On 7/15/26 14:06, Arnaud Rebillout wrote:
On 15/07/2026 17:04, Michael Tokarev wrote:
Meanwhile, I reverted the change on the freerdp side which explicitly
enabled TLS. So this bug report was actually due to the change in
freerdp,
but the original issue is in xrdp. So I guess severity of this bug can
now be lowered at least to "important" level (doing this now).
Doesn't seem to work though.
debci tests passed for freerdp 3.29 (where I disabled TLS).
Host-side, I'm running up-to-date Debian unstable, with freerdp3
3.29.0+dfsg-1 and remmina 1.4.43+dfsg-1. Guest-side, I have a Kali VM
(roughly equivalent to Debian testing) with xrdp 0.10.6.1-2+kali1
(equivalent to what's currently in Debian unstable).
Connection from remmina to the VM fails, with these errors:
```
[ERROR] MAC checksum error for non-FIPS PDU
[ERROR] xrdp_rdp_recv: xrdp_sec_recv failed
[ERROR] libxrdp_process_data: xrdp_rdp_recv failed
[ERROR] xrdp_process_data_in: xrdp_process_loop failed
```
So these seems to be caused by the fact that freerdp now refuses the old
"rdp" security layer (cf. my previous message in this bug for references).
If I fix TLS on the guest (with "adduser xrdp ssl-cert"), it works.
I can probably do that in the freerdp test. Also increase verbosity level
and print logs produced by xrdp - to see what's actually going on on its
side (the test currently fails on loong64 and I've no idea why).
Thanks,
/mjt
