Certificate Problems?
Hi I am using Manjaro / Arch Linux and I have installed http://aur.archlinux.org/packages/remote-desktop-manager
if I try to connect to our Server I got this:
Devolutions.RemoteDesktopManager.Business.TryGoOfflineException: Server konnte nicht erreicht werden.
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSConnectionDataSource.ValidateUseWindowsAuthentication () [0x0003f] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSConnectionDataSource.Login (System.Boolean useCredentials) [0x00000] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSWebApiClient.get_WebClient () [0x000ac] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSWebApiClient.<GetRepositories>b__116_0 () [0x00000] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSWebApiClient.ExecuteAction[T] (Devolutions.RemoteDesktopManager.Business.DataSources.RDMSWebApiClient+ExecuteActionDelegate`1[T] action, Devolutions.RemoteDesktopManager.ExecuteActionLogMode logMode) [0x00184] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSWebApiClient.ExecuteActionMultipleData[T] (Devolutions.RemoteDesktopManager.Business.DataSources.RDMSWebApiClient+ExecuteActionDelegate`1[T] action) [0x00000] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSWebApiClient.GetRepositories () [0x00000] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSSecuritySubDataSource.GetRepositories (System.Boolean includeDefault) [0x0000b] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Business.DataSources.RDMSConnectionDataSource.GetDataSourceSettings () [0x00017] in <25df8172fba84a318751bce923e4d989>:0
at Devolutions.RemoteDesktopManager.Managers.ConnectionManager.LoadDataSourceSettingsFromDataSource (Devolutions.RemoteDesktopManager.Business.DataSources.BaseConnectionDataSource dataSource) [0x00017] in <a358487d609647ac8857c28cf02c7396>:0
at Devolutions.RemoteDesktopManager.Managers.ConnectionManager.LoadConnectionsFromDataSource (Devolutions.RemoteDesktopManager.Business.DataSources.BaseConnectionDataSource dataSource, System.Boolean hasChanged) [0x00033] in <a358487d609647ac8857c28cf02c7396>:0
at Devolutions.RemoteDesktopManager.Managers.ConnectionManager.LoadConnections (Devolutions.RemoteDesktopManager.Business.DataSources.BaseConnectionDataSource dataSource) [0x00241] in <a358487d609647ac8857c28cf02c7396>:0
I think the problem is an certificate problem of an old/internal certificate?!
But I can't find an option to ignore certificate issues!?
Do you have any hints for me?
All Comments (10)
Hi,
The deb package has a post install script to create the mono certificate repository used by RDM.
You can manually create the repository using the follow steps:
- Make sure the /usr/share/mono/new-certs/ exists otherwise, mkdir -p /usr/share/.mono/new-certs/
- Make sure the ca-certificates package is installed
- Run this command "sudo trust extract --filter=ca-anchors --format=pem-directory-hash /usr/share/.mono/new-certs/Trust/"
More information can be found in this post.
