<div dir="ltr"><div><div>Hi,<br><br></div>The reset of the connection is perfectly right. It's only about trusting the certificate on that port. After that, secure VNC should work. Make sure, that the user account you're using in Sunstone has secure Websockets enabled. You can't access the insecure VNC from an TLS-protected Sunstone because of the Same-Origin-Policy.<br>
<br></div><div>Greetings<br></div><div>Wilma<br></div><div><div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">2014-02-04 Hamada, Ondrej <span dir="ltr"><<a href="mailto:ondrej.hamada@acision.com" target="_blank">ondrej.hamada@acision.com</a>></span>:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="blue" vlink="purple" lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi,<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thank you for hints, but my connection gets reseted when trying to access
</span><a href="https://opennebulaaddr:29876" target="_blank">https://opennebulaaddr:29876</a>. I already have permanent exception for my cert in firefox.<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Ondra<span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif"">From:</span></b><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Daniel Molina [mailto:<a href="mailto:dmolina@opennebula.org" target="_blank">dmolina@opennebula.org</a>]
<br>
<b>Sent:</b> Tuesday, February 04, 2014 12:03 PM<br>
<b>To:</b> Hamada, Ondrej<br>
<b>Cc:</b> users<br>
<b>Subject:</b> Re: [one-users] VNC in sunstone not working on firefox 26 (one 4.4)<u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Hi Ondra,<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Let us know if the solution proposed by Wilma works for you. <u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thank you both for your feedback.<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal">On 1 February 2014 19:41, Wilma Hermann <<a href="mailto:wilma.hermann@gmail.com" target="_blank">wilma.hermann@gmail.com</a>> wrote:<u></u><u></u></p>
<div>
<div>
<div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt">Hi,<u></u><u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt">are you using a self-signed certificate? I encountered the same issue with a snakeoil-cert, Firefox seems to store the trust to a certain certificate not only based on the domain but also on the port used. Since
VNC is using a different port, this ends up in a missing trust-warning. Try opening
<a href="https://opennebulaaddr/vm/272/startvnc" target="_blank">https://opennebulaaddr</a>:29876/ in your firefox. If it gives you a warning, then you only need to trust your cert and sucure VNC should work.<u></u><u></u></p>
</div>
<p class="MsoNormal">Greetings<u></u><u></u></p>
</div>
<p class="MsoNormal">Wilma<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><u></u> <u></u></p>
<div>
<p class="MsoNormal">2014-01-31 Tino Vazquez <<a href="mailto:cvazquez@c12g.com" target="_blank">cvazquez@c12g.com</a>>:<u></u><u></u></p>
<div>
<div>
<blockquote style="border:none;border-left:solid #cccccc 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Hi,<br>
<br>
Ok, thanks for letting us know. I've opened a ticket to reproduce and<br>
solve this problem for future releases:<br>
<br>
<a href="http://dev.opennebula.org/issues/2703" target="_blank">http://dev.opennebula.org/issues/2703</a><br>
<br>
Regards,<br>
<br>
-Tino<br>
<br>
--<br>
OpenNebula - Flexible Enterprise Cloud Made Simple<br>
<br>
--<br>
Constantino Vázquez Blanco, PhD, MSc<br>
Senior Infrastructure Architect at C12G Labs<br>
<a href="http://www.c12g.com" target="_blank">www.c12g.com</a> | @C12G | <a href="http://es.linkedin.com/in/tinova" target="_blank">
es.linkedin.com/in/tinova</a><br>
<br>
--<br>
Confidentiality Warning: The information contained in this e-mail and<br>
any accompanying documents, unless otherwise expressly indicated, is<br>
confidential and privileged, and is intended solely for the person<br>
and/or entity to whom it is addressed (i.e. those identified in the<br>
"To" and "cc" box). They are the property of C12G Labs S.L..<br>
Unauthorized distribution, review, use, disclosure, or copying of this<br>
