Bug 53885
| Summary: | Не удается открыть удаленный рабочий стол Windows | ||
|---|---|---|---|
| Product: | Sisyphus | Reporter: | Olga <urozhaevaoo> |
| Component: | freerdp3 | Assignee: | Andrey Cherepanov <cas> |
| Status: | REOPENED --- | QA Contact: | qa-sisyphus |
| Severity: | normal | ||
| Priority: | P5 | CC: | admsasha, arifdzhanovao, blinovdv, cas, demidovaa, eltsovga, ivanovav, master, mike, rider, shilovps, tatyana |
| Version: | unstable | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
На версиях пакетов: libfreerdp3-3.17.0-alt1 wlfreerdp3-3.17.0-alt1 xfreerdp3-3.17.0-alt1 freerdp3-3.17.0-alt1 Ошибка не воспроизвелась, корректное открытие рабочего стола. Подключение так же было через tls: xfreerdp /u:test /p:1 /v:10.88.XX.XX /sec:tls В консоли так же выводились ошибки No VA display found for device /dev/dri/renderD128. Но ошибки freerdp_tls_handshake]: BIO_do_handshake failed, которая сообщает об ошибке TLS соединения не было. Ошибка воспроизводится на Sisyphus (с /sec:tls) и без c версиями: libfreerdp3-3.19.0-alt1 wlfreerdp3-3.19.0-alt1 xfreerdp3-3.19.0-alt1 freerdp3-3.19.0-alt1 В терминале выводятся следующие ошибки: [17:03:16:213] [4888:00001318] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Using /p is insecure [17:03:16:213] [4888:00001318] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Passing credentials or secrets via command line might expose these in the process list [17:03:16:213] [4888:00001318] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Consider using one of the following (more secure) alternatives: [17:03:16:213] [4888:00001318] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /args-from: pipe in arguments from stdin, file or file descriptor [17:03:16:213] [4888:00001318] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /from-stdin pass the credential via stdin [17:03:16:213] [4888:00001318] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - set environment variable FREERDP_ASKPASS to have a gui tool query for credentials [17:03:16:217] [4888:0000131a] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: : keycode: 0x08 -> no RDP scancode found [17:03:16:217] [4888:0000131a] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: : keycode: 0x5d -> no RDP scancode found [AVHWDeviceContext @ 0x7f9558010f40] No VA display found for device /dev/dri/renderD128. [17:03:16:301] [4888:0000131a] [ERROR][com.freerdp.codec] - [libavcodec_init]: Could not initialize hardware decoder, falling back to software: Недопустимый аргумент [AVHWDeviceContext @ 0x7f955804af40] No VA display found for device /dev/dri/renderD128. [17:03:16:339] [4888:0000131a] [ERROR][com.freerdp.codec] - [libavcodec_init]: Could not initialize hardware decoder, falling back to software: Недопустимый аргумент [17:03:16:468] [4888:0000131a] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55f37faa82a0]: ************************************************* [17:03:16:468] [4888:0000131a] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55f37faa82a0]: This build is using [runtime-check] build options: [17:03:16:468] [4888:0000131a] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55f37faa82a0]: * 'WITH_VERBOSE_WINPR_ASSERT=ON' [17:03:16:468] [4888:0000131a] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55f37faa82a0]: * [17:03:16:468] [4888:0000131a] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55f37faa82a0]: [runtime-check] build options might slow down the application [17:03:16:468] [4888:0000131a] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55f37faa82a0]: ************************************************* [17:03:16:475] [4888:0000131a] [ERROR][com.freerdp.crypto] - [freerdp_tls_handshake]: BIO_do_handshake failed [17:03:16:475] [4888:0000131a] [ERROR][com.freerdp.core] - [transport_default_connect_tls]: ERRCONNECT_TLS_CONNECT_FAILED [0x00020008] Также воспроизводится на p11 c версиями: wlfreerdp3-3.17.0-alt1 xfreerdp3-3.17.0-alt1 freerdp3-3.17.0-alt1 wlfreerdp3-3.19.0-alt1 xfreerdp3-3.19.0-alt1 freerdp3-3.19.0-alt1 libfreerdp3-3.19.0-alt1 Ошибка воспроизводится на Sisyphus (с /sec:tls) и без c версиями: libfreerdp3-server-3.23.0-alt1.x86_64 libfreerdp3-3.23.0-alt1.x86_64 freerdp3-server-3.23.0-alt1.x86_64 wlfreerdp3-3.23.0-alt1.x86_64 xfreerdp3-3.23.0-alt1.x86_64 $ xfreerdp /u:test /p:1 /v:10.88.14.7 /sec:tls [17:13:23:925] [4206:0000106e] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Using /p is insecure [17:13:23:925] [4206:0000106e] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Passing credentials or secrets via command line might expose these in the process list [17:13:23:925] [4206:0000106e] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: Consider using one of the following (more secure) alternatives: [17:13:23:925] [4206:0000106e] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /args-from: pipe in arguments from stdin, file or file descriptor [17:13:23:925] [4206:0000106e] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - /from-stdin pass the credential via stdin [17:13:23:925] [4206:0000106e] [WARN][com.freerdp.client.common.cmdline] - [warn_credential_args]: - set environment variable FREERDP_ASKPASS to have a gui tool query for credentials [17:13:25:285] [4206:00001070] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: : keycode: 0x08 -> no RDP scancode found [17:13:25:285] [4206:00001070] [WARN][com.freerdp.client.x11] - [load_map_from_xkbfile]: ZEHA: keycode: 0x5d -> no RDP scancode found [AVHWDeviceContext @ 0x7f8064058080] No VA display found for device /dev/dri/renderD128. [17:13:25:514] [4206:00001070] [ERROR][com.freerdp.codec] - [libavcodec_init]: Could not initialize hardware decoder, falling back to software: Недопустимый аргумент [AVHWDeviceContext @ 0x7f8064058b80] No VA display found for device /dev/dri/renderD128. [17:13:25:524] [4206:00001070] [ERROR][com.freerdp.codec] - [libavcodec_init]: Could not initialize hardware decoder, falling back to software: Недопустимый аргумент [17:13:25:525] [4206:00001070] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55bf307b9280]: ************************************************* [17:13:25:525] [4206:00001070] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55bf307b9280]: This build is using [runtime-check] build options: [17:13:25:525] [4206:00001070] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55bf307b9280]: * 'WITH_VERBOSE_WINPR_ASSERT=ON' [17:13:25:525] [4206:00001070] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55bf307b9280]: * [17:13:25:525] [4206:00001070] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55bf307b9280]: [runtime-check] build options might slow down the application [17:13:25:525] [4206:00001070] [WARN][com.freerdp.core.rdp] - [log_build_warn][0x55bf307b9280]: ************************************************* [17:13:25:544] [4206:00001070] [ERROR][com.freerdp.crypto] - [freerdp_tls_handshake]: BIO_do_handshake failed [17:13:25:544] [4206:00001070] [ERROR][com.freerdp.core] - [transport_default_connect_tls]: ERRCONNECT_TLS_CONNECT_FAILED [0x00020008] В версии freerdp3-3.24.1-alt1 ошибка воспроизводится при подключении к Windows 7, к Windows 10 и Windows 11 подключение успешно выполняется В версии freerdp3-3.24.2-alt1 воспроизведена при подключении к Windows 7 Pro Ошибка BIO_do_handshake failed Подключение к Windows 10-pro и Windows 11 успешно выполняется В версии freerdp3-3.26.0-alt1 ошибка воспроизводится при подключении к Windows 7, к Windows 10 и Windows 11 подключение успешно выполняется Ошибка актуальна для freerdp3-3.30.0-alt1 на Windows 7 Ошибка актуальна для freerdp3-3.30.0-alt2 Для freerdp3-3.30.0-alt2 при использовании опции /sec:tls ещё и ошибка HYBRID_REQUIRED_BY_SERVER (Windows Server 2008 и 2008 R2 требуют гибридный режим по умолчанию). Без неё остаётся только BIO_do_handshake failed. Перебор параметров tls, например /tls:seclevel:0,enforce:1.3 проблемы не решает. $ openssl s_client -connect csserver:3389 -tls1 Connecting to 192.168.0.244 CONNECTED(00000003) 80923DB59E7F0000:error:0A0000BF:SSL routines:tls_setup_handshake:no protocols available:ssl/statem/statem_lib.c:155: --- no peer certificate available --- No client certificate CA names sent Negotiated TLS1.3 group: <NULL> --- SSL handshake has read 0 bytes and written 7 bytes Verification: OK --- New, (NONE), Cipher is (NONE) Protocol: TLSv1.3 This TLS version forbids renegotiation. Compression: NONE Expansion: NONE No ALPN negotiated Early data was not sent Verify return code: 0 (ok) Ожидалось же что покажет сертификат. В прежних системах, что на p10, всегда показывал, а тут error. Предлагаю гипотезу, что копать надо отсюда. |
Description
Olga 2025-04-17 17:31:59 MSK