https://forum.devolutions.net/topics/34347/installing-rdm-on-an-unsupported-distro
Regards
Jonathan Lafontaine
Christiankoch, can you post the output of
ls /usr/share/.mono/new-certs/Trust
Thanks for your answer Jonathan, but it still can't connect
this is the result of
ls /usr/share/.mono/new-certs/Trust
02265526.0 244b5494.0 517b8c69.0 76faf6c0.0 b1b8a7f3.0 dd8e9d41.0
03179a64.0 2923b3f9.0 5273a94c.0 7719f463.0 b204d74a.0 de6d66f3.0
062cdee6.0 29c8b277.0 5443e9e3.0 773e07ad.0 b66938e9.0 def36a68.0
064e0aa9.0 2ae6433e.0 54657681.0 7aaf71c0.0 b727005e.0 e113c810.0
06dc52d5.0 2b349938.0 57bcb2da.0 7d0b38bd.0 b7a5b843.0 e18bfb83.0
080911ac.0 2c543cd1.0 5a4d6896.0 7f3d5d1d.0 ba89ed3b.0 e2799e36.0
09789157.0 2e4eed3c.0 5ad8a5d6.0 8160b96c.0 bf53fb88.0 e36a6752.0
0a775a30.0 2e5ac55d.0 5c44d531.0 85cf5865.0 c01cdfa2.0 e73d606e.0
0b1b94ef.0 32888f65.0 5cd81ad7.0 8867006a.0 c01eb047.0 e868b802.0
0bf05006.0 349f2832.0 5d3033c5.0 8c1a12b2.0 c089bbbd.0 e8de2f56.0
0c4c9b6c.0 3513523f.0 5e98733a.0 8cb5ee0f.0 c0ff1f52.0 ee64a828.0
0c5734c6.0 3bde41ac.0 5f15c80c.0 8d86cdd1.0 c28a8a30.0 eed8c118.0
0f5dc4f3.0 3e44d2f7.0 5f618aec.0 8d89cda1.0 c47d9980.0 ef954a4e.0
0f6fa695.0 3e45d192.0 607986c7.0 930ac5d2.0 c480899b.0 f081611a.0
1001acf7.0 40193066.0 626dceaf.0 93bc0acc.0 ca6e4ad9.0 f0c70a8d.0
106f3e4d.0 4042bcee.0 6410666e.0 988a38cb.0 cbf06781.0 f30dd6ad.0
116bf586.0 40547a79.0 653b494a.0 9c2e7d30.0 cc450945.0 f3377b1b.0
128805a3.0 406c9bb1.0 68dd7389.0 9c8dfbd4.0 cd58d51e.0 f387163d.0
14bc7599.0 4304c5e5.0 6b99d060.0 9d04f354.0 cd8c0d63.0 f39fc864.0
157753a5.0 480720ec.0 6d41d539.0 a3418fda.0 ce5e74ef.0 f51bb24c.0
1636090b.0 48bec511.0 6fa5da56.0 a94d09e5.0 d4dae3dd.0 fab6a296.0
18856ac4.0 4a6481c9.0 706f604c.0 ad088e1d.0 d6325660.0 fc5a8f99.0
1d3472b9.0 4b718d9b.0 749e9e03.0 aee5f10d.0 d7e8dc79.0 fe8a2cd8.0
1e08bfd1.0 4bfab552.0 75d1b2ed.0 b0e59380.0 d853d49e.0 ff34af3f.0
1e09d511.0 4f316efb.0 76cb8f92.0 b1159c4c.0 dc4d6a89.0
Was the Trust folder already filled or that is the result of running "sudo trust extract --filter=ca-anchors --format=pem-directory-hash /usr/share/.mono/new-certs/Trust/"?
If the folder already exists and had certs in it, I would try deleting the folder and starting over.
I've seen instances where there but were invalid.
Jonathan Lafontaine
The folder wasn't created. I have created it and it was filled by sudo trust extract --filter=ca-anchors --format=pem-directory-hash /usr/share/.mono/new-certs/Trust/
Can you then validate that libwebkit2gtk-4.0 is installed on your system?
Jonathan Lafontaine
Yes it is..
Did you copy your RemoteDesktopManager.cfg from a Windows machine?
Based on the callstack your provided, you ended up on a Windows Authentication code path.
We don't offer this setting in RDML so that has me wondering.
I can easily prevent RDM from crashing (and I will) when this function tries to go Offline (which we don't support right now).
That being said, I will not help the fact that the error seems to be that your server cannot be reached.
Jonathan Lafontaine
Yes I exported the configuration from a windows client.
If I try to configure the Devolution Sever manually I get this:
Well, we've circled back to your original hypothesis, which is probably correct.
This looks like your DPS uses an invalid certificate and RDM Linux has no way to ignore the issue.
I'll see what I can do.
Jonathan Lafontaine