diff --git a/README.md b/README.md index 781d927..1dfb8f9 100644 --- a/README.md +++ b/README.md @@ -87,7 +87,7 @@ and then visit [localhost:3000](http://localhost:3000/), we should see a directo with $ md-tmpl -w README.md --> -``` plain +``` plain $ chisel --help Usage: chisel [command] [--help] @@ -106,7 +106,7 @@ $ chisel --help -``` plain +``` plain $ chisel server --help Usage: chisel server [options] @@ -175,10 +175,13 @@ $ chisel server --help provide a certificate notification email by setting CHISEL_LE_EMAIL. --tls-ca, a path to a PEM encoded CA certificate bundle or a directory - holding multiple PEM encode CA certificate bundle files, which is used to - validate client connections. The provided CA certificates will be used - instead of the system roots. This is commonly used to implement mutual-TLS. + holding multiple PEM encode CA certificate bundle files, which is used to + validate client connections. The provided CA certificates will be used + instead of the system roots. This is commonly used to implement mutual-TLS. + --ldap-config, a path to a file containing the ldap authentication + configuration. + --pid Generate pid file in current working directory -v, Enable verbose logging @@ -201,7 +204,7 @@ $ chisel server --help -``` plain +``` plain $ chisel client --help Usage: chisel client [options] [remote] [remote] ... @@ -256,7 +259,7 @@ $ chisel client --help client's internal SOCKS5 proxy. When stdio is used as local-host, the tunnel will connect standard - input/output of this program with the remote. This is useful when + input/output of this program with the remote. This is useful when combined with ssh ProxyCommand. You can use ssh -o ProxyCommand='chisel client chiselserver stdio:%h:%p' \ user@example.com @@ -312,11 +315,11 @@ $ chisel client --help may be still verified (see --fingerprint) after inner connection is established. - --tls-key, a path to a PEM encoded private key used for client + --tls-key, a path to a PEM encoded private key used for client authentication (mutual-TLS). - --tls-cert, a path to a PEM encoded certificate matching the provided - private key. The certificate must have client authentication + --tls-cert, a path to a PEM encoded certificate matching the provided + private key. The certificate must have client authentication enabled (mutual-TLS). --pid Generate pid file in current working directory