Windows Authentication/Passwords
malcolmlashley@lucent.com
malcolmlashley "at" lucent.com
Thu, 06 Aug 1998 15:38:56 +0000
I have been thinking it would be a good idea to add SSL to vnc. I did some
digging and found some useful info at netscape.com and mozilla.org. Netscape
provide a reference SSL 3.0 source code called SSL Ref 3.0 - in ANSI C, which
should be quite simple to leverage into the main environments vnc is supported
in (Windows and unix versions of the reference source are available!)
The only trouble is that the US government export restrictions, classify it as
a munition and thus you are in the same league as someone who traffics nuclear
war-heads if you download it outside the states. I don't want to risk that from
my company account - I quite like my job!
If anyone has downloaded the SSL Ref3.0 source and would like to send me a copy
that would be fine - I'll take a look and see if I think I can use it.
It's free for non-commercial use - so there shouldn't be any licensing issues.
I've taken a look at the Internet Draft for the SSL 3 spec - and I don't fancy
coding it up from scratch!
If anyone happens to have the corresponding source code from netscape/ apache
httpd - I guess that would be a good starting point.
Cheers,
malc.
> From admin "at" intergrafix.net Thu Aug 6 15:25:49 1998
>
> >
> > :) True. VNC is only slightly more secure than Telnet. I think the
> > reasoning behind not adding encryption of keypresses at the moment is that
> > we should wait until we have a decent way of doing it, rather than trying
> > to kludge something together to tide things over.
> >
>
> i've been reading this list mostly, no postings until now. Isn't there a
> way to do an SSL type security? like, at the console, use the
> vncserver to generate a keyfile. for implmentation of the client side of
> it maybe checking out the netscape browser source would help *shrug*
>
> -Cygnus
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> Anthony J. Biacco Network Administrator/Engineer
> admin "at" intergrafix.net Intergrafix Internet Services
>
> "The best way to predict the future, is to invent it."
> http://cygnus.ncohafmuta.com http://www.intergrafix.net
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._..-._.-.
>
>
> ---------------------------------------------------------------------
> The VNC mailing list - see http://www.orl.co.uk/vnc/intouch.html
> ---------------------------------------------------------------------
>
---------------------------------------------------------------------
The VNC mailing list - see http://www.orl.co.uk/vnc/intouch.html
---------------------------------------------------------------------