Re: [libvirt] libvirt tls vnc

2009-02-27 Thread Daniel P. Berrange
On Thu, Feb 26, 2009 at 10:47:37PM +0100, Michael Kress wrote: My questions: 1) Isn't there a more comfortable end user compatible method to connect to the beast? (Because with this method, users obviously are urged to have Linux on the client side. Or would the purchase of real vnc

Re: [libvirt] libvirt tls vnc

2009-02-27 Thread Radek Hladik
Michael Kress napsal(a): Michael Kress wrote: Then I'll give a try on linux and mail the results later. 2009.02.26 19:09:44 LOG7[14644:3086588128]: Certificate: /home/kress/keys/client-cert.pem 2009.02.26 19:09:44 LOG7[14644:3086588128]: Certificate loaded 2009.02.26 19:09:44

Re: [libvirt] libvirt tls vnc

2009-02-27 Thread Michael Kress
Daniel P. Berrange wrote: You can see more about what i'm experimenting with here http://lists.gnu.org/archive/html/qemu-devel/2009-02/msg01426.html Hello Daniel, Hello Radek, thanks so much for your great help - you've teached me a lot and you have given me a good orientation. What I

[libvirt] libvirt tls vnc

2009-02-26 Thread Michael Kress
Hi, is there a comprehensive howto/tutorial you can recommend me on how to set up libvirt with vnc over tls properly? What I'm trying to do is to use vnc for production use outside my local network and therefore I'd like to secure the vnc sessions. I already made some attempts with ssvnc and

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Daniel P. Berrange
On Thu, Feb 26, 2009 at 11:47:15AM +0100, Michael Kress wrote: Hi, is there a comprehensive howto/tutorial you can recommend me on how to set up libvirt with vnc over tls properly? What I'm trying to do is to use vnc for production use outside my local network and therefore I'd like to secure

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Michael Kress
Daniel P. Berrange wrote: I already made some attempts with ssvnc and u...@vnc (both windows clients) but these attemps all failed. I can't get the vnc server (launched by virt-install / kvm) to be displayed via tls. It all runs perfectly without tls. There are some notes here

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Daniel P. Berrange
On Thu, Feb 26, 2009 at 12:07:15PM +0100, Michael Kress wrote: Daniel P. Berrange wrote: I already made some attempts with ssvnc and u...@vnc (both windows clients) but these attemps all failed. I can't get the vnc server (launched by virt-install / kvm) to be displayed via tls. It all

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Michael Kress
Daniel P. Berrange wrote: I have a working ssh tunnel from Vista/Putty/Port 5900 to debian5/openssh/Port5900. Working means, I verified it with vncserver (without tls) and with nc (netcat). On windows side I tried with ssvnc using these values: What VNC client are you using on Windows

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Daniel P. Berrange
On Thu, Feb 26, 2009 at 12:55:57PM +0100, Michael Kress wrote: Daniel P. Berrange wrote: I have a working ssh tunnel from Vista/Putty/Port 5900 to debian5/openssh/Port5900. Working means, I verified it with vncserver (without tls) and with nc (netcat). On windows side I tried with ssvnc

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Michael Kress
Daniel P. Berrange wrote: * http://www.karlrunge.com/x11vnc/ssvnc.html (effect as described) To quote that page: SSVNC also supports the VeNCrypt SSL/TLS extension to VNC (Unix and Mac OS X only.) So you're out of luck with Windows Ok, this is no drawback - at least I

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Daniel P. Berrange
On Thu, Feb 26, 2009 at 01:29:09PM +0100, Michael Kress wrote: Daniel P. Berrange wrote: * http://www.karlrunge.com/x11vnc/ssvnc.html (effect as described) To quote that page: SSVNC also supports the VeNCrypt SSL/TLS extension to VNC (Unix and Mac OS X only.) So

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Radek Hladik
Michael Kress napsal(a): Daniel P. Berrange wrote: * http://www.karlrunge.com/x11vnc/ssvnc.html (effect as described) To quote that page: SSVNC also supports the VeNCrypt SSL/TLS extension to VNC (Unix and Mac OS X only.) So you're out of luck with Windows Ok, this is no

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Michael Kress
Michael Kress wrote: Then I'll give a try on linux and mail the results later. So I tried under Linux with ssvnc in the following scenario: ssvnc --- (port 5900) ssh tunnel established from localhost via ssh --- sshd on remote host -- (port 5900) libvirt/kvm/vnc The tunnel works and is built

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Michael Kress
Radek Hladik wrote: Michael Kress napsal(a): 2009.02.26 19:09:44 LOG7[14644:3086588128]: Certificate: /home/kress/keys/client-cert.pem 2009.02.26 19:09:44 LOG7[14644:3086588128]: Certificate loaded 2009.02.26 19:09:44 LOG7[14644:3086588128]: Key file: /home/kress/keys/client-cert.pem

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Radek Hladik
Michael Kress napsal(a): Radek Hladik wrote: Michael Kress napsal(a): 2009.02.26 19:09:44 LOG7[14644:3086588128]: Certificate: /home/kress/keys/client-cert.pem 2009.02.26 19:09:44 LOG7[14644:3086588128]: Certificate loaded 2009.02.26 19:09:44 LOG7[14644:3086588128]: Key file:

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Michael Kress
IT WORKS! Radek Hladik wrote: Michael Kress napsal(a): 2009.02.26 19:09:44 LOG3[14644:3086588128]: error stack: 140B3009 : error:140B3009:SSL routines:SSL_CTX_use_RSAPrivateKey_file:PEM lib 2009.02.26 19:09:44 LOG3[14644:3086588128]: SSL_CTX_use_RSAPrivateKey_file: 906D06C:

Re: [libvirt] libvirt tls vnc

2009-02-26 Thread Radek Hladik
Michael Kress napsal(a): IT WORKS! Radek Hladik wrote: Michael Kress napsal(a): 2009.02.26 19:09:44 LOG3[14644:3086588128 http://www.snapanumber.com/]: error stack: 140B3009 : error:140B3009:SSL routines:SSL_CTX_use_RSAPrivateKey_file:PEM lib 2009.02.26 19:09:44 LOG3[14644:3086588128