SC-III without DSM secure through SSL connection?

[alex.enjoy]

Hello,

i cannot get SC-III with included DSM-Plugin to run.
The repeater throws the connections away in the moment both connected.
But without plugin it works well.

Question: Is it secure without the plugin, because SSL is used?
I've created my own PEM file...

thanks
Alex.

[redge]

check you have the same version of msrc4plugin.dsm + rc4.key at both side (viewer and SC)

if SSL, you should not need dsmplugin + rc4.key, except for double secure.

[redge]

don't forget, you need the vncviewer_ssl.exe for the secure connection SSL with SCIII

[alex.enjoy]

redge, thanks for infos.

about the vncviewer_ssl.exe, in case I have my own repeater set up in my DMZ and only connect internally with the viewer to this repeater, will the SC-III-SSL Server be enough to secure the public internet stream?

My plan is the following:
a own repeater with SSL-Support in a DMZ of our LAN.
A SC-III Module connecting to this repeter through a 443-Forward-Port from Internet.
The standard VNCViewer connection unsecured and not encrypted to the repeater via LAN direct to the repeater inside the DMZ.

Am I right when I think that all internet crossing data of these sessions are encrypted and protected by the SSL channel and the repeater is the edge where it will be unsecured forwarded within the private LAN?

The double encryption would be nice, too.
Here is a repeater log from a connection attempt.
The connection is dropped, no matter which side connects first.

Code: Select all

Incoming Viewer (SSL client) 
accept() connection 
Viewer added to list 6112
Incoming Server (SSL client) 
Server added to list 6112
Server Removed from list 6112
Viewer removed from list 6112

I double checked that i use the same dsm-plugin and the same keyfile.
I've tried the noreg-versions, too.
What's about the AESV2Plugin.dsm? Is this usable with SC-III too?
Does the online-creator include this plugin if i pack it with the ZIP?

thanks
alex.

[redge]

will the SC-III-SSL Server be enough to secure the public internet stream?

should be but I'm not very aware about security

Am I right when I think that all internet crossing data of these sessions are encrypted and protected by the SSL channel and the repeater is the edge where it will be unsecured forwarded within the private LAN?

yes

> What's about the AESV2Plugin.dsm?
[topic=7393][/topic]

> Is this usable with SC-III too?
not tested my self.

> Does the online-creator include this plugin if i pack it with the ZIP?
not tested my self