necouchman opened a new pull request, #453:
URL: https://github.com/apache/guacamole-server/pull/453

   This pull requests adds options to support the following additional 
certificate handling in RDP connections:
   * Trust on First Use (tofu): If a host is not "known" to the underlying 
FreeRDP library, the certificate will be accepted and the fingerprint stored. 
This is equivalent to the xfreerdp command line option `/cert:tofu`.
   * Fingerprint + Hash: You can provide a comma-separated list of certificate 
hash and fingerprint combinations that FreeRDP will accept for the connection. 
It's worth noting that I actually don't know the proper way to specify these at 
the moment, so I've been unable to actually prove this works, but I'm getting 
identical behavior on the xfreerdp command line as in Guacamole. I've an e-mail 
out to the FreeRDP mailing list to try to get some guidance on it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@guacamole.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to