Re: Java VNC client using SSL socket interface?

[Andre C. <and...@nr...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Greetings,

I've done a similar thing here to implement remote access to systems
through VNC and I used JSCH, a 100% Java SSH client library.  The way it
works is that I wrote a very simply Java app that sets up a SSH tunnel
between the client system and the remote system.  Then, this java app
launches the tightvnc java viewer and connects to the remote system
through this SSH tunnel.  I deploy all this using Java WebStart, so the
user only needs a web browser and the latest Java runtime.

If this is of any interest to you, let me know and I can give you some
pointers on how it is implemented.

Regards,
	Andre

Eric Evans wrote:
> To anyone on this mailing list who might have tried
> this:
> 
> I´ve set up a VNC Server.  I have a web site set up to
> feed the JAVA VNC client to users.  I can connect from
> one to the other just fine..  It works great.
> 
> I´m looking at adding security to this link so I can
> allow it out onto the internet and trust that no one
> can do a man in the middle sniff of the VNC
> connection.  
> 
> I looked at SSH but that only seems to work if I know
> the person that will be connecting because of the key
> that needs to be passed... I then looked at SSL.  I
> know there are several JAVA implementations of SSL. 
> Even Sun themselves includes one in their SDK and
> Runtime Environment packages.. (javax.net.ssl)  In the
> README for the JAVA VNC client it mentions that other
> SocketFactory implementations can be used.  Sun
> provides javax.net.ssl.SSLSocketFactory...  It looks
> as though it might be compatible with the Socket
> Factory that the VNC client uses.  Unfortunately I
> read a *LITTLE* JAVA but I am not very good at writing
> it so I´m not really sure what I´m doing here.  Has
> anyone tried to mash these two together?  What would
> need to be done at the server side?  Does this even
> sound like the right way to handle this situation?
> 
> The end result I´m trying for is to allow anyone to
> pull up the VNC viewer on my web page and log into my
> machine.  I´ve already redirected the VNC server to a
> login prompt and pretty much hardened that piece of
> things I just need help securing the VNC connection
> across the internet.  Help please! :/
> 
> - Eric Evans
> 
> 
> 
>        
> ____________________________________________________________________________________
> Sick sense of humor? Visit Yahoo! TV's 
> Comedy with an Edge to see what's on, when. 
> http://tv.yahoo.com/collections/222
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> ___________________________________________________________
> TightVNC mailing list, VNC...@li...
> To change your subscription or to UNSUBSCRIBE, please visit
> https://lists.sourceforge.net/lists/listinfo/vnc-tight-list


- --
Andre Charbonneau
100 Sussex Drive, Rm 2025
Research Computing Support, IMSB
National Research Council Canada
Ottawa, ON, Canada K1A 0R6
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG5UzBhiehvD+v9JARAvguAJ9V8/5o+QLbCmD7cEhMzqnp/SVOGQCgxgv0
tI6r8G0MGmvFvapx/uQQCpU=
=j00B
-----END PGP SIGNATURE-----