Skip to content

fix: verify gateway TLS certificates in SSH examples #126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kvinwang merged 1 commit into from
Sep 15, 2026
Merged

fix: verify gateway TLS certificates in SSH examples #126

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions ssh-over-gateway/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,11 +11,11 @@ This guide illustrates how to set up an SSH server within a tapp and access it u
Add the following configuration block to your `~/.ssh/config` file:
```
Host my-tee-box
ProxyCommand openssl s_client -quiet -connect <app-id>-1022.<dstack-serv-domain>:443
ProxyCommand openssl s_client -quiet -connect <app-id>-1022.<dstack-serv-domain>:443 -servername <app-id>-1022.<dstack-serv-domain> -verify_hostname <app-id>-1022.<dstack-serv-domain> -verify_return_error
```
Be sure to replace `<app-id>` with your tapp's application ID and `<dstack-serv-domain>` with your dstack-gateway server's domain.
Change the 443 to the port of the dstack-gateway if not using the default one.
Example ProxyCommand: `ProxyCommand openssl s_client -quiet -connect c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network:443`
Example ProxyCommand: `ProxyCommand openssl s_client -quiet -connect c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network:443 -servername c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network -verify_hostname c3c0ed2429a72e11e07c8d5701725968ff234dc0-1022.dstack-prod5.phala.network -verify_return_error`

3. **Connect via SSH command**
Finally, initiate the connection by running:
Expand Down
2 changes: 1 addition & 1 deletion tcp-port-forwarding/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,7 +57,7 @@ Host my-dstack-app
HostName <your-app-id>-22.<the-dstack-gateway-domain>
User root
Port 443
ProxyCommand openssl s_client -quiet -connect %h:%p
ProxyCommand openssl s_client -quiet -connect %h:%p -servername %h -verify_hostname %h -verify_return_error
```

Change the 443 to the port of the dstack-gateway if not using the default one.
Expand Down
Loading