Re: [FreeRDP-devel] FIPS and NLA

2019-11-21 Thread Armin Novak via FreeRDP-devel
Then I am afraid fips compliance is impossible due to the use of that algorithm without improving kergeros support :/ Regards Armin Am November 21, 2019 3:30:56 PM UTC schrieb "Ransom, Geoffrey M. via FreeRDP-devel" : > > >As for the NLA issue, you could just remove the line and check if it >wo

Re: [FreeRDP-devel] FIPS and NLA

2019-11-21 Thread Ransom, Geoffrey M. via FreeRDP-devel
As for the NLA issue, you could just remove the line and check if it works (there have been some improvements regarding NLA, so the force off might be outdated) I tired that. freerdp dies when openssl fails with a fips error. It looks like openssl calls assert() which makes sense if

Re: [FreeRDP-devel] FIPS and NLA

2019-11-21 Thread Armin Novak via FreeRDP-devel
Hi, basic kerberos support can be activated (-DWITH_GSSAPI=ON), but it is currently more or less in an alpha state (various issues and nobody actively working on improving it) As for the NLA issue, you could just remove the line and check if it works (there have been some improvements regarding N

[FreeRDP-devel] FIPS and NLA

2019-11-20 Thread Ransom, Geoffrey M. via FreeRDP-devel
Hello I work in a mixed Linux/Windows environment where we are required to have FIPS and NLA enabled and this doesn't seem to work for freerdp. We can't connect to windows 10 systems with NLA enabled from our redhat linux systems with fips enabled. I went digging through the source to see