diff options
author | runge <runge@karlrunge.com> | 2010-05-01 13:16:37 -0400 |
---|---|---|
committer | runge <runge@karlrunge.com> | 2010-05-01 13:16:37 -0400 |
commit | 59c0ae40935114b9bbe6a966446587469fc5deae (patch) | |
tree | 5e45a4014aa801de98ff65b0e9eb6209232a467d /x11vnc/x11vnc.1 | |
parent | 8d79a63d3c8caca5d0db4827e072f7c773387afa (diff) | |
download | libvncserver-59c0ae40935114b9bbe6a966446587469fc5deae.zip libvncserver-59c0ae40935114b9bbe6a966446587469fc5deae.tar.gz |
x11vnc: X11VNC_DISABLE_SSL_CLIENT_MODE option to disable SSL
client role in reverse connections. Improvements to logging in
ultravnc_repeater, ULTRAVNC_REPEATER_NO_RFB option. Increase
SSL timeout and print message if 'repeater' mode is detected for
reverse SSL connection. Fix RECORD scroll XCopyArea detection
with recent gtk/gdk library; set X11VNC_SCROLL_MUST_EQUAL
to disable. Limit logging of RECORD error messages.
Diffstat (limited to 'x11vnc/x11vnc.1')
-rw-r--r-- | x11vnc/x11vnc.1 | 24 |
1 files changed, 23 insertions, 1 deletions
diff --git a/x11vnc/x11vnc.1 b/x11vnc/x11vnc.1 index 05a5683..2b09a19 100644 --- a/x11vnc/x11vnc.1 +++ b/x11vnc/x11vnc.1 @@ -2,7 +2,7 @@ .TH X11VNC "1" "April 2010" "x11vnc " "User Commands" .SH NAME x11vnc - allow VNC connections to real X11 displays - version: 0.9.10, lastmod: 2010-04-22 + version: 0.9.10, lastmod: 2010-04-28 .SH SYNOPSIS .B x11vnc [OPTION]... @@ -697,6 +697,28 @@ newline and carriage return. "\\c" is expanded to See also the \fB-proxy\fR option below for additional ways to plumb reverse connections. .IP +Reverse SSL: using \fB-connect\fR in \fB-ssl\fR mode makes x11vnc +act as an SSL client (initiates SSL connection) rather +than an SSL server. The idea is x11vnc might be +connecting to stunnel on the viewer side with the +viewer in listening mode. If you do not want this +behavior, use \fB-env\fR X11VNC_DISABLE_SSL_CLIENT_MODE=1. +With this the viewer side can act as the SSL client +as it normally does for forward connections. +.IP +Reverse SSL Repeater mode: This will work, but note +that if the VNC Client does any sort of a 'Fetch Cert' +action before connecting, then the Repeater will +likely drop the connection and both sides will need +to restart. Consider the use of \fB-connect_or_exit\fR +and \fB-loop300,2\fR to have x11vnc reconnect once to the +repeater after the fetch. You will probably also want +to supply \fB-sslonly\fR to avoid x11vnc thinking the delay +in response means the connection is VeNCrypt. The env +var X11VNC_DISABLE_SSL_CLIENT_MODE=1 discussed above +may also be useful (i.e. the viewer can do a forward +connection as it normally does.) +.IP IPv6: as of x11vnc 0.9.10 the \fB-connect\fR option should connect to IPv6 hosts properly. If there are problems you can disable IPv6 by setting \fB-DX11VNC_IPV6=0\fR |