Does SC work with SecureVNCPlugin?

[tihabil]

Hello to all,

Until a month ago( more or less) I used a customizedand modified SC; The changes I made were: using a SecureVNCPlugin named "MSRC4Plugin.dsm" and put inside the exe file a corresponding "Server_ClientAuth.pubkey" generated with UVNC+Addon tipical instalation.
Some days ago I tried to modify a new created SC but didn't work. The generated file is now signed and does not allow to be modified.
Are there a posibility to create an alternative SC creator wich allow a customized files? (a custom.zip file that includes a ClientAuth.pubkey and a SecureVNCPlugin) Thank you very much.

[Alkahna]

*bump*
this would help me out as well.
I want to create SC with SecureVNCPlugin as well but cannot get it to work..,

[mhertz]

https://forum.ultravnc.net/viewtopic.ph ... 633#p84447

Besides the above, which workarounds using a many year old SC version, then I believe you can make newest SC and use with securevnc by repacking it yourself, but it won't be signed however. I wish Rudi would fix this many year old issue of the online creator, especially since RC4 encryption is considered insecure.

[Rudi De Vos]

I see what i can do. I was verifying the code untel you posted the old answer.

If the newer plugin works with current code and it's just a creator issue...

Using you own dll will never be allowed when it's signed by us.
I don't think it makes a big difference if sc is 155k or 1mb, possible i can make a creator that add both plugins
and then set it with -plugin and -newplugin.

[Alkahna]

it would be awesome to have a "up-to-date" verson of SC with a new version of ultravnc server + securevnc plugin so that its secure by today's standards

[mhertz]

Thank you so much Rudi, I/we appreciate it for sure! Indeed filesize are completely irrelevant these days, well atleast in the sizes we're talking here.

Btw, you stated this here, back in first quarter of 2015:

We use the old plugin to keep it general.
SC was already modified to work with the new plugin[...]

For now... online creators only use MSRC4 plugins.

What i wanted to say was, Technical it's possible, but not implemented for the online creators.

https://forum.ultravnc.net/viewtopic.php?f=15&t=31303

So it sounds like you had implemented it, just except missing the online-creator support.

Thanks again, i'm sure this will make a bunch of people happy when it hopefully arrives! Take your time of course!

[Rudi De Vos]

Please test
Use
https://support1.uvnc.com/cgi-bin/upload11.pl

Add to zip
SC_Server_ClientAuth.pubkey

helpdesk.txt
[HOST]
Internet support old encryption
-plugin -connect localhost:5500 -noregistry
[HOST]
Internet support new encryption
-secureplugin -connect localhost:5500 -noregistry <<<<<<<<<<<<<<<<<<<<<-secureplugin == internal SecureVNCPlugin.dsm

Both plugins are always added.
Make sure the viewer use also SecureVNCPlugin.dsm and call the viewer key SC_Viewer_ClientAuth.pkey
if only one pkey exist you don't have to rename it.

Untested...please give feedback.
Will posible not work on XP

[mhertz]

Thanks again Rudi! Could you please fix the online-creator link so I/we can test - just stalls and finally errors out with "too long to respond". The stable/old online-creators has same issue I also see now.

Btw, if not already, then please make new online-creator let exe request UAC on start, like previous online-creator.

[Rudi De Vos]

Looks like the server installed some major update and after reboot the web service wan't restarted.

Fixed
https://support1.uvnc.com/cgi-bin/upload11.pl
This is the link for the latest creator on the SC page

[mhertz]

Tested working on Win7 and Win10 Thanks again Rudi, much appreciated!

[My1]

tested here on win10 (server) plus 8.1 (viewer) but kinda noteworthy you apparently have to run the viewer with both listen and the dsmplugin options, as you cant just preset that apparently.

Code: Select all

vncviewer.exe -listen -dsmplugin SecureVNCPlugin64.dsm

the only things that dont work as planned seem to be the send Ctrl+Alt+Del button, as well as on computers with high-DPI, the server needs to set "disable DPI scaling" (up to 8.1) or "Scaling set by Application" (w10)

[Rudi De Vos]

You can preset it
Start viewer, select dsmplugin options and save as default. Then you don't need that add it on the commandline.

[My1]

Okay I looked for a save button and it was a checkbox, also you have to at least try to connect to something to save that lol.

thanks though. the only much more awesome thing would be compatibility with Scaling, especially considering the server needs the setting this can be ugly trying to explain people on how to do it

[Alkahna]

Looks like the server installed some major update and after reboot the web service wan't restarted.

Fixed
https://support1.uvnc.com/cgi-bin/upload11.pl
This is the link for the latest creator on the SC page

Thanks a lot I figured out a way to frankenstein my own .exe with parts from the custom.zip but having a working online creator is much better for quick changes

[My1]

Add to zip
SC_Server_ClientAuth.pubkey
-------------
Make sure the viewer use also SecureVNCPlugin.dsm and call the viewer key SC_Viewer_ClientAuth.pkey

Untested...please give feedback.

any chance differently named Keys may be allowed in the future so one can use different SCs with different keys using the same viewer?

one thing that could be dont would be obviously if the name of the key wouldnt even matter but for example that the client sends a hash (or hashes) of its known public key(s) to the server which then checks the keys on his side and can answer whether it knows or doesnt know any given key.

[tihabil]

I created these days a SC ,exe, with SecureVCNPlugin and work for me. It was created with this creator link https://support1.uvnc.com/cgi-bin/upload11.pl. The exe file content was: -background.bmp, ddengine.dll, enter.bmp, helpdesk.txt, icon1.ico, icon2.ico, logo.bmp, MSRC4Plugin.dsm, SC_Server_ClientAuth.pubkey, SecureVNCPlugin.dsm, winvnc.exe. with 629 KB. Since the .exe file was not signed I deleted the MSRC4Plugin.dsm plugin.
Thank you very much to all people involved in this amazing project.