communication, or any part thereof, is strictly prohibited and may be<br>
unlawful. If you have received this e-mail in error, please notify us<br>
immediately by e-mail at <a href="mailto:abuse@c12g.com" target="_blank">abuse@c12g.com</a> and delete the e-mail and<br>
attachments and any copy from your system. C12G thanks you for your<br>
cooperation.<br>
<br>
<br>
On 31 January 2014 17:05, Hamada, Ondrej <<a href="mailto:ondrej.hamada@acision.com" target="_blank">ondrej.hamada@acision.com</a>> wrote:<br>
> Hi Tino,<br>
> Yes, I can confirm that. Without SSL the VNC works in firefox.<br>
><br>
> Regards,<br>
><br>
> Ondra<br>
><br>
> -----Original Message-----<br>
> From: Tino Vazquez [mailto:<a href="mailto:cvazquez@c12g.com" target="_blank">cvazquez@c12g.com</a>]<br>
> Sent: Friday, January 31, 2014 12:50 PM<br>
> To: Hamada, Ondrej<br>
> Cc: users<br>
> Subject: Re: [one-users] VNC in sunstone not working on firefox 26 (one 4.4)<br>
><br>
> Hi Ondrej,<br>
><br>
> Just to rule out other problems, can you confirm that without SSL VNC is working in Firefox?<br>
><br>
> Regards,<br>
><br>
> -Tino<br>
> --<br>
> OpenNebula - Flexible Enterprise Cloud Made Simple<br>
><br>
> --<br>
> Constantino Vázquez Blanco, PhD, MSc<br>
> Senior Infrastructure Architect at C12G Labs <a href="http://www.c12g.com" target="_blank">
www.c12g.com</a> | @C12G | <a href="http://es.linkedin.com/in/tinova" target="_blank">
es.linkedin.com/in/tinova</a><br>
><br>
> --<br>
> Confidentiality Warning: The information contained in this e-mail and any accompanying documents, unless otherwise expressly indicated, is confidential and privileged, and is intended solely for the person and/or entity to whom it is addressed (i.e. those
identified in the "To" and "cc" box). They are the property of C12G Labs S.L..<br>
> Unauthorized distribution, review, use, disclosure, or copying of this communication, or any part thereof, is strictly prohibited and may be unlawful. If you have received this e-mail in error, please notify us immediately by e-mail at
<a href="mailto:abuse@c12g.com" target="_blank">abuse@c12g.com</a> and delete the e-mail and attachments and any copy from your system. C12G thanks you for your cooperation.<br>
><br>
><br>
> On 30 January 2014 17:59, Hamada, Ondrej <<a href="mailto:ondrej.hamada@acision.com" target="_blank">ondrej.hamada@acision.com</a>> wrote:<br>
>> Hi Tino,<br>
>> Thank you for reply. Here's the output:<br>
>><br>
>> 17:45:06.596 POST <a href="https://opennebulaaddr/vm/272/startvnc" target="_blank">
https://opennebulaaddr/vm/272/startvnc</a> [HTTP/1.1 200<br>
>> OK 59ms]<br>
>> 17:45:06.621 SecurityError: The operation is insecure. websock.js:333<br>
>> 17:45:06.619 "New state 'loaded', was 'disconnected'. Msg: noVNC<br>
>> ready: native WebSockets, canvas rendering" util.js:110<br>
>> 17:45:06.620 "New state 'connect', was 'loaded'." util.js:110<br>
>> 17:45:06.621 "Skipping unsupported WebSocket binary sub-protocol"<br>
>> util.js:111<br>
>> 17:45:08.621 "New state 'failed', was 'connect'. Msg: Connect timeout"<br>
>> util.js:111<br>
>> 17:45:08.672 "New state 'disconnected', was 'failed'."<br>
>><br>
>> The security error - it remains me that the problems had started probably after I've configured apache as a SSL proxy for sunstone. And in Chrome it works ok. Unfortunately I need the SSL enabled.<br>
>><br>
>> -----Original Message-----<br>
>> From: Tino Vazquez [mailto:<a href="mailto:cvazquez@c12g.com" target="_blank">cvazquez@c12g.com</a>]<br>
>> Sent: Thursday, January 30, 2014 4:24 PM<br>
>> To: Hamada, Ondrej<br>
>> Cc: users<br>
>> Subject: Re: [one-users] VNC in sunstone not working on firefox 26<br>
>> (one 4.4)<br>
>><br>
>> Hi Ondrej,<br>
>><br>
>> Right after clicking on the VNC link, is anything showing in the Firefox dev tools console [1]?<br>
>><br>
>> Best,<br>
>><br>
>> -Tino<br>
>><br>
>> [1] <a href="https://developer.mozilla.org/en/docs/Tools" target="_blank">https://developer.mozilla.org/en/docs/Tools</a><br>
>> --<br>
>> OpenNebula - Flexible Enterprise Cloud Made Simple<br>
>><br>
>> --<br>
