Recent changes to patches

#5 Unable to connect with security types in config file

2014-12-13T08:59:35.934000Z

VeNCrypt is dead.

The project has been merged into http://tigervnc.org/

Unable to connect with security types in config file

2014-12-12T23:15:10.457000Z

Steps to reproduce:
1. Start VeNCrypt
2. Connect to a server
3. Options->Load/Save->Configuration File:Save, store password
4. Close VeNCrypt
5. Start VeNCrypt with command line >vencviewer.exe myconnection.vnc

Expected: Connection is made
Actual:
- Message box is displayed, click yes:
VeNCrypt Viewer : Question
No matching security types
Do you wish to attempt to reconnect to sca-lx-08:22?
Yes/No
- Same message is displayed again, click yes
- Program crashes:
VeNCrypt Viewer for Win32 has stopped working
A problem caused the program to stop working correctly. Please close the program.
[Close the program]

Workaround:
Comment out the PreferredTypes line in the config file

RealVNC scaling patch for vncviewer

2009-11-17T10:16:39Z

Allows you to scale the viewer window instead of using scrollbars. Pretty similar to tightvnc scaling. Please merge!

Hostname validation checks ip address

2008-02-13T13:51:20Z

The hostname validation in VeNCRypt checks for "ip::port" which breaks the validation on two parts:

1. This is contrary to how other VNC and cert checks are performed, and also why should the server include the port number in the certificate?

2. This opens us up for a dns-poisoning attack.

Checking that the hostname in the certificate matches the hostname entered by the client is the only way that this should work and is also the way that for example Firefox does it.

Segfault on shutdown

2008-02-12T13:17:40Z

There is a segfault on application shutdown due to double freeing of two char pointers.

CA and CRL file mismatch when loading defaults (win32)

2008-02-12T07:55:19Z

There is a problem in the Windows version of VeNCrypt when loading the defaults from the registry where the contents of x509ca overwrites the contents of x509crl which in turn will always make the CRL loading fail since they cannot load the same file.