This directory contains a patched Java applet VNC viewer that is SSL enabled. The patches in the *.patch files are relative to the source tarball: tightvnc-1.3dev7_javasrc.tar.gz currently (4/06) available here: http://prdownloads.sourceforge.net/vnc-tight/tightvnc-1.3dev7_javasrc.tar.gz?download It also includes some simple patches to: - fix richcursor colors - make the Java Applet cursor (not the cursor drawn to the canvas framebuffer) invisible when it is inside the canvas. - allow Tab (and some other) keystrokes to be sent to the vnc server instead of doing widget traversal. This SSL applet should work with any VNC viewer that has an SSL tunnel in front of it. It has been tested on x11vnc and using the stunnel tunnel to other VNC servers. By default this Vnc Viewer will only do SSL. To do unencrypted traffic see the "DisableSSL" applet parameter (e.g. set it to Yes in index.vnc). Proxies: they are a general problem with java socket applets (a socket connection does not go through the proxy). See the info in the proxy.vnc file for a workaround. It uses SignedVncViewer.jar which is simply a signed version of VncViewer.jar. The basic idea is the user clicks "Yes" to trust the applet and then it can connect directly to the proxy and issue a CONNECT request. This applet has been tested on versions 1.4.2 and 1.5.0 of the Sun Java plugin. It may not work on older releases or different vendor VM's. Send full Java Console output for failures. --------------------------------------------------------------- Tips: When doing single-port proxy connections (e.g. both VNC and HTTPS thru port 5900) it helps to move through the 'do you trust this site' dialogs quickly. x11vnc has to wait to see if the traffic is VNC or HTTP and this can cause timeouts if you don't move thru them quickly. You may have to restart your browser completely if it gets into a weird state. For one case we saw the JVM requesting VncViewer.class even when no such file exists. --------------------------------------------------------------- Extras: ss_vncviewer (not Java): Wrapper script for native VNC viewer to connect to x11vnc in SSL mode. Script launches stunnel(8) and then connects to it via localhost which in turn is then redirected to x11vnc via an SSL tunnel. stunnel(8) must be installed and available in PATH. Running Java SSL VncViewer from the command line: From this directory: java -cp ./VncViewer.jar VncViewer HOST PORT substitute and with the actual values.