HI Adam, On Do 31 Jan 2019 21:28:43 CET, Adam D. Barratt wrote:
On Fri, 2019-01-11 at 15:26 +0100, Mike Gabriel wrote:Please review the attached .debdiff (for stretch) and give your go for uploading to stretch.+ Add 0010_add-support-for-credssp-v3-and-rdpproto-v6.patch. Add CredSSP v3and RDP proto v6 support. This allows users to connect to recently (since March 2018) update Microsoft RDP servers again. Thanks to Bernhard Miklautz and Martin Fleisz for helping out ith backporting this patch. Much appreciated! s/recently.*update/&d/ s/helping out ith/helping out with/
Thanks! Will fix that.
* debian/control: + B-D on libssh1.0-dev (instead of libssh-dev).
It's libssh1.0-dev for stretch and nothing needs to be changed.
This change doesn't appear to have actually been included. (Which is just as well, as there is no such package in Debian.)
Yeah, I guess I mixed those up in the changelog. The debian/jessie/updates branch needs a switch-back [1] from libssl1.0-dev to libssl-dev whereas the debian/stretch/updates branch does not need a change here.
Glad that you spotted this.
After that, I will upload the same version (slighty backported to jessie) to jessie-security. I will also publish a blog post that will appear on Planet Debian that links to built binaries that users may be table to test.Has there been much take-up / feedback there?
Over the last 8 days my webserver has registered 18 downloads of freerdp-x11 (either for jessie or for stretch). Without any positive feedback given (which I requested explicitly). Unfortunately, log files on that machine use the default logrotate rules for Apache2.
I have been using the patched version from my notebook (I downgraded from freerdp2 to freerdp1.1). And in fact, I forgot that I actually downgraded it. It simply worked with all kinds of recent RDP servers (Win 2016 server, Win 2012 server mainly).
The patch author Bernhard Miklautz tested against Win7, Win10 and WinXP. I just did a quick test with the stretch version against an xRDP server.
Mike[1] https://salsa.debian.org/debian-remote-team/freerdp-1.1-legacy/commit/c598db8583e5a0cc8c38ac55f680cd501b1fe892
-- DAS-NETZWERKTEAM mike gabriel, herweg 7, 24357 fleckeby mobile: +49 (1520) 1976 148 landline: +49 (4354) 8390 139 GnuPG Fingerprint: 9BFB AEE8 6C0A A5FF BF22 0782 9AF4 6B30 2577 1B31 mail: mike.gabriel@das-netzwerkteam.de, http://das-netzwerkteam.de
Attachment:
pgpSH1kaC_21S.pgp
Description: Digitale PGP-Signatur