kanaka/noVNC — Issue #96: ssl celf signed certificate error
Author: frido
Created: 2011-10-19 16:09:46+00:00
State: open

Hi,

After creating a self signed certificiate with:

openssl req -new -x509 -days 365 -nodes -out self.pem -keyout self.pem

and using the demo:

vnc_auto.html with encrypt=1

I get the unknown ca error (not warning), the connection in the browser drops, encrypt=0 does work
though. Do I need a CA signed certificate for this to work ?

/opt/novnc/utils/wsproxy.py --ssl-only --cert /opt/novnc/self.pem 6080 server.domain.org:5911

WARNING: no 'numpy' module, HyBi protocol decode may be slower
WebSocket server settings:
- Listen on :6080
- Flash security policy server
- SSL/TLS support
- Deny non-SSL/TLS connections
- proxying from :6080 to server.domain.org:5911

1: handler exception: [Errno 1] _ssl.c:499: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca