Skip to content

feat(rdp): support legacy Windows Server RDP ciphers and certs via OpenSSL - #40

Open
AlissonAraldi wants to merge 1 commit into
privum-cloud:mainfrom
AlissonAraldi:pr/rdp-openssl-support
Open

AlissonAraldi wants to merge 1 commit into
privum-cloud:mainfrom
AlissonAraldi:pr/rdp-openssl-support

Conversation

@AlissonAraldi

Copy link
Copy Markdown

Summary

The default RDP cleanpath TLS relay in src-tauri/src/gateway/rdp.rs uses tokio-rustls. In enterprise networks with legacy Windows Server versions (Windows Server 2008 R2, 2012, 2016) or hosts with self-signed certificates and legacy cipher suites, rustls rejects the TLS handshake.

Changes

  • Replaced the rustls client connector in src-tauri/src/gateway/rdp.rs with tokio-openssl configured with ALL:@SECLEVEL=0 and SslVerifyMode::NONE.
  • Preserved certificate chain extraction for CredSSP/NLA negotiation downstream.
  • Enables seamless connection to both modern and legacy Windows Server fleets.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant