SSL certificate check

--===============7467091315001700895==
Content-Type: multipart/alternative; boundary=047d7b3a81fe93efee05196e3128

--047d7b3a81fe93efee05196e3128
Content-Type: text/plain; charset=UTF-8

Hi,

I'm using rdesktop with SSL enabled RDP servers, some with self-signed and
some with purchased thirdparty certificates.

The windows TS client warns when connecting to a server with a self-signed
cert, but rdesktop makes absolutely no difference, which makes it less
secure, as you could be subject to a MitM without noticing it.

Is there any way to force the verification of the server certificate and
that it matches the host name?

I'm using version 1.8.3:
$ rdesktop server.host
ERROR: Failed to open keymap en-us
ERROR: CredSSP: Initialize failed, do you have correct kerberos tgt
initialized ?
Connection established using SSL.
WARNING: Remote desktop does not support colour depth 24; falling back to 16

Thanks,
Julian.

--047d7b3a81fe93efee05196e3128
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi,<div><br></div><div>I&#39;m using rdesktop with SSL ena=
bled RDP servers, some with self-signed and some with purchased thirdparty =
certificates.</div><div><br></div><div>The windows TS client warns when con=
necting to a server with a self-signed cert, but rdesktop makes absolutely =
no difference, which makes it less secure, as you could be subject to a Mit=
M without noticing it.</div><div><br></div><div>Is there any way to force t=
he verification of the server certificate and that it matches the host name=
?</div><div><br></div><div>I&#39;m using version 1.8.3:</div><div><div>$ rd=
esktop server.host</div><div>ERROR: Failed to open keymap en-us</div><div>E=
RROR: CredSSP: Initialize failed, do you have correct kerberos tgt initiali=
zed ?</div><div>Connection established using SSL.</div><div>WARNING: Remote=
 desktop does not support colour depth 24; falling back to 16</div></div><d=
iv><br></div><div>Thanks,<br></div><div>Julian.</div></div>

--047d7b3a81fe93efee05196e3128--


--===============7467091315001700895==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

------------------------------------------------------------------------------
Monitor 25 network devices or servers for free with OpManager!
OpManager is web-based network management software that monitors 
network devices and physical & virtual servers, alerts via email & sms 
for fault. Monitor 25 devices for free with no restriction. Download now
http://ad.doubleclick.net/ddm/clk/292181274;119417398;o
--===============7467091315001700895==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
rdesktop-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rdesktop-users

--===============7467091315001700895==--