x11vnc Changelog

What's new in x11vnc 0.9.10

May 4, 2010
  • The included SSL enabled Java applet viewer now supports Chained SSL Certificates. The debugCerts=yes applet parameter aids troubleshooting certificate validation. The x11vnc -ssl mode has always supported chained SSL certificates (simply put the intermediate certificates, in order, after the server certificate in the pem file.)
  • A demo CGI script desktop.cgi shows how to create an SSL encrypted, multi-user x11vnc web login desktop service. The script requires x11vnc version 0.9.10. The user logs into a secure web site and gets his/her own virtual desktop (Xvfb.) x11vnc's SSL enabled Java Viewer Applet is launched by the web browser for secure viewing (and so no software needs to be installed on the viewer-side.) One can use the desktop.cgi script for ideas to create their own fancier or customized web login desktop service (e.g. user-creation, PHP, SQL, specialized desktop application, etc.) More info here. There is also an optional 'port redirection' mode that allows redirection to other SSL enabled VNC servers running inside the firewall.
  • Built-in support for IPv6 (128 bit internet addresses) is now provided. See the -6 and -connect options for details. Additionally, in case there are still problems with built-in IPv6 support, a transitional tool is provided in inet6to4 that allows x11vnc (or any other IPv4 application) to receive connections over IPv6.
  • The Xdummy wrapper script for Xorg's dummy driver is updated and no longer requires being run as root. New service options are provided to select Xdummy over Xvfb as the virtual X server to be created.
  • The "%" unix password verification tricks for the -unixpw option are now documented. They have also been extended to run a command as the user if one sets the environment variable UNIXPW_CMD. The desktop.cgi demo script takes advantage of this new feature.
  • A bug has been fixed that would prevent the Java applet viewer from being downloaded successfully in single-port HTTPS/VNC inetd mode. The env. var. X11VNC_HTTPS_DOWNLOAD_WAIT_TIME can be used to adjust for how many seconds a -inetd or -https httpd download is waited for (default 15 seconds.) The applet will now autodetect x11vnc and use GET=1 for faster connecting. Many other improvements and fixes.
  • The TightVNC security type (TightVNC features enabler) now works for RFB version 3.8.
  • The X property X11VNC_TRAP_XRANDR can be set on a desktop to force x11vnc to use the -xrandr screen size change trapping code.
  • New remote control query options: pointer_x, pointer_y, pointer_same, pointer_root, and pointer_mask. A demo script using them misc/panner.pl is provided.
  • The -sslScripts option prints out the SSL certificate management scripts.

New in x11vnc 0.9.8 (Jul 8, 2009)

  • Better reliability for the Java Viewer applet when connecting through a Web Proxy via HTTPS.
  • A proxy hostname and port can be specified via applet parameters.
  • Proxy Authentication via Auth-Basic is supported.
  • More x11vnc printout in -ssl is provided to help troubleshoot this mode and other ssl connections.
  • Stability improvements to -threads mode. Running x11vnc this way is more reliable now. Threaded operation sometimes gives better interactive response and faster updates. The threaded mode now supports multiple VNC viewers using the same VNC encoding (some only on Linux or enabled at build time.) The threaded mode can also yield a performance enhancement in the many client case (e.g. class-room broadcast.) We have tested with 30 to50 simultaneous clients. See also -reflect.
  • Miscellaneous new features and changes:
  • x11vnc automatically tries to work around an Xorg server bug involving infinitely repeating keys when turning off key repeating. Use -repeat if the automatic workaround fails.Also, the environment variable X11VNC_IDLE_TIMEOUT (seconds) is provided.
  • In -reflect mode the environment variable X11VNC_REFLECT_PASSWORD is provided.
  • The -clip mode works under -rawfb.
  • The -nounixpw option can disable unixpw mode if an earlier option enables it (e.g. -svc).
  • Scroll detection is skipped for windows with 'OpenOffice' in their name.

New in x11vnc 0.9.7 (Apr 27, 2009)

  • Binaries corresponding to the LibVNCServer x11vnc 0.9.7 source release.
  • Some of these binaries and also ones from the earlier releases (0.9.6 and earlier) are statically linked with libssl.a and libcrypto.a for deployment convenience.
  • To find out if a binary is statically linked with libssl or libcrypto, run 'ldd' or 'otool -L' on the binary. If you see the libssl or libcryto reference that means it is
  • dynamically linked instead.