xpra icon
Bug tracker and wiki

This bug tracker and wiki are being discontinued
please use https://github.com/Xpra-org/xpra instead.


Opened 6 years ago

Closed 2 years ago

Last modified 17 months ago

#1160 closed enhancement (fixed)

per socket authentication and encryption configuration

Reported by: Antoine Martin Owned by: Antoine Martin
Priority: critical Milestone: 4.0
Component: server Version: trunk
Keywords: Cc:

Description

Split from #1159.
We should extend the socket configuration syntax to be able to configure authentication and encryption for each socket.
This would get rid of a number of command line arguments (which we would keep temporarily for backwards compatibility, probably also still used by the client command line).

ie: for just authentication (replacing the tcp-auth command line option):

xpra start \
    --bind-tcp=0.0.0.0:10000,auth=file:filename=password.txt

for encryption as well:

xpra start \
    --bind-tcp=0.0.0.0:10000,encryption=AES:keyfile=key.txt,auth=file:filename=password.txt

Attachments (1)

per-socket-auth.patch​ (39.6 KB) - added by Antoine Martin 3 years ago.
work in progress patch

Download all attachments as: .zip

Change History (11)

comment:2 Changed 6 years ago by Antoine Martin

Milestone: 0.18 → future
Status: new → assigned

comment:3 Changed 4 years ago by Antoine Martin

Milestone: future → 3.1

comment:4 Changed 3 years ago by Antoine Martin

See also ticket:2125#comment:4

Last edited 3 years ago by Antoine Martin (previous) (diff)

comment:5 Changed 3 years ago by Antoine Martin

Milestone: 3.1 → 4.0

Milestone renamed

comment:6 Changed 3 years ago by Antoine Martin

Priority: major → critical

Blocker for #2125.

Changed 3 years ago by Antoine Martin

Attachment: per-socket-auth.patch​ added

work in progress patch

comment:7 Changed 3 years ago by Antoine Martin

Done for authentication in r23895.
As a side-effect, we no longer initialize the authentication modules using the config object.

New related ticket: #2424.

Last edited 3 years ago by Antoine Martin (previous) (diff)

comment:8 Changed 3 years ago by Antoine Martin

r24142 fixes named pipes.

comment:9 Changed 2 years ago by Antoine Martin

Resolution: → fixed
Status: assigned → closed

Per socket encryption options done in r25202 + r25203, fixup in r25209.

ie:

xpra start --start=xterm --bind-tcp=0.0.0.0:10000,encryption=AES,encryption-keyfile=./key.txt --bind-tcp=0.0.0.0:10001 -d crypto

Port 10000 uses encryption, and port 10001 does not.

See also #2460 (ssl) and #2583 (ssh).

Last edited 2 years ago by Antoine Martin (previous) (diff)

comment:10 Changed 2 years ago by Antoine Martin

For client connection strings, see #2794.

comment:11 Changed 17 months ago by migration script

this ticket has been moved to: ​https://github.com/Xpra-org/xpra/issues/1160

Note: See TracTickets for help on using tickets.