crabapples
/
noVNC
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Feature: Enable self-signed certificates 

This will use OpenSSL and generate a new certificate, then start the server in SSL-Only mode
This commit is contained in:
blitztide 2025-08-01 13:32:43 +01:00
parent 4cb5aa45ae
commit 5a97f16651
No known key found for this signature in database
GPG Key ID: 4CA90D5FD3A238E8
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
utils/novnc_proxy
View File

@ -17,6 +17,8 @@ usage() {
echo " Default: 6080 (on all interfaces)" echo " Default: 6080 (on all interfaces)"
echo " --vnc VNC_HOST:PORT VNC server host:port proxy target" echo " --vnc VNC_HOST:PORT VNC server host:port proxy target"
echo " Default: localhost:5900" echo " Default: localhost:5900"
echo " --self-sign hostname Generate self-signed certificates for hostname"
echo " Requires OpenSSL to be installed"
echo " --cert CERT Path to combined cert/key file, or just" echo " --cert CERT Path to combined cert/key file, or just"
echo " the cert file if used with --key" echo " the cert file if used with --key"
echo " Default: self.pem" echo " Default: self.pem"
@ -51,6 +53,7 @@ HOST=""
PORT="6080" PORT="6080"
LISTEN="$PORT" LISTEN="$PORT"
VNC_DEST="localhost:5900" VNC_DEST="localhost:5900"
SELF_SIGN=""
CERT="" CERT=""
KEY="" KEY=""
WEB="" WEB=""
@ -90,6 +93,7 @@ while [ "$*" ]; do
case $param in case $param in
--listen) LISTEN="${OPTARG}"; shift ;; --listen) LISTEN="${OPTARG}"; shift ;;
--vnc) VNC_DEST="${OPTARG}"; shift ;; --vnc) VNC_DEST="${OPTARG}"; shift ;;
--self-sign) SELF_SIGN="${OPTARG}"; shift ;;
--cert) CERT="${OPTARG}"; shift ;; --cert) CERT="${OPTARG}"; shift ;;
--key) KEY="${OPTARG}"; shift ;; --key) KEY="${OPTARG}"; shift ;;
--web) WEB="${OPTARG}"; shift ;; --web) WEB="${OPTARG}"; shift ;;
@ -147,6 +151,18 @@ else
die "Could not find vnc.html" die "Could not find vnc.html"
fi fi
# Create self-signed certificates
if [ -n "${SELF_SIGN}" ]; then
if [ ! -f $(pwd)/self.pem ]; then
echo "Generating Certificate for: ${SELF_SIGN}"
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out self.pem -sha256 -days 3650 -nodes -subj "/C=XX/ST=NoVNC/L=NoVNC/O=NoVNC/OU=NoVNC/CN=${SELF_SIGN}"
fi
CERT=$(pwd)/self.pem
KEY=$(pwd)/key.pem
echo "Forcing SSL"
SSLONLY="--ssl-only"
fi
# Find self.pem # Find self.pem
if [ -n "${CERT}" ]; then if [ -n "${CERT}" ]; then
if [ ! -e "${CERT}" ]; then if [ ! -e "${CERT}" ]; then