[rdesktop-users] SSL certificate check

[Julian J. M. <jul...@gm...>]

Hi,

I'm using rdesktop with SSL enabled RDP servers, some with self-signed and
some with purchased thirdparty certificates.

The windows TS client warns when connecting to a server with a self-signed
cert, but rdesktop makes absolutely no difference, which makes it less
secure, as you could be subject to a MitM without noticing it.

Is there any way to force the verification of the server certificate and
that it matches the host name?

I'm using version 1.8.3:
$ rdesktop server.host
ERROR: Failed to open keymap en-us
ERROR: CredSSP: Initialize failed, do you have correct kerberos tgt
initialized ?
Connection established using SSL.
WARNING: Remote desktop does not support colour depth 24; falling back to 16

Thanks,
Julian.