Bug 50521

Summary:	xfreerdp не работает с внешней библиотекой libjcPKCS11-2.so для смарт-карт Jacarta
Product:	Sisyphus	Reporter:	_taurus_
Component:	xfreerdp3	Assignee:	Andrey Cherepanov <cas>
Status:	NEW ---	QA Contact:	qa-sisyphus
Severity:	normal
Priority:	P5	CC:	_taurus_, admsasha, bychenkovps, cas, mike, proskurinov, rider
Version:	unstable
Hardware:	x86_64
OS:	Linux

Description _taurus_ 2024-06-02 08:33:22 MSK

Заранее извиняюсь если что не так, первый мой баг. 
WLOG_LEVEL=trace xfreerdp /kerberos:pkcs11-module:/usr/lib64/libjcPKCS11-2.so /list:smartcard
[08:21:36:452] [8945:000022f1] [DEBUG][com.freerdp.utils.signal] - [freerdp_handle_signals]: Registering signal hook...
[08:21:36:454] [8945:000022f1] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55e93f72de10]: *************************************************
[08:21:36:454] [8945:000022f1] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55e93f72de10]: This build is using [experimental] build options:
[08:21:36:454] [8945:000022f1] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55e93f72de10]: * 'WITH_VAAPI=ON'
[08:21:36:454] [8945:000022f1] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55e93f72de10]: 
[08:21:36:454] [8945:000022f1] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55e93f72de10]: [experimental] build options might crash the application
[08:21:36:454] [8945:000022f1] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55e93f72de10]: *************************************************
[08:21:36:454] [8945:000022f1] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_detect_command_line]: windows: -2001/1 posix: -1000/0
[08:21:36:455] [8945:000022f1] [DEBUG][com.winpr.ncryptp11] - [NCryptOpenP11StorageProviderEx]: Trying pkcs11-helper module '/usr/lib64/libjcPKCS11-2.so'
[08:21:36:456] [8945:000022f1] [DEBUG][com.winpr.ncryptp11] - [NCryptOpenP11StorageProviderEx]: module '/usr/lib64/libjcPKCS11-2.so' loaded
[08:21:36:498] [8945:000022f1] [DEBUG][com.winpr.ncryptp11] - [collect_keys]: checking 0 slots for valid keys...
[08:21:36:499] [8945:000022f1] [WARN][com.freerdp.smartcardlogon] - [list_provider_keys]: Microsoft Base Smart Card Crypto Provider [] no certificates found
smartcard reader detected, listing 0 certificates:
________________________________________________________________________

WLOG_LEVEL=trace xfreerdp /kerberos:pkcs11-module:/usr/lib64/libjcPKCS11-2.so.2.9.0 /list:smartcard
[08:21:01:952] [8882:000022b2] [DEBUG][com.freerdp.utils.signal] - [freerdp_handle_signals]: Registering signal hook...
[08:21:01:954] [8882:000022b2] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55ff23e85e10]: *************************************************
[08:21:01:954] [8882:000022b2] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55ff23e85e10]: This build is using [experimental] build options:
[08:21:01:954] [8882:000022b2] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55ff23e85e10]: * 'WITH_VAAPI=ON'
[08:21:01:954] [8882:000022b2] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55ff23e85e10]: 
[08:21:01:954] [8882:000022b2] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55ff23e85e10]: [experimental] build options might crash the application
[08:21:01:954] [8882:000022b2] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55ff23e85e10]: *************************************************
[08:21:01:954] [8882:000022b2] [DEBUG][com.freerdp.client.common.cmdline] - [freerdp_client_detect_command_line]: windows: -2001/1 posix: -1000/0
[08:21:01:985] [8882:000022b2] [DEBUG][com.winpr.ncryptp11] - [NCryptOpenP11StorageProviderEx]: Trying pkcs11-helper module '/usr/lib64/libjcPKCS11-2.so.2.9.0'
[08:21:01:987] [8882:000022b2] [DEBUG][com.winpr.ncryptp11] - [NCryptOpenP11StorageProviderEx]: module '/usr/lib64/libjcPKCS11-2.so.2.9.0' loaded
[08:21:02:178] [8882:000022b2] [DEBUG][com.winpr.ncryptp11] - [collect_keys]: checking 0 slots for valid keys...
[08:21:02:178] [8882:000022b2] [WARN][com.freerdp.smartcardlogon] - [list_provider_keys]: Microsoft Base Smart Card Crypto Provider [] no certificates found
smartcard reader detected, listing 0 certificates:
_________________________________________________________________________
pkcs11-tool -Ol --module /usr/lib64/libjcPKCS11-2.so
Using slot 0 with a present token (0x1ffff)
Logging in to "Название токена".
Please enter User PIN: 
Private Key Object; RSA 
  label:      
  ID:         ИД
  Usage:      decrypt, sign, signRecover, unwrap
  Access:     sensitive, always sensitive, never extractable, local
Certificate Object; type = X.509 cert
  label:      
  subject:    Удалено
  serial:     Удалено
  ID:         ИД
Certificate Object; type = X.509 cert
  label:      
  subject:    Удалено
  serial:     Удалено
  ID:         ИД
Private Key Object; RSA 
  label:      
  ID:         ИД
  Usage:      decrypt, sign, signRecover, unwrap
  Access:     sensitive, always sensitive
Private Key Object; RSA 
  label:      
  ID:         ИД
  Usage:      decrypt, sign, signRecover, unwrap
  Access:     sensitive, always sensitive
Certificate Object; type = X.509 cert
  label:      Удалено
  subject:    Удалено
  serial:     Удалено
  ID:         ИД
Certificate Object; type = X.509 cert
  label:      Удалено
  subject:    Удалено
  serial:     Удалено
  ID:         ИД

Comment 1 _taurus_ 2024-06-02 08:48:09 MSK

This is FreeRDP version 3.5.1 (n/a)
Токен выдавался на работе для удаленной работы, на windows все работает без проблем.

Comment 2 Pavel 2024-12-05 16:46:22 MSK

(Ответ для _taurus_ на комментарий #1)
> This is FreeRDP version 3.5.1 (n/a)
> Токен выдавался на работе для удаленной работы, на windows все работает без
> проблем.

Просьба уточнить, как именно работает на windows?
freerdp3 (client) - windows (server) 
windows (client) - xrdp (server) 
windows (client) - windows (server)

и логи выше приведены для случая: 
freerdp3 3.5.1 (client) - xrdp (server) ?