ThinLinc Web Access SSL/TLS certificate

Dear Martin,

Yes sure the root CA is trusted by the endpoints.
Here is what made this works =)

[duderino@m tlwebaccess]$ pwd
/opt/thinlinc/etc/tlwebaccess
[duderino@m tlwebaccess]$ sudo chmod 400 cert_wildcard.crt
[duderino@m tlwebaccess]$ sudo chmod 400 cert_wildcard.key

And the clues came indeed from:

[duderino@m tlwebaccess]$ sudo tail -f /var/log/tlwebaccess.log
2023-06-19 08:13:01 DEBUG tlwebaccess[29034]: [::ffff:x.x.x.x] TLS connection detected
2023-06-19 08:13:01 DEBUG tlwebaccess[29034]: [::ffff:x.x.x.x] tlstunnel started as pid 29035
2023-06-19 08:13:01 ERROR tlwebaccess[29035]: [::ffff:x.x.x.x] File is read and writeable by others than file owner.

To get the DEBUG output you need to edit this line in this file:

[duderino@m conf.d]$ pwd
/opt/thinlinc/etc/conf.d
[duderino@m conf.d]$ sudo nano webaccess.hconf
defaultlevel=DEBUG

Thanks,
Regards,
M.

2 Likes