Thanks Nick! With your and Michaels explanation I was able to talk to any1 on the #wayvnc freenode, and he helped me troubleshoot further from there, it actually most likely was due to some mismatch in requuested auth version or so I don't fully understand that topic :P .
Currently it's possible to remove/add the following lines from wayvnc config: -- certificate_file=tls_cert.pem -- rsa_private_key_file=rsa_key.pem++ relax_encryption=true Due to removing the certs it forces the client to use ARD, and by using relax encryption we get support for more auth formats possibly ARD. For any further questions around certificated of wayvnc, it may be good to talk directly to any1 on https://web.libera.chat/#wayvnc . Anyway thanks for guiding me to the right path! It's therefore solved now :) Best Tobias Sent with [Proton Mail](https://proton.me/) secure email. On Tuesday, September 3rd, 2024 at 21:10, Nick Couchman <vn...@apache.org> wrote: > On Tue, Sep 3, 2024 at 2:56 PM Tobias Meier <m...@tobiasmeier.dev.invalid> > wrote: > >> So I've just further looked into this, but can't seem to find any obvious >> reason. >> I can connect via tigerVNC just fine, by entering my password+username >> combination, of the real username and password from the OS (source is pam). >> >> The only thing that seems a little tiny bit off is the security warning, >> also viewable in the guide: >> https://www.raspberrypi.com/documentation/computers/remote-access.html#vnc >> >> (View Attatchments for TL:DR) >> >> Is there any further log or how could I fix that? > > Unfortunately I think it's an incompatibility between the encryption that > WayVNC uses and the ones that libvnc (the underlying VNC library that > Guacamole uses) support. libvnc (=> Guacamole) supports the VeNCrypt and > AnonTLS encryption mechanisms, while WayVNC seems to be trying to negotiate > X.509 certificate exchanges as part of the authentication process. > > I've not used WayVNC at all, so I'm not sure if there's any way to > reconfigure it to support the VeNCrypt extension, instead. > > -Nick
