ChunkVNC 3.2 HTTPS Test

[supercoe]

This thread will cover discussion about the upcoming HTTPS proxy support in ChunkVNC.


Rudi has added proxy support to a special build of the UltraVNC server and I've been helping him test it.
Currently in my test bed it seems to work great but I could use more test cases to be sure that it will work well with InstantSupport.


If you would like to be a tester just ask and I'll send you a link to download.

Requirements of a tester:
- Must have an environment behind an HTTP proxy to run InstantSupport.
- Must have previous ChunkVNC compiling experience.
- Must have a repeater running with a server port of 443.


I'll also be running a repeater in the US during the testing period and Compiler is already configured to use it.

Please use your repeater as well during the test but keep in mind that the server port must be 443.

[supercoe]

Known Issues:

Installing as Service when behind an HTTP Proxy doesn't work, server never connects.

[supercoe]

Rudi has informed me that Proxy support while installed as a service will not be an option. I can explain in further detail if needed but basically there are to many exceptions involving the proxy settings when you aren't logged in as a user.

I have a nice list of bugs/features to get done over the holiday, happy testing everyone.

[redge]

sorry, won't have time right now even is free days.
i need go to airport or train station for test witht http/https security authentication before access internet. My friend are busy with family.
but i need another person, my wife is not computer iterated so difficult for beta testing.

[supercoe]

No problem Redge, I have plenty to work on in the mean time.

Proxy testing for me has been perfect, I hope you have similar results.

[tbran6]

Test 1: inside my LAN, repeater using DDNS on port 443
InstantSupport server connected to my DDNS, had to switch viewer mode(my router does not support loopback)…..worked beautifully

Test 2: PC at my company, viewer on my LAN, repeater using DDNS on port 443
The PC running InstantSupport at my company behind our enterprise CheckPoint firewall connected to my repeater and viewer connected perfectly. This awesome, I’ve never been able to connect to a PC behind our enterprise FW. (I even connected to InstantSupport with a VPN session running, cool stuff)



Issues:
• with chat session open I lost control of the PC, if chat is closed or minimized(yes, minimized) you gain control back (disable UAC or installing as a service didn’t make a difference). Chat works fine but you just lose the ability to control the other PC.
• If a password protected screen savor activates, even if your already connected, the viewer can not remotely unlock it. However, the viewer CAN unlock it if running as a service.

[redge]

what the problem for proxy as service or not exist ?

tab proxy

* automatic detect proxy configuration
* use automatic configuration script
* use system proxy settings
* manual proxy settings
username and password
adresse proxy server and port
Proxy type choose the Socks 4, Socks 4a, Socks 5, HTTP 1.1/HTTPS

[Rudi De Vos]

The problem is that a service run as user "system."

1) Iexplorer settings are user based. The user "system" doesn't know
the proxy settings used for "user".

2) Isa proxy's are user based, user/passwd is transparrent passed from OS to proxy -> user "system" doesn't have access.


It's just to complex and to many exceptions to make it run out of the box.
SC need to avoid this, else it isn't Single Click.

[Rat]

Installing as Service when behind an HTTP Proxy doesn't work, server never connects.

Why?

[chrish]

Hi,

in my environments with only proxy based internet access, I had no connection problems with the testversion

Other problems with the testversion:
1.) Switching of dualmonitor clients, is not working, I never see all
two monitors, like in version 3.1

2.) If I compile with RequireAdmin, on the client always the server property appears, because there is no password set.
If I start without RequireAdmin and make then Disable UAC (Rerun as Admin), there are no server property and it works.

Thank you

[supercoe]

Thanks for the info, others have had luck with proxy support and I will be including it in the next release.

[xayide]

Where can I get this HTTPS-version?

I want to try at work....with our customers.. They are behind ISA, TMG and FW-1 and so on....this makes the normal version useless....

[supercoe]

The repeater I ran for the HTTPS test is down now.
I'll try to get 3.3 kicked out soon which will have Proxy support built in.

If you want to play with it on your own here is a download link:
http://www.chunkvnc.com/ChunkVNC_3_2_PROXY.zip

You will have to run your repeater's server port on 443 or it will not work.

Let me know how your testing goes as others have had luck with this test build.

[xayide]

Nice I'll try it next week.

[xayide]

It seems not to be totaly transparent since it does not penetrate Microsoft ISA 2006 on HTTPS.

[supercoe]

I forgot to mention that you should not install as a service with this build.
The firewall must allow outgoing connections on port 443.

Do you see anything in the repeaters log?

[xayide]

Server (ISA 2006) allows incomming SSL / 443 as well as outgoing SSL / 443. I forgot to mention we do have public IPs inside our LAN. Is that a problem?


Connecting client has been on my home network. Both form inside LAN and outside on WAN no firewall.

[supercoe]

I'm currently having a packet dropping issue with my VPS but I've started up the repeater on it and tested this build without issue it's just a bit slow right now.

I'll PM you the IP if you'd like to test using my repeater to at least rule out that it's not an issue with your repeaters configuration.