https://bugs.kde.org/show_bug.cgi?id=503232

--- Comment #5 from Fabio <ctrlal...@gmail.com> ---
Thank you for the log files.
>From what i can see under krdc 25 the problem is not related to credentials,
but to the fact that the ssl library on your system are not validating the
remote server certificate:
---
[14:06:15:282] [2:00000016] [DEBUG][com.freerdp.core.gcc] -
[gcc_read_server_security_data]: Server rdp encryption method: 128BIT
[14:06:15:282] [2:00000016] [ERROR][com.freerdp.core] -
[update_x509_from_info]: EVP_PKEY_fromdata_init(ctx) failed
[14:06:15:282] [2:00000016] [ERROR][com.freerdp.core] -
[update_x509_from_info]: failed to update x509 from rdpCertInfo
---
This is probably caused by RDP using weak, old ciphers that are blocked by
default on recent openssl versions.
The issue happened also on the FreeRDP flatpack:
https://github.com/FreeRDP/FreeRDP/issues/11104
https://github.com/flathub/com.freerdp.FreeRDP/pull/62
https://github.com/flathub/com.freerdp.FreeRDP/issues/63

Can you try to download this openssl config file:
https://github.com/flathub/com.freerdp.FreeRDP/pull/62/files#diff-fdfe97f9eaa77cd3e907822fbad45a5ec1e0d12ef455fd6bc588075c091c81bb
and run krdc defining "OPENSSL_CONF=/app/share/legacy-openssl.cnf" as in this
file:
https://github.com/flathub/com.freerdp.FreeRDP/pull/62/files#diff-26581aa765cc6319e6f739ef4afd09201be927a8b5415a659f7104c37ae819df
It could work. if it does, i can try to get these changes pushed into our
flatpak.

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to