summaryrefslogtreecommitdiffstats
path: root/x11vnc/help.c
diff options
context:
space:
mode:
authorrunge <runge@karlrunge.com>2010-05-01 13:16:37 -0400
committerrunge <runge@karlrunge.com>2010-05-01 13:16:37 -0400
commit59c0ae40935114b9bbe6a966446587469fc5deae (patch)
tree5e45a4014aa801de98ff65b0e9eb6209232a467d /x11vnc/help.c
parent8d79a63d3c8caca5d0db4827e072f7c773387afa (diff)
downloadlibtdevnc-59c0ae40935114b9bbe6a966446587469fc5deae.tar.gz
libtdevnc-59c0ae40935114b9bbe6a966446587469fc5deae.zip
x11vnc: X11VNC_DISABLE_SSL_CLIENT_MODE option to disable SSL
client role in reverse connections. Improvements to logging in ultravnc_repeater, ULTRAVNC_REPEATER_NO_RFB option. Increase SSL timeout and print message if 'repeater' mode is detected for reverse SSL connection. Fix RECORD scroll XCopyArea detection with recent gtk/gdk library; set X11VNC_SCROLL_MUST_EQUAL to disable. Limit logging of RECORD error messages.
Diffstat (limited to 'x11vnc/help.c')
-rw-r--r--x11vnc/help.c22
1 files changed, 22 insertions, 0 deletions
diff --git a/x11vnc/help.c b/x11vnc/help.c
index 1289a42..90dddfd 100644
--- a/x11vnc/help.c
+++ b/x11vnc/help.c
@@ -642,6 +642,28 @@ void print_help(int mode) {
" See also the -proxy option below for additional ways\n"
" to plumb reverse connections.\n"
"\n"
+" Reverse SSL: using -connect in -ssl mode makes x11vnc\n"
+" act as an SSL client (initiates SSL connection) rather\n"
+" than an SSL server. The idea is x11vnc might be\n"
+" connecting to stunnel on the viewer side with the\n"
+" viewer in listening mode. If you do not want this\n"
+" behavior, use -env X11VNC_DISABLE_SSL_CLIENT_MODE=1.\n"
+" With this the viewer side can act as the SSL client\n"
+" as it normally does for forward connections.\n"
+"\n"
+" Reverse SSL Repeater mode: This will work, but note\n"
+" that if the VNC Client does any sort of a 'Fetch Cert'\n"
+" action before connecting, then the Repeater will\n"
+" likely drop the connection and both sides will need\n"
+" to restart. Consider the use of -connect_or_exit\n"
+" and -loop300,2 to have x11vnc reconnect once to the\n"
+" repeater after the fetch. You will probably also want\n"
+" to supply -sslonly to avoid x11vnc thinking the delay\n"
+" in response means the connection is VeNCrypt. The env\n"
+" var X11VNC_DISABLE_SSL_CLIENT_MODE=1 discussed above\n"
+" may also be useful (i.e. the viewer can do a forward\n"
+" connection as it normally does.)\n"
+"\n"
" IPv6: as of x11vnc 0.9.10 the -connect option should\n"
" connect to IPv6 hosts properly. If there are problems\n"
" you can disable IPv6 by setting -DX11VNC_IPV6=0\n"