On 15/07/2026 17:04, Michael Tokarev wrote: > Meanwhile, I reverted the change on the freerdp side which explicitly > enabled TLS. So this bug report was actually due to the change in > freerdp, > but the original issue is in xrdp. So I guess severity of this bug can > now be lowered at least to "important" level (doing this now).
Doesn't seem to work though. Host-side, I'm running up-to-date Debian unstable, with freerdp3 3.29.0+dfsg-1 and remmina 1.4.43+dfsg-1. Guest-side, I have a Kali VM (roughly equivalent to Debian testing) with xrdp 0.10.6.1-2+kali1 (equivalent to what's currently in Debian unstable). Connection from remmina to the VM fails, with these errors: ``` [ERROR] MAC checksum error for non-FIPS PDU [ERROR] xrdp_rdp_recv: xrdp_sec_recv failed [ERROR] libxrdp_process_data: xrdp_rdp_recv failed [ERROR] xrdp_process_data_in: xrdp_process_loop failed ``` So these seems to be caused by the fact that freerdp now refuses the old "rdp" security layer (cf. my previous message in this bug for references). If I fix TLS on the guest (with "adduser xrdp ssl-cert"), it works. Best, Arnaud
