I'm using guacamole (http://guac-dev.org/) to access (parts of) my home (Debian) computer clientless, on the go.
From my work computer (University Network) the screen is however not updating and only shows "Connecting, waiting for first update...". According to the FAQ (http://guac-dev.org/doc/gug/troubleshooting.html) this is likely due to a proxy between my home and my work computer not flushing it's buffer, and can be solved by using https.
I did that by: (1) Creating my own certificate following (www.heimpold.de/mhei/mini-howto-zertifikaterstellung.htm) and adding to a keystore-file (2) Adding to the tomcat6 server.xml:
<Connector protocol="org.apache.coyote.http11.Http11Protocol" port="8443" maxThreads="200" scheme="https" secure="true" SSLEnabled="true" keystoreFile="/usr/share/tomcat/.keystore" keystorePass="mypassword" clientAuth="false" sslProtocol="TLS"/>
(3) Adding to the guacd config file:
I can actually access
https://localhost:8443/guacamole and login, yet, when I try to actually open a session (i.e. view my home-desktop) I get
Server error (in quacamole design, not like a browser or http error message) in my browser window. At the same time the tomcat-log file states:
SEVERE: Server error in tunnel [...] PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
(full log available at http://pastebin.com/qeaiNKRM)