Re: [rfbhackers] is anybody working on sercureVNC?

[Constantin K. <co...@ce...>]

Hello Tim, Joe,

>>>>> "TJ" == Tim Jansen <ml...@tj...> writes:

>> Currently it does X.509 certificate auth and "regular" VNC auth. 
>> Also, I've extenden initial RFB client/server handshake so that the
>> authtype could be negotiated (and then accepted or not by either
>> party depending on configurable policies).

TJ> Do you have any code/documentation for this? That would be great,
TJ> since exactly this is on my feature list for KDE's Desktop
TJ> Sharing.

And in my feature list (for TightVNC), too. :-)

I've started to work on OpenSSL integration, however, I'm rather
interested in encryption than in certificate-based authentication.

By the way, I also have implemented protocol extensions to negotiate
protocol options such as tunneling/encryption methods, additional
authentication schemes, non-standard normal messages and extra
encodings. The sources are available in the CVS, in both Unix and
Win32 parts.

Joe, could you please send me your changes? Sinse I've already
implemented a subset of similar functionality, I won't include your
changes as is, but I think your work can save some time and prevent
some duplication of efforts.

-- 
With Best Wishes,
Constantin