Tigervnc not encrypting

Corrado · 02-15-2023, 04:50 PM

Trying to establish encryption on Tigervnc connection using TLS with x509.
Mostly what I've done is taken from https://github-wiki-see.page/m/Tiger...our-connection

Tiger vncserver is on a RHEL8.7 host and vncviewer is on my Windows10 laptop.

Created a self signed certifiacte on the server using openssl. The vncserver is managed using systemctl and I've had no problems when connecting without encryption. systemctl gets its parameters from /etc/tigervnc/vncserver-config-mandatory
The file's contents look like this:

Code:

session=gnome
#securitytypes=vncauth,tlsvnc
securitytypes=x509vnc,vncauth
x509key=/root/certs/vnc-server-private.pem
x509cert=/root/certs/vnc-server.pem

On the vncviewer side when trying to connect with encryption it returns..

Code:

Authentication failure: Server failed to initialize TLS session

The security tab in the viewer has "TLS with x509 cert" checked and the name of the public cert. That cert is in the same folder as where the exacutable is located.

Chris

Corrado · 02-15-2023, 05:15 PM

Soon after I posted this I found the solution. Key and cert weren't able to be accessed on the server. Moving them into an area where they can be read by all solved things. Connection encrypts.