tlsme [options]
Options:
--help brief help message
--listen listen on (default 0.0.0.0:443)
--backend backend address or path to unix socket (default 127.0.0.1:8080)
--backlog backlog size (default 128)
--cert_file path to certificate file (may contain a private key too)
--key_file path to private key file
--cert_password certificate password (promts unless value provided)
--method protocol parser to use ("SSLv2" | "SSLv3" | "TLSv1" | "any")
--cipher_list list of ciphers to use ("AES:ALL:!aNULL:!eNULL:+RC4:@STRENGTH")
--protocol underlying protocol ("raw" | "http")
--user drop privileges to user (ID or name)
--group drop privileges to group (ID)
--log_file path to log file
--debug debug mode
--daemonize daemonize (--log_file is required)
--pid_file PID file
When option "cert_file" is
omitted default testing certificate is used.
TLS/SSL proxy in front of the application creates a transparent encryption
tunnel.
When using "http" protocol HTTP headers
"X-Forwarded-For" and
"X-Forwarded-Proto" are added to the
requests with corresponding values.