the provided
333- private key. The certificate must have client authentication
334- enabled (mutual-TLS).
335-
336293 --pid Generate pid file in current working directory
337294
338295 -v, Enable verbose logging
0 commit comments