# VNC doen't work with https

**URL:** <https://forum.opennebula.io/t/vnc-doent-work-with-https/5522>\
**Category:** Product Support\
**Created:** [January 5, 2018, 4:24pm UTC](https://forum.opennebula.io/t/vnc-doent-work-with-https/5522 "2018-01-05T16:24:48Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![1115](https://avatars.discourse-cdn.com/v4/letter/1/9f8e36/32.png) [@1115](https://forum.opennebula.io/u/1115)\
**Post date:** [January 5, 2018, 4:24pm UTC](https://forum.opennebula.io/t/vnc-doent-work-with-https/5522/1 "2018-01-05T16:24:48Z")

</div>

Today i install RapidSSL and find problem with vnc. i find some issuies iin the forum, but there are don’t work for me.

LOG noVNC  
WebSocket server settings:

- Listen on :29876
- Flash security policy server
- No SSL/TLS support (no cert file)
- proxying from :29876 to targets in /var/lib/one/sunstone\_vnc\_tokens  
IP: SSL connection but ‘/etc/nginx/ssl/nebula\_ca.crt’ not found  
IP: SSL connection but ‘/etc/nginx/ssl/nebula\_ca.crt’ not found  
IP: SSL connection but ‘/etc/nginx/ssl/nebula\_ca.crt’ not found

NGINX.confuser nginx;  
events {  
worker\_connections 1024;  
multi\_accept on;  
}

http {  
log\_format main ‘$remote\_addr - $remote\_user [$time\_local] “$request” ‘  
’$status $body\_bytes\_sent “$http\_referer” ‘  
’"$http\_user\_agent" “$http\_x\_forwarded\_for”’;

```
access_log /var/log/nginx/access.log main;

map $http_upgrade $connection_upgrade {
    default upgrade;
    '' close;
}

sendfile on;
tcp_nopush on;
tcp_nodelay on;
keepalive_timeout 65;
types_hash_max_size 2048;

include /etc/nginx/mime.types;
default_type application/octet-stream;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 5m;
ssl_prefer_server_ciphers on;
ssl_stapling on;

include /etc/nginx/conf.d/*.conf;

```

}

Virtual Host  
upstream sunstone {  
server 127.0.0.1:9869;  
}

upstream websocketproxy {  
server 127.0.0.1:29876;  
}

server {  
listen _:80;  
server\_name [cloud.test.by](http://cloud.test.by);  
rewrite ^(._)$ [https://cloud.test.by$1](https://cloud.test.by%241) permanent;  
}

server {  
listen 443 ssl http2 deferred;  
ssl on;  
ssl\_session\_timeout 24h;  
ssl\_certificate /etc/nginx/ssl/nebula\_ca.crt;  
ssl\_certificate\_key /etc/nginx/ssl/nebula.key;

```
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;

access_log /var/log/nginx/opennebula-sunstone-access.log;
error_log /var/log/nginx/opennebula-sunstone-error.log;

client_max_body_size 10G;

```

location / {  
proxy\_pass [http://sunstone](http://sunstone);  
proxy\_redirect off;  
log\_not\_found off;  
proxy\_set\_header X-Real-IP $remote\_addr;  
proxy\_set\_header Host $http\_host;  
proxy\_set\_header X-Forwarded-FOR $proxy\_add\_x\_forwarded\_for;  
}

```
location /websockify {
    proxy_pass http://websocketproxy;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection $connection_upgrade;
    add_header Access-Control-Allow-Origin *;
}

```

}

UI settings  
:host: 127.0.0.1  
:port: 9869

:vnc\_proxy\_port: 29876  
:vnc\_proxy\_support\_wss: yes  
:vnc\_proxy\_cert: /etc/nginx/ssl/nebula\_ca.crt  
:vnc\_proxy\_key: /etc/nginx/ssl/nebula.key  
:vnc\_proxy\_ipv6: false  
:vnc\_request\_password: false

---

<div class="post-metadata">

**Author:** ![1115](https://avatars.discourse-cdn.com/v4/letter/1/9f8e36/32.png) [@1115](https://forum.opennebula.io/u/1115)\
**Post date:** [January 8, 2018, 10:04am UTC](https://forum.opennebula.io/t/vnc-doent-work-with-https/5522/2 "2018-01-08T10:04:52Z")

</div>

I changed vnc\_proxy\_cert and vnc\_proxy\_key paths for /etc/ssl/certs/ and all became good.  
But it’s rather strange, cause all permissions was oneadmin:oneadmin and 777