Linux

如何在linux的tigervnc中添加X509證書TLS加密?

  • September 27, 2021

在tigervnc中,如何在linux環境下添加部署X509證書TLS加密?

x0vncserver手冊頁

-SecurityTypes sec-types
   Specify which security scheme to use for incoming connections. Valid values are a comma separated list of None, VncAuth, Plain, TLSNone, TLSVnc, TLSPlain, X509None, X509Vnc and X509Plain. Default is VncAuth,TLSVnc.

−X509Cert path

Path to a X509 certificate in PEM format to be used for all X509 based security types (X509None, X509Vnc, etc.).

−X509Key path

Private key counter part to the certificate given in X509Cert. Must also be in PEM format.

−GnuTLSPriority priority

GnuTLS priority string that controls the TLS sessionâs handshake algorithms. See the GnuTLS manual for possible values. Default is NORMAL.

所以基本上你必須在 and 中設置然後提供你的證書和-SecurityTypes X509...私鑰的路徑。設置 GnuTLS 優先級。-X509Cert``-X509Key``-GnuTLSPriority

可能的 GnuTLS 優先級是詳盡的,因為有很多密碼套裝。從GnuTLS 文件中閱讀

道歉:我不確定這是否是正確的答案,因為它未經測試,而且我從未將 X509 證書用於 VNC,(好吧,我的網路瀏覽器會為我讀取它們)。在評論中看起來太笨拙了。

引用自:https://unix.stackexchange.com/questions/670706