Skip to content

Added few lines to README to inform about debian 12 specific freerdp issue#932

Open
norlit wants to merge 2 commits into
winapps-org:mainfrom
norlit:main-updated
Open

Added few lines to README to inform about debian 12 specific freerdp issue#932
norlit wants to merge 2 commits into
winapps-org:mainfrom
norlit:main-updated

Conversation

@norlit

@norlit norlit commented May 21, 2026

Copy link
Copy Markdown

My winapps setup on debian 12 has stopped working for some reason, launching apps were failing without any errors.
Launching from terminal revealed that freerdp3 was failing specifically:

[16:02:49:573] [81770:00013f6a] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher][0x556089b48ca0]: [SSL] {Cipher}
build or configuration missing: [16:02:49:573] [81770:00013f6a] [WARN][com.freerdp.core.rdp] - [log_build_warn_cipher]
[0x556089b48ca0]: * rc4: assistance files with encrypted passwords, NTLM, RDP licensing and RDP security will not work 

Also I got this error recreated in a VM with clean debian 12 setup to be sure.

The cause is that current openssl3 library doesn't provide obsolete algorithms support, which are used in RDP protocol, by default. It has to be activated manually via changing /etc/ssl/openssl.cnf file and appending next lines:

[provider_sect]
legacy = legacy_sect

[legacy_sect]
activate = 1

The point is openssl list -providers should have output with two providers: default and legacy:

Providers:
  default
    name: OpenSSL Default Provider
    version: 3.0.2
    status: active
  legacy
    name: OpenSSL Legacy Provider
    version: 3.0.2
    status: active

Also may be a good idea to implement config change in installer by user confirming.

@LDprg

LDprg commented May 22, 2026

Copy link
Copy Markdown
Member

I very much dislike the approach.

Openssl is one of the most important software libraries in regard to security. It should never be set to any legacy mode, since this might hurt security alot.

I would prefer to find a better solution than this.

@oskardotglobal

Copy link
Copy Markdown
Member

Yeah, did you try upgrading FreeRDP? What version are you on?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants