Enhanced TightVNC Viewer

This release implements "double proxy" connections
for Windows with
SSL and "double SSH" connections. For SSL mode,
this involves two Web
proxies, usually a local proxy connection to leave
a firewall followed
by a second proxy connection to enter another
firewall to where the
VNC server is. For SSH mode, this involves an
initial SSH session to
a firewall gateway followed by a second SSH
connection to an internal
machine running the VNC server. Standalone (i.e.,
no VNC or SSH) port
knocking is enabled.

This release enables creating SSL certificates and private keys via the GUI. External certificates can also be imported. Port knocking may now be done when the VNC or SSH connection finishes; this allows for closing firewall ports.

Port knocking functionality (where a secret pattern of firewall accesses is used to open an otherwise closed SSH or SSL port) is introduced. More assistance is provided in setting up local SMB file sharing to the remote machine. The user can now change which VNC Viewer (UltraVNC, RealVNC, etc.) is used by the front-end program. Additional SSH port redirections may be specified. A non-VNC ssh login mode is added for convenience, for example: to perform port knocking for regular logins.

This release adds automatic service tunnelings via
SSH: CUPS and SMB Printing (applications running
on the remote VNC server can print on your local
printer), ESD/ARTSD Audio (remote sound
applications can be heard on the VNC viewer side),
and SMB (Windows/Samba) filesystem mounting (you
can mount your local shares on the remote VNC
server).

This release adds new features to the TightVNC
Unix viewer and provides
GUI and commandline tools that automatically
initialize SSL- or
SSH-encrypted VNC tunnels on both Unix and
Windows. The new Unix
features are: NewFBSize support (screen resizing),
exact alphablending
for transparent cursors, and an XGrabServer mode
for legacy window
managers. SSL and SSH tunneling is accomplished by
using bundled stunnel
and plink executables. The SSL mode is intended
for use with x11vnc's
built-in SSL support, but works with any VNC
server using stunnel or
another SSL tunnel.