我正在尝试将SSL与我的应用程序合并,以便在通过vnc查看器访问时使用安全连接。根据日志我不认为它甚至通过了握手阶段。
服务器配置:
pid = <location>/stunnel.pid
cert = <location>/SystemCred.pem
[websocket]
accept = <hostname>:9999
connect = 127.0.0.1:1111
我正在使用带有SSL的tightVNC。 前景=是 pid = 客户=是 debug = 6
options = ALL
cert = /home/tweet/Desktop/cert/SystemCred.pem
#[vnc_stunnel]
#accept = localhost:5930
connect = <server_ip>:9999
复制服务器的 SystemCred.pem ,并在tightVNC的 MyCert 配置中指定它。
客户端错误日志:
2016.10.04 17:22:01 LOG5[ui]: Reading configuration from file /tmp/ss_vncviewer23188.4043.MzSbol
2016.10.04 17:22:01 LOG5[ui]: UTF-8 byte order mark not detected
2016.10.04 17:22:01 LOG5[ui]: FIPS mode disabled
2016.10.04 17:22:01 LOG6[ui]: Initializing inetd mode configuration
2016.10.04 17:22:01 LOG6[ui]: Loading certificate from file: /home/tweet/Desktop/cert/SystemCred.pem
2016.10.04 17:22:01 LOG6[ui]: Certificate loaded from file: /home/tweet/Desktop/cert/SystemCred.pem
2016.10.04 17:22:01 LOG6[ui]: Loading private key from file: /home/tweet/Desktop/cert/SystemCred.pem
2016.10.04 17:22:01 LOG4[ui]: Insecure file permissions on /home/tweet/Desktop/cert/SystemCred.pem
2016.10.04 17:22:01 LOG6[ui]: Private key loaded from file: /home/tweet/Desktop/cert/SystemCred.pem
2016.10.04 17:22:01 LOG4[ui]: Service [stunnel] needs authentication to prevent MITM attacks
2016.10.04 17:22:01 LOG5[ui]: Configuration successful
2016.10.04 17:22:01 LOG5[ui]: Service [stunnel] accepted connection
2016.10.04 17:22:01 LOG6[ui]: s_connect: connecting <server_ip>:9999
2016.10.04 17:22:01 LOG5[ui]: s_connect: connected <server_ip>:9999
2016.10.04 17:22:01 LOG5[ui]: Service [stunnel] connected remote server from 10.194.6.207:46832
2016.10.04 17:22:01 LOG6[ui]: SNI: sending servername: <server_ip>
2016.10.04 17:22:01 LOG6[ui]: Certificate verification disabled
2016.10.04 17:22:01 LOG6[ui]: Certificate verification disabled
2016.10.04 17:22:01 LOG6[ui]: SSL connected: new session negotiated
2016.10.04 17:22:01 LOG6[ui]: Negotiated TLSv1.2 ciphersuite ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption)
2016.10.04 17:22:01 LOG3[ui]: SSL_read: Connection reset by peer (104)
2016.10.04 17:22:01 LOG5[ui]: Connection reset: 0 byte(s) sent to SSL, 0 byte(s) sent to socket
vncviewer: VNC server closed connection
服务器错误日志:
服务[websocket]接受连接:46830
s_connect:connect 127.0.0.1:1111:连接被拒绝(111)
我真的卡住了,我不知道发生了什么。我对此失败了。希望你们能帮忙。