Problem setting up HTTPS repeater...

[jinx]

I have the UVNC Repeater on a server and it's listening on 443 but when I try to configure a client/server connection to use the repeater, it says "No server port defined" when trying to Create Server and "No viewer port defined" when trying to start the listener. What am I doing wrong to get this working?

[bevtech]

Source:

[topic=8898]Step by Step for pchelpware[/topic]



Note: Do not check the proxy connection until you configure the ports

[jinx]

Thanks for pointing that out. I have it printed in front of me but I missed it as i was going through it.

For some reason now I can't get it to work properly. For all traffic to tunnel through 443 to a repeater and along to viewers waiting for connections, I have both ports set to 443 but I'm not getting any information in the repeater log. I can telnet to the port on the repeater server and when I type something I get an error in the repeater log but the VNC clients won't connect. I have IIS completely disabled.

[bevtech]

oh you are trying to use port 443 for everything...

ok.. I remember reading a post about 2 months ago that tried that and it will not work. If I remember correctly pchelpware is not only port 443 you need to use the other ports as well. The SSL port 443 is mostly used to get traffic through a proxy server.

I am going completely from memory on this one, and hoping another user or developer can assist..

I do know that nothing can share port 443 or it will not work.. programs like spype active while using the pchelpware repeater will not work...

[jinx]

I'm trying to get around some firewall setups that are overly restrictive. I have a lot of offices that are sublets and the only way I can initiate outbound connections is through 80 or 443. I would love to know definitively whether PHW will tunnel all traffic through 443. If not, I think it might be a feature to add in a later release if possible.

[dcstalls]

Why is this not clear?? In the SCIII discussion for repeater the server can listen to 5500 (server) and 5901 (viewer) AND 443 (server and/or viewer).

Does PCHelpWare support this or not?!?!

[topic=8070][/topic]

In my repeater (downloaded with PCHW) i have 5500 and 5901 setup. I also have a check box enabled for 443. The logs shows the service binding to all 3. However i cannot conenct with telling the server to use 443 in this setup. Although there is a connection... if i kill repeater then server comes back disconnected so it was connected although not logged.

[bevtech]

SCIII and Pchelpware are not the same..

Port 443 can not be shared by any software like spype, etc.

Are you using your own repeater or the one on UVNC.com??

[dcstalls]

I am using the repeater from the pchelpware site. it starts all three ports at the same time. how do i tell the server and/or viewer to use SSL?

[bevtech]

option with in the viewer when you select via repeater
and right below the ID field is the checkmark for using https proxy..

[jmreymond]

option with in the viewer when you select via repeater
and right below the ID field is the checkmark for using https proxy..

Does it mean that https proxy is the PChelpware repeater and not an https proxy for the navigator ?

[dcstalls]

See... I am not the only one who doesn't see the clarity...

Please respond with a sample helpdesk.txt line that shows the server using SSL.

Please also provide a sample *.phw showing SSL being used.

All we need is clarity and guidance...

[bevtech]

The ssl I do believe is done with the repeater but a dev. would have to confirm that.


I have not messed with a helpdesk.txt file in pchelpware the viewer creates them automatically for you for simplicity.

Code: Select all

-connect uvnc.com:5500 -id 1000 -proxy -passwd F9D5C16A7F42203F8C195432354A3271

that is a copy of helpdesk.txt I created using ssl and ssl as the password.


This is the same information that pops in in an information window when you are creating a server

I have a repeater setup to use port 80 and 443 but I do not check the proxy option. but all I did was use port 80 as the listening and 443 as the server port instead of 5901 and 5500

Code: Select all

-connect 192.168.0.1:443 -id 1000  -passwd F9D5C16A7F42203F8C195432354A3271

That way does work as well.

The proxy option is mostly for trying to get through an proxy connection.

looking at the above code the only thing missing is the -proxy switch but this is done automatically when you are using viewer to create a server.

So I really do not understand why you are looking at the helpdesk.txt files ??

[dcstalls]

Well maybe i am just a stickler? It the repeater is shown to do A, B, & C then I would assume it should do A, B, & C.

I am sure alot of people would love to see a sticky stating something along the following lines:

Although the repeater supports a predefined viewer port (default 5901), a predefined server port (default 5500) and can also be configured to suppot SSL (Proxy 443) this currently is not implemented in PHW v1.0.

You can bypass some firewalls by changing the server port on the server and in the repeater to (80 or 443). If the viewier also needs to bypass a firewall use the unused port. (ex. server=80 & viewer=443).

What would be great is if in the future tru SSL (port 443) sould be supported. Some new firewalls are smart and will look for the certificate being sent on port 443). Realistically the 443 proxy should only be used to encapsulate the standard traffic if the viewer and or client cannont communicate on the default (5500 and 5901). Similar to RPC over HTTPS.

See that was easy (btw your instructions is exactly what i did with the old SC client for UVNC. Thanks for the followup and for a GREAT PRODUCT!!!!

[bevtech]

well I am just a user not a developer and try to write the docs so that everyone can understand. The first version was enabled to use the old helpdesk file the developers may change that in future versions that part of it is in there hands.

I have also seen another post that states a similar suggestion for true ssl support but again that is at the option of the developers..

The problem is that every user is at a different skill level so if you write the documentation at a higher level then the beginners have no clue what you are talking about yet if you write it at a lower level you need to skip alot of things and keep to the basics so it is impossible to keep everyone happy.

There are so few of use that write documents and answer forum questions that is it is impossible to get it all done. Keep in mind that this project only has 4 developers two of which only write sections of it and two main developers... A handful of users that answers questions and about 5 people that work on documentation at any given time. We sure could use some more man power to get alot more done. Most of the time I am on the only one writing the step by steps and I am super busy with my own computer company. There just does not seem to be enough time in the day..