>> Constantino Vázquez Blanco, PhD, MSc<br>
>> Senior Infrastructure Architect at C12G Labs <a href="http://www.c12g.com" target="_blank">
www.c12g.com</a> | @C12G |<br>
>> <a href="http://es.linkedin.com/in/tinova" target="_blank">es.linkedin.com/in/tinova</a><br>
>><br>
>> --<br>
>> Confidentiality Warning: The information contained in this e-mail and any accompanying documents, unless otherwise expressly indicated, is confidential and privileged, and is intended solely for the person and/or entity to whom it is addressed (i.e. those
identified in the "To" and "cc" box). They are the property of C12G Labs S.L..<br>
>> Unauthorized distribution, review, use, disclosure, or copying of this communication, or any part thereof, is strictly prohibited and may be unlawful. If you have received this e-mail in error, please notify us immediately by e-mail at
<a href="mailto:abuse@c12g.com" target="_blank">abuse@c12g.com</a> and delete the e-mail and attachments and any copy from your system. C12G thanks you for your cooperation.<br>
>><br>
>><br>
>> On 27 January 2014 18:27, Ondrej Hamada <<a href="mailto:ondrej.hamada@acision.com" target="_blank">ondrej.hamada@acision.com</a>> wrote:<br>
>>> Hi,<br>
>>> currently I'm unable to use VNC from sunstone (OpenNebula 4.4, debian<br>
>>> 7.2). Sunstone shows the information about VNC start and then no VNC<br>
>>> windows pops up. This is happening on firefox 26 only (and also on my<br>
>>> colleague's computer). The same web in chromium 32 works ok. Has<br>
>>> anyone else encountered same problem? Any idea where's the problem?<br>
>>><br>
>>> --<br>
>>> Ondrej Hamada<br>
>>><br>
>>><br>
>>> This e-mail and any attachment is for authorised use by the intended<br>
>>> recipient(s) only. It may contain proprietary material, confidential<br>
>>> information and/or be subject to legal privilege. It should not be<br>
>>> copied, disclosed to, retained or used by, any other party. If you<br>
>>> are not an intended recipient then please promptly delete this e-mail<br>
>>> and any attachment and all copies and inform the sender. Thank you<br>
>>> for understanding.<br>
>>><br>
>>><br>
>>> _______________________________________________<br>
>>> Users mailing list<br>
>>> <a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
>>> <a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">
http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
>><br>
>><br>
>> This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other
party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you for understanding.<br>
>><br>
>><br>
><br>
><br>
> This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other
party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you for understanding.<br>
><br>
><br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><u></u><u></u></p>
</blockquote>
</div>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal" style="margin-bottom:12.0pt"><br>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org" target="_blank">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><u></u><u></u></p>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<p class="MsoNormal">-- <u></u><u></u></p>
<div>
<div>
<p class="MsoNormal">--<u></u><u></u></p>
</div>
<p class="MsoNormal">Daniel Molina<br>
Project Engineer<br>
OpenNebula - Flexible Enterprise Cloud Made Simple<br>
<a href="http://www.OpenNebula.org" target="_blank">www.OpenNebula.org</a> | <a href="mailto:dmolina@opennebula.org" target="_blank">
dmolina@opennebula.org</a> | @OpenNebula<u></u><u></u></p>
</div>
</div>
</div>
<br>
<hr>
<font color="Gray" face="Arial" size="1">This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed
to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you for understanding.<br>
</font>
<br clear="all">
</div>
<br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.opennebula.org">Users@lists.opennebula.org</a><br>
<a href="http://lists.opennebula.org/listinfo.cgi/users-opennebula.org" target="_blank">http://lists.opennebula.org/listinfo.cgi/users-opennebula.org</a><br>
<br></blockquote></div><br></div></div></div></div></div></div>