[jira] [Updated] (GUACAMOLE-1332) Add parameter for specifying known RDP server certificate/fingerprint

["Nick Couchman (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/GUACAMOLE-1332?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Nick Couchman updated GUACAMOLE-1332:
-------------------------------------
    Fix Version/s: 1.6.0

> Add parameter for specifying known RDP server certificate/fingerprint
> ---------------------------------------------------------------------
>
>                 Key: GUACAMOLE-1332
>                 URL: https://issues.apache.org/jira/browse/GUACAMOLE-1332
>             Project: Guacamole
>          Issue Type: Wish
>          Components: RDP
>         Environment: Debian buster guacamole 1.3.0
>            Reporter: Bastien
>            Assignee: Nick Couchman
>            Priority: Minor
>             Fix For: 1.6.0
>
>         Attachments: guacamole.log
>
>
> Hello,
> I spend whole day to configure a RDP connection without using "Ignore server certificate". I use a xrdp serveur with a self signed certificate (end goal is a signed certificate from PKI). I didn't find how to trust the certificate fingerprint. I got "Certificate validation failed". "certificate not trusted, aborting."
> I discovered that Guacamole use freerdp which is not well documented on the subject. I tried to add the pem certificate with {{update-ca-certificates}}, or in _.config/freerdp/certs_ and get nothing.
> Do I miss some documentation on how to set-up a trusted RDP host on Guacamole ?
> On my Guacamole test server, I install xfce and remina, succeed to connect to the target. It populates the .config/freerdp/known_hosts2 file, then Guacamole connection begin to work. But it is not an option for the production server.
>  
> Thanks you



--
This message was sent by Atlassian Jira
(v8.20.10#820010)