Require pre-shared key with SecureVNC?

[Zane]

Hi,
is it possibile to REQUIRE the use of a pre-shared key with SecureVNC and refuse any other connection?

Thanks

[YY]

In normal connection -- YES


In reverse connection -- NO.
If the key is omitted at server end, the listening viewer will still accept the connection without notification (still working under encryption, but not using the original pre-shared key.


Reference Possible Bug ?? SecureVNC -- Client Authentication Keys for more detail.

[Zane]

Thanks YY,
I'm talking about direct, client-initiated connection.

In this scenario, how can I configure the server to refuse the connection if the client doesn't provide the pre-shared key (instead of generate a new one on the fly)?

[YY]

Not necessary to config the server to reject such a connection

For a server using SecureVNC with xxxx_Server_ClientAuth.pubkey,
a viewer without the corresponding xxxx_Viewer_ClientAuth.pkey is not able to establish a connection with that server. After input the password, an error message will be returned.

[Zane]

That worked! I was renaming the files keeping only the "foo_" part as a match.

As soon as I used the original filename, the server started to reject any other client.

Thank you again!