VNCServer certificate and licensing issues in Raspbian

I am having an issue in Raspbian on the LePotato with starting the vncserver service and running vncserver at all. I get the following log / error responses with each of the following commands. Tight VNC Server works fine for me but with the 8 character limit password among other things, I would rather use Real VNC Server (realvnc-vnc-server apt package) if possible. Any help or thoughts are appreciated!

sudo vncserver command outputs

VNC(R) Server 6.7.2 (r42622) ARMv6 (May 13 2020 19:34:20)
Copyright (C) 2002-2020 RealVNC Ltd.
RealVNC and VNC are trademarks of RealVNC Ltd and are protected by trademark
registrations and/or pending trademark applications in the European Union,
United States of America and other jurisdictions.
Protected by UK patent 2481870; US patent 8760366; EU patent 2652951.
See https://www.realvnc.com for information on VNC.
For third party acknowledgements see:
https://www.realvnc.com/docs/6/foss.html
OS: Raspbian GNU/Linux 10, Linux 6.0.19, aarch64

VNC(R) Server 6.7.2 (r42622) ARMv6 (May 13 2020 19:44:08)
Copyright (C) 2002-2020 RealVNC Ltd.
RealVNC and VNC are trademarks of RealVNC Ltd and are protected by trademark
registrations and/or pending trademark applications in the European Union,
United States of America and other jurisdictions.
Protected by UK patent 2481870; US patent 8760366; EU patent 2652951.
See https://www.realvnc.com for information on VNC.
For third party acknowledgements see:
https://www.realvnc.com/docs/6/foss.html
OS: Raspbian GNU/Linux 10, Linux 6.0.19, aarch64
<11> 2023-02-20T16:22:50.245Z bna Xvnc[1371]: VendorConfig: Error in Certificate "CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US": X.509 Error: Certificate expired
<11> 2023-02-20T16:22:50.246Z bna Xvnc[1371]: VendorConfig: Error in Certificate "CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2": X.509 Error: Certificate expired
On some distributions (in particular Red Hat), you may get a better experience
by running vncserver-virtual in conjunction with the system Xorg server, rather
than the old version built-in to Xvnc. More desktop environments and
applications will likely be compatible. For more information on this alternative
implementation, please see: https://www.realvnc.com/doclink/kb-546

Running applications in /root/.vnc/xstartup

The virtual session failed to start. Session log:

XvncSession start time: 2023-02-20T16:22:50.289Z

Starting Xvnc
Waiting for Xvnc...
VNC(R) Server 6.7.2 (r42622) ARMv6 (May 13 2020 19:44:08)
Copyright (C) 2002-2020 RealVNC Ltd.
RealVNC and VNC are trademarks of RealVNC Ltd and are protected by trademark
registrations and/or pending trademark applications in the European Union,
United States of America and other jurisdictions.
Protected by UK patent 2481870; US patent 8760366; EU patent 2652951.
See https://www.realvnc.com for information on VNC.
For third party acknowledgements see:
https://www.realvnc.com/docs/6/foss.html
OS: Raspbian GNU/Linux 10, Linux 6.0.19, aarch64
<11> 2023-02-20T16:22:50.359Z bna Xvnc[1376]: VendorConfig: Error in Certificate "CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US": X.509 Error: Certificate expired
<11> 2023-02-20T16:22:50.360Z bna Xvnc[1376]: VendorConfig: Error in Certificate "CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2": X.509 Error: Certificate expired
<13> 2023-02-20T16:22:50.407Z bna Xvnc[1376]: ServerManager: Server started

Fatal server error:
VNC Server is not licensed correctly.

Connections will be prohibited until a valid subscription is applied.
<13> 2023-02-20T16:22:50.409Z bna Xvnc[1376]: ServerManager: Server stopped
Timed out waiting for Xvnc, last error: connect: No such file or directory (2)

sudo service vnc-x11-serviced status shows the following

● vncserver-x11-serviced.service - VNC Server in Service Mode daemon
   Loaded: loaded (/lib/systemd/system/vncserver-x11-serviced.service; enabled; vendor preset: enabled)
   Active: active (running) since Mon 2023-02-20 11:19:54 EST; 1h 1min ago
 Main PID: 865 (vncserver-x11-s)
    Tasks: 5 (limit: 1985)
   Memory: 18.2M
   CGroup: /system.slice/vncserver-x11-serviced.service
           β”œβ”€ 865 /usr/bin/vncserver-x11-serviced -fg
           β”œβ”€ 872 /usr/bin/vncserver-x11-core -service
           β”œβ”€1016 /usr/bin/vncagent service 11
           β”œβ”€1161 /usr/bin/vncserverui service 12
           └─1245 /usr/bin/vncserverui -statusicon 5

Feb 20 11:19:54 bna systemd[1]: Started VNC Server in Service Mode daemon.
Feb 20 11:19:54 bna vncserver-x11[872]: LogDestMem: Start replaying stored messages
Feb 20 11:19:54 bna vncserver-x11[872]: VendorConfig: Error in Certificate "CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US": X.509 Error: Certificate expired
Feb 20 11:19:54 bna vncserver-x11[872]: VendorConfig: Error in Certificate "CN=GlobalSign,O=GlobalSign,OU=GlobalSign Root CA - R2": X.509 Error: Certificate expired
Feb 20 11:19:54 bna vncserver-x11[872]: LogDestMem: Finished replaying stored messages
Feb 20 11:19:54 bna vncserver-x11[872]: ServerManager: Server started
Feb 20 11:19:54 bna vncserver-x11[872]: ConsoleDisplay: Cannot find a running X server
Feb 20 11:19:59 bna vncserver-x11[872]: ConsoleDisplay: Found running X server (pid=915, binary=/usr/lib/xorg/Xorg)

RealVNC is not a Debian package. This is something Raspberry Pi Foundation includes on their images and we don’t support it. If you want to license it, you are free to do so.

We recommend using an open source VNC or RDP solution.

TightVNC does not have a 8 character limit.

1 Like

Thank you for the quick update! I will check for a VNC or RDP alternative.

Seeing this with TightVNC and everywhere I’ve looked so far shows an 8 character password limitation.

test@lepotato:~ $ tightvncserver
Using password file /home/test/.vnc/passwd
VNC directory /home/test/.vnc does not exist, creating.
Password:
*Warning: password truncated to the length of 8.*
Verify:
Would you like to enter a view-only password (y/n)? n

See TightVNC: Manual Page for vncpasswd(1)