0

我正在尝试将 SSL 与我的应用程序合并,以便在通过 vnc 查看器访问时使用安全连接。根据日志,我认为它甚至没有通过握手阶段。

服务器配置:

pid = <location>/stunnel.pid  
cert = <location>/SystemCred.pem  

[websocket]  
accept = <hostname>:9999  
connect = 127.0.0.1:1111

我正在使用带有 SSL 的tightVNC。前台 = 是 pid = 客户端 = 是 调试 = 6

options = ALL

cert = /home/tweet/Desktop/cert/SystemCred.pem

#[vnc_stunnel]
#accept = localhost:5930
connect = <server_ip>:9999

复制服务器的SystemCred.pem并在tightVNC 的MyCert配置中指定。

客户端错误日志:

2016.10.04 17:22:01 LOG5[ui]: Reading configuration from file /tmp/ss_vncviewer23188.4043.MzSbol  
2016.10.04 17:22:01 LOG5[ui]: UTF-8 byte order mark not detected  
2016.10.04 17:22:01 LOG5[ui]: FIPS mode disabled  
2016.10.04 17:22:01 LOG6[ui]: Initializing inetd mode configuration  
2016.10.04 17:22:01 LOG6[ui]: Loading certificate from file: /home/tweet/Desktop/cert/SystemCred.pem  
2016.10.04 17:22:01 LOG6[ui]: Certificate loaded from file: /home/tweet/Desktop/cert/SystemCred.pem  
2016.10.04 17:22:01 LOG6[ui]: Loading private key from file: /home/tweet/Desktop/cert/SystemCred.pem  
2016.10.04 17:22:01 LOG4[ui]: Insecure file permissions on /home/tweet/Desktop/cert/SystemCred.pem  
2016.10.04 17:22:01 LOG6[ui]: Private key loaded from file: /home/tweet/Desktop/cert/SystemCred.pem  
2016.10.04 17:22:01 LOG4[ui]: Service [stunnel] needs authentication to prevent MITM attacks  
2016.10.04 17:22:01 LOG5[ui]: Configuration successful  
2016.10.04 17:22:01 LOG5[ui]: Service [stunnel] accepted connection  
2016.10.04 17:22:01 LOG6[ui]: s_connect: connecting <server_ip>:9999  
2016.10.04 17:22:01 LOG5[ui]: s_connect: connected <server_ip>:9999  
2016.10.04 17:22:01 LOG5[ui]: Service [stunnel] connected remote server from 10.194.6.207:46832  
2016.10.04 17:22:01 LOG6[ui]: SNI: sending servername: <server_ip>  
2016.10.04 17:22:01 LOG6[ui]: Certificate verification disabled  
2016.10.04 17:22:01 LOG6[ui]: Certificate verification disabled  
2016.10.04 17:22:01 LOG6[ui]: SSL connected: new session negotiated  
2016.10.04 17:22:01 LOG6[ui]: Negotiated TLSv1.2 ciphersuite ECDHE-RSA-AES256-GCM-SHA384 (256-bit encryption)  
2016.10.04 17:22:01 LOG3[ui]: SSL_read: Connection reset by peer (104)  
2016.10.04 17:22:01 LOG5[ui]: Connection reset: 0 byte(s) sent to SSL, 0 byte(s) sent to socket  
vncviewer: VNC server closed connection 

服务器错误日志:
服务 [websocket] 接受来自:46830
s_connect 的连接:连接 127.0.0.1:1111:连接被拒绝 (111)

我真的被困住了,我不知道发生了什么。我对这个很陌生。希望大家能帮忙。

4

0 回答 0