[GUACAMOLE-1332] Add parameter for specifying known RDP server certificate/fingerprint

• Type: Wish
• Status: Closed
• Priority: Minor
• Resolution: Implemented
• Fix Version/s: 1.6.0
• Component/s: Documentation, guacamole-client, RDP
• Environment: Debian buster guacamole 1.3.0
• Assignee: Nick Couchman
• Reporter: Bastien
• Created: 23/Apr/21 16:49
• Updated: 03/Dec/23 13:31
• Resolved: 03/Dec/23 13:31

Description

Hello,

I spend whole day to configure a RDP connection without using "Ignore server certificate". I use a xrdp serveur with a self signed certificate (end goal is a signed certificate from PKI). I didn't find how to trust the certificate fingerprint. I got "Certificate validation failed". "certificate not trusted, aborting."

I discovered that Guacamole use freerdp which is not well documented on the subject. I tried to add the pem certificate with update-ca-certificates, or in .config/freerdp/certs and get nothing.

Do I miss some documentation on how to set-up a trusted RDP host on Guacamole ?

On my Guacamole test server, I install xfce and remina, succeed to connect to the target. It populates the .config/freerdp/known_hosts2 file, then Guacamole connection begin to work. But it is not an option for the production server.

 

Thanks you