[GUACAMOLE-1598] Windows 7 TLS/NLA compatibility issue with openssl3

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.4.0
• Component/s: RDP
• External issue URL: https://github.com/FreeRDP/FreeRDP/issues/7839
• Assignee: Unassigned
• Reporter: Michael Saxl
• Created: 05/May/22 13:48
• Updated: 22/Aug/23 21:10

Description

Openssl 3.0 raised the default tls security level parameters.

This has the effect that Widows 7 / Windows 2008r2 do not work in tls/nla/ext security mode, only rdp security works, but this requires disabling nla on the remote machine.

xfreerdp has a parameter named /tls-seclevel that if set to 0 solves this problem, but settings this to such a low value should only be done if the user really requests it.

Remmina will get this parameter too.

 

internally in the settings structure the attribute is named setting->TlsSecLevel