Skip to content

Instantly share code, notes, and snippets.

@hazcod
Created January 15, 2016 12:59
Show Gist options
  • Save hazcod/8b8ae08656f97c84c6dd to your computer and use it in GitHub Desktop.
Save hazcod/8b8ae08656f97c84c6dd to your computer and use it in GitHub Desktop.
Setup for enabling SSH over TLS
-- Apache vhost config
```
<VirtualHost *:443>
ServerName ssh.website.com
SSLEngine On
SSLCertificateFile /etc/ssl/cert.pem
SSLCertificateKeyFile /etc/ssl/privkey.pem
SSLCertificateChainFile /etc/ssl/fullchain.pem
HostnameLookups on
ProxyRequests On
ProxyVia on
AllowCONNECT 2266
<Proxy *>
Order deny,allow
Deny from all
</Proxy>
<Proxy ssh.website.com>
Order deny,allow
Allow from all
</Proxy>
DocumentRoot /var/www/connect
</VirtualHost>
```
-- .ssh/config
```
UseRoaming no
Host hazcod
Hostname ssh.website.com
Port 2266
User sshuser
IdentityFile ~/.ssh/website.key
ServerAliveInterval 30
ProxyCommand proxytunnel -X -p proxy.company.com:3128 -P 'companyuser:companypassword' -r ssh.website.com:443 -d %h:%p -H "User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Win32)"
```
-- Proxytunnel
`git clone https://github.com/proxytunnel/proxytunnel/ && cd proxytunnel && make && sudo make install clean`
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment