search

retspen / webvirtcloud

WebVirtCloud is virtualization web interface for admins and users
1.66k stars 367 forks source link

VNC Secuity #290

Open FrancescoFdd5 opened 4 years ago

FrancescoFdd5 commented 4 years ago

The VNC connection is not encrypted, the one written on this site should be implemented http://people.redhat.com/pbonzini/qemu-test-doc/_build/html/topics/vnc_005fsecurity.html

catborise commented 4 years ago

hi, i think it was implemented.. console/novcd service supports cert.. but i havent use it. i do not know it is working or not. you could try... as you know supervisor run two services. 1.gunicorn, 2.novncd

[program:novncd]
command=/srv/webvirtcloud/venv/bin/python /srv/webvirtcloud/console/novncd
directory=/srv/webvirtcloud
user=www-data
autostart=true
autorestart=true
redirect_stderr=true

if you set WS_CERT in setting.py it gets the value to use it.

as you see novncd param has cert option while starting websock

console/novncd --help
Usage: novncd [options]

Options:
  -h, --help            show this help message and exit
  -v, --verbose         Verbose mode
  -d, --debug           Debug mode
  -H HOST, --host=HOST  Listen host
  -p PORT, --port=PORT  Listen port
  -c CERT, --cert=CERT  Certificate file path
FrancescoFdd5 commented 4 years ago

Not NoVNC, I mean QEMU's VNC.