# VNC not working with vCenter + SSL \[SOLVED\]

**URL:** <https://forum.opennebula.io/t/vnc-not-working-with-vcenter-ssl-solved/3334>\
**Category:** Product Support\
**Created:** [November 23, 2016, 11:57am UTC](https://forum.opennebula.io/t/vnc-not-working-with-vcenter-ssl-solved/3334 "2016-11-23T11:57:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![UAnton](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/uanton/32/6309_2.png) [@UAnton](https://forum.opennebula.io/u/UAnton)\
**Post date:** [November 23, 2016, 11:57am UTC](https://forum.opennebula.io/t/vnc-not-working-with-vcenter-ssl-solved/3334/1 "2016-11-23T11:57:10Z")

</div>

After add ssl crt to opennebula - VNC stop working in all vms.

Read all topics about VNC but no any solutions of my problem…

nginx.conf

```
server {
            listen 443;
            server_name _;
            ssl on;
            ssl_certificate /etc/ssl/certs/server.crt;
            ssl_certificate_key /etc/ssl/certs/server.key;
            # Load configuration files for the default server block.
            include /etc/nginx/default.d/*.conf;
            location / {
            proxy_pass http://127.0.0.1:9869;
            }

```

sunstone-server.conf

```
    :vnc_proxy_port: 29876
    :vnc_proxy_support_wss: only
    :vnc_proxy_cert: /etc/ssl/certs/server.crt
    :vnc_proxy_key: /etc/ssl/certs/server.key
    :vnc_proxy_ipv6: false
    :vnc_request_password: true
```

---

<div class="post-metadata">

**Author:** ![mcabrerizo](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/mcabrerizo/32/4829_2.png) [@mcabrerizo](https://forum.opennebula.io/u/mcabrerizo)\
**Post date:** [November 24, 2016, 8:41am UTC](https://forum.opennebula.io/t/vnc-not-working-with-vcenter-ssl-solved/3334/2 "2016-11-24T08:41:48Z")

</div>

Hi Anton,  
here it’s what I’ve tested.

Step 1. First I’ve created my cert and key using my own testing CA (though it’s best to use [Let’s encrypt](https://letsencrypt.org/) if you have your servers on Internet as it’s free).

Step 2. I’ve imported my testing certificate authority file in my browser as a valid certificate issuer, so I can trust any cert signed by this CA for all purposes. I’m using Google Chrome.

Step 3. I’ve set the following in /etc/one/sunstone-server.conf as you’ve already done:

:vnc\_proxy\_support\_wss: only  
:vnc\_proxy\_cert: /etc/one/certs/one-cert.crt  
:vnc\_proxy\_key: /etc/one/certs/one-cert.key

Step 4. I’ve restarted Sunstone.

Step 5. I’ve tried to open VNC connections against my vcenter’s VM. The VNC connection shows it’s encrypted, so far so good.

 ![](https://canada1.discourse-cdn.com/flex031/uploads/opennebula/original/2X/c/caa61ed48b6b36d214cd6a050648b54daf0e7a99.png)

Step 6. Then I’ve installed nginx and configure it with the same configuration as you’ve proposed.

Step 7. I’ve tried to open Sunstone using https and open a VNC connection and… it works.

![](https://canada1.discourse-cdn.com/flex031/uploads/opennebula/original/2X/e/e7b2b2934391118d295b2e06a1828b171c919f30.png)

I’d check Step 2 as I bet it could be a certificate trust issue.

Are you using a self-signed certificate? Recent browsers are really picky about self-signed that’s why I have used my own CA ([I wrote this a long time ago](http://opennebula.org/opennebula-securing-sunstones-novnc-connections-with-secure-websocket-and-your-own-certificate-authority/)) and then I’ve imported the CA so my certs are trusted. In the past this worked but I’m almost sure it doesn’t work any more: if you visit [https://x.x.x.x:29876](https://x.x.x.x:29876) maybe your browser allows you to add an exception. In any case I’d try to use a cert signed by a CA your browser trusts.

In any case, you can check what’s happening in your browser using the development tools (you can open it with Ctrl+Shift+I in most browsers) and look for errors in the Console tab that would tell us more about what’s happening.

 ![](https://canada1.discourse-cdn.com/flex031/uploads/opennebula/original/2X/4/4bd3d29f0354ff30ee49ec08b969c836e024d74c.png)

Cheers!

---

<div class="post-metadata">

**Author:** ![UAnton](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.opennebula.io/uanton/32/6309_2.png) [@UAnton](https://forum.opennebula.io/u/UAnton)\
**Post date:** [November 24, 2016, 12:37pm UTC](https://forum.opennebula.io/t/vnc-not-working-with-vcenter-ssl-solved/3334/3 "2016-11-24T12:37:22Z")

</div>

Thanks for answer! I tested all and all start works after reboot ESXi nodes!  
Sorry to trouble you, and thanks for the help!