Path to certificate private key (PEM with private key)

Address to forward connections to (can be HOST:PORT or unix:PATH).

Address and port to listen on (can be HOST:PORT, unix:PATH).

Path to certificate (PEM with certificate chain)

Allow client if common name appears in the list.

Allow client if organizational unit name appears in the list.

If true, allow all clients, do not check client cert subject.

Allow client if URI subject alternative name appears in the list.

Allow client if DNS subject alternative name appears in the list.

Path to CA bundle file (PEM/X509)

If set, does not limit target to localhost, 127.0.0.1, [::1], or UNIX sockets

Path to keystore (combined PEM with cert/key, or PKCS12 keystore)

Extra arguments to pass to ghostunnel server

Disable client authentication, no client certificate will be required.