<!DOCTYPE html>
<html>
<head>
<title>sclient - tls unwrapper for Windows, Mac, and Linux</title>
</head>
<body>
<h1>sclient</h1>
<p>ssl unwrapper for Windows, Mac, and Linux</p>
<p>a poor man's alternative to <code>openssl s_client</code>, <code>stunnel</code>, <code>socat</code>
for the simple use case of connecting a client application that doesn't support tls+sni
through a secure connection, https proxy, or sni multiplexer
(think <code>telnet</code>, <code>netcat</code>, <code>ssh</code>, <code>openvpn</code>, etc).</p>
<h2>Usage</h2>
<pre><code>$ sclient [flags] <remote> <local></code></pre>
<pre><code>$ sclient example.com:443 localhost:3000</code></pre>
<h3>Flags</h3>
<ul>
<li><kbd>-k, --insecure</kbd> ignore invalid tls certificates</li>
<li><kbd>--servername <string></kbd> spoof SNI
(to disable use IP as <remote> and do not use this option)</li>
</ul>
<h3>Arguments</h3>
<ul>
<li><kbd><remote></kbd> the servername and port of the tls-enabled server (default port is 443)</li>
<li><kbd><local></kbd> the local address and port to bind to (default bind address is 127.0.0.1 or ::1)
<ul>
<li><code>-</code> may be used to read from stdin (like netcat)</li>
<li>may be omitted when piping (see pipe example below)</li>
</ul>
</li>
</ul>
<h2>Examples</h2>
<h3>SSH</h3>
<pre><code>$ ssh -o ProxyCommand="sclient %h" jon.telebit.io</code></pre>
<p>This is useful to be able to connect to SSH even from behind a corporate packet-inspection firewall.
It can also be used to multiplex and relay multiple ssh connections through a single host.
</p>
<h3>Telnet </h3>
<pre><code>$ sclient example.com:443 localhost:3000
> [listening] example.com:443 <= localhost:3000</code></pre>
<pre><code>$ telnet localhost 3000</code></pre>
<h3>stdin/stdout</h3>
<pre><code>$ sclient whatever.com -
> (connected to whatever.com:443 and reading from stdin)</code></pre>
Use just like netcat or telnet. A manual HTTP request, for example:
<pre><code>> GET / HTTP/1.1
> Host: whatever.com
> Connection: close
>
</code></pre>
<h3>pipe</h3>
<pre><code>$ printf "GET / HTTP/1.1\r\nHost: telebit.cloud\r\n\r\n" | sclient telebit.cloud</code></pre>
<h2>Downloads (standalone) <small>v1.2</small></h2>
<ul>
<li>Windows 7/8/10
<a href="dist/windows/amd64/sclient.exe">Download</a>
| <a href="dist/windows/386/sclient.exe">(x86)</a>
</li>
<li>macOS / OS X / Darwin
<a href="dist/darwin/amd64/sclient">Download</a>
</li>
<li>Linux Ubuntu/Arch/etc
<a href="dist/linux/amd64/sclient">Download</a>
| <a href="dist/linux/386/sclient">(386)</a>
</li>
<li>Raspberry Pi
<a href="dist/linux/armv7/sclient">Download</a>
| <a href="dist/linux/armv5/sclient">(Pi Zero)</a>
</li>
<li>Source Code
<a href="https://git.coolaj86.com/coolaj86/sclient.go">Go (golang)</a>
| <a href="https://git.coolaj86.com/coolaj86/sclient.js">node.js</a>
</li>
</ul>
<h2>Source Code</h2>
<p><code>sclient</code> is maintained simultaneously in go and node.js</p>
<ul>
<li>Go
<ul>
<li><a href="https://git.coolaj86.com/coolaj86/sclient.go">git</a></li>
<li><a href="https://git.coolaj86.com/coolaj86/sclient.go/archive/master.zip">zip</a></li>
</ul>
</li>
<br>
<li>node.js
<ul>
<li><a href="https://git.coolaj86.com/coolaj86/sclient.js">git</a></li>
<li><a href="https://git.coolaj86.com/coolaj86/sclient.js/archive/master.zip">zip</a></li>
<li><kbd>npm install -g sclient</kbd></li>
</ul>
</body>
</html>