Make syncthing work with man-in-the-middle

Support
1

Hello!

I am trying to keep in sync with corporate laptop with pretty tough security settings. I have VPS with white IP for syncthing central server.

Unfortunately, even if I am running syncthing on port 443 and set client to connect server on direct tcp address and port, I have error “expected 1 certificate, got 4”. It happens because of laptop network security - all SSL connections are signed with corporate certificate instead of original.

Is there any way to make syncthing work with this re-signing schema?

1 Like
2

No, unless you manage to establish a tunnel / VPN which does not do it. Syncthing uses TLS certificates for end-to-end authentication. What your corporate firewall is doing is effectively a man-in-the-middle attack, which is one of the threats that TLS tries to protect from in the first place.

2 Likes