Cannot connect to Windows 2012 that has TLS 1.0 , 1.1 disabled ( only TLS 1.2 is enabled)
Cannot connect to Windows 2012 that has TLS 1.0 , 1.1 disabled ( only TLS 1.2 is enabled)
Hi, I cannot connect to Windows Server 2012 after we disabled TLS 1.0, 1.1 and only left TLS 1.2 enabled on the server. I'm using RDM free 3.0.8.0. Does RDM Free support TLS 1.2 for RDP connections? Thanks
I am able to connect to this server using the latest version of the Microsoft RDP for Mac client. I have tried enabling NLA and disabling NLA in the RDM Free settings.. neither worked. Here's a snippet of the log when attempting connection with NLA disabled.
16:40:36:299] [70250:b031d000] [INFO][com.freerdp.client.mac] -[MRDPIPCClient initLoggingWithFilter:filePath:fileName:] 117 - Log initialized headless
[16:40:36:299] [70250:b031d000] [DEBUG][com.freerdp.client.mac] -[MRDPIPCClient configureInternal] 90 - configureInternal
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.channels.cliprdr.client] cliprdr_VirtualChannelEntry 1362 - VirtualChannelEntry
[16:40:36:320] [70250:b0421000] [INFO][com.freerdp.client.common.cmdline] freerdp_client_load_static_channel_addin 2335 - loading channel cliprdr
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_set_negotiation_enabled 1186 - Enabling security layer negotiation: TRUE
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_set_restricted_admin_mode_required 1198 - Enabling restricted admin mode: FALSE
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_enable_rdp 1220 - Enabling RDP security: TRUE
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_enable_tls 1232 - Enabling TLS security: TRUE
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_enable_nla 1244 - Enabling NLA security: FALSE
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_enable_ext 1256 - Enabling NLA extended security: FALSE
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_connect 148 - state: NEGO_STATE_TLS
[16:40:36:320] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_attempt_tls 459 - Attempting TLS security
[16:40:36:705] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_send_negotiation_request 851 - RequestedProtocols: 1
[16:40:36:705] [70250:b04a3000] [DEBUG][com.freerdp.core.transport] transport_client_thread 940 - Asynchronous transport thread started
[16:40:36:721] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_process_negotiation_response 916 - RDP_NEG_RSP
[16:40:36:721] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_recv 590 - selected_protocol: 1
[16:40:36:721] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_connect 161 - Negotiated TLS security
[16:40:36:721] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_security_connect 214 - nego_security_connect with PROTOCOL_TLS
[16:40:36:735] [70250:b0421000] [ERROR][com.freerdp.core] freerdp_set_last_error 680 - freerdp_set_last_error ERRCONNECT_TLS_CONNECT_FAILED [0x20008]
[16:40:36:735] [70250:b0421000] [DEBUG][com.freerdp.core.nego] nego_connect 185 - Failed to connect with TLS security
[16:40:36:735] [70250:b0421000] [ERROR][com.freerdp.core.connection] rdp_client_connect 275 - Error: protocol security negotiation or connection failure
[16:40:36:736] [70250:b0421000] [DEBUG][com.freerdp.client.mac] -[MRDPIPCClient viewDidConnect:] 401 - viewDidConnect
[16:40:37:392] [70250:a05b61d4] [DEBUG][com.freerdp.client.mac] __39-[MRDPClient invalidatePasteboardTimer]_block_invoke 132 - timer stop
[16:40:37:392] [70250:b031d000] [DEBUG][com.freerdp.client.mac] -[MRDPClient releaseResources] 112 - Failed to unmap shared memory object: Invalid argument (22)
[16:40:37:392] [70250:b04a3000] [DEBUG][com.freerdp.core.transport] transport_client_thread 951 - stopEvent triggered
All Comments (3)
Hello,
In theory it should work. We will test this scenario next week.
Regards
David Hervieux
Did some more testing and could not connect to Windows 2012 with TLS 1.0 disabled and TLS 1.1/1.2 enabled. The error is slightly different with TLS 1.1 enabled.
[15:03:19:101] [7760:b039f000] [INFO][com.freerdp.client.mac] -[MRDPIPCClient initLoggingWithFilter:filePath:fileName:] 117 - Log initialized headless
[15:03:19:101] [7760:b039f000] [DEBUG][com.freerdp.client.mac] -[MRDPIPCClient configureInternal] 90 - configureInternal
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.channels.cliprdr.client] cliprdr_VirtualChannelEntry 1362 - VirtualChannelEntry
[15:03:19:121] [7760:b04a3000] [INFO][com.freerdp.client.common.cmdline] freerdp_client_load_static_channel_addin 2335 - loading channel cliprdr
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_set_negotiation_enabled 1186 - Enabling security layer negotiation: TRUE
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_set_restricted_admin_mode_required 1198 - Enabling restricted admin mode: FALSE
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_enable_rdp 1220 - Enabling RDP security: TRUE
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_enable_tls 1232 - Enabling TLS security: TRUE
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_enable_nla 1244 - Enabling NLA security: FALSE
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_enable_ext 1256 - Enabling NLA extended security: FALSE
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_connect 148 - state: NEGO_STATE_TLS
[15:03:19:121] [7760:b04a3000] [DEBUG][com.freerdp.core.nego] nego_attempt_tls 459 - Attempting TLS security
[15:03:34:122] [7760:b04a3000] [ERROR][com.freerdp.core] freerdp_tcp_connect 1140 - failed to connect to ....
[15:03:34:122] [7760:b04a3000] [ERROR][com.freerdp.core.nego] nego_connect 154 - Protocol Security Negotiation Failure
[15:03:34:122] [7760:b04a3000] [ERROR][com.freerdp.core] freerdp_set_last_error 680 - freerdp_set_last_error ERRCONNECT_SECURITY_NEGO_CONNECT_FAILED [0x2000C]
[15:03:34:122] [7760:b04a3000] [ERROR][com.freerdp.core.connection] rdp_client_connect 275 - Error: protocol security negotiation or connection failure
[15:03:34:122] [7760:b04a3000] [DEBUG][com.freerdp.client.mac] -[MRDPIPCClient viewDidConnect:] 401 - viewDidConnect
[15:03:34:638] [7760:a05b61d4] [DEBUG][com.freerdp.client.mac] __39-[MRDPClient invalidatePasteboardTimer]_block_invoke 132 - timer stop
[15:03:34:638] [7760:b039f000] [DEBUG][com.freerdp.client.mac] -[MRDPClient releaseResources] 112 - Failed to unmap shared memory object: Invalid argument (22)
Hi,
We found the issue and it's now fixed internally. It will be available in the next release.
Benoît Sansregret