Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows 7 TLS compatibility issue with openssl3 #7839

Open
akarl10 opened this issue Apr 27, 2022 · 2 comments
Open

Windows 7 TLS compatibility issue with openssl3 #7839

akarl10 opened this issue Apr 27, 2022 · 2 comments

Comments

@akarl10
Copy link
Contributor

akarl10 commented Apr 27, 2022

Openssl3 changed the default security level of tls<1.2 and sha1 to from 1 to 0
This means that Windows 7 will not work (since they disabled SHA1, in practice it seems it will also not work with TLS1.2 enabled)

the cli user could workaround this by using /tls-seclevel:0, but i am not aware of such an option in remmina.
To the average user this looks like a regression in freerdp, but in reality it isn't.

I am not saying that it makes a ton of sense supporting an old unsupported OS, but if we decide to drop Windows 7 by default, we could also increase the default tls-seclevel to 2 (Windows 10 1607 LTSB does still support this, not sure if Windows 8 does)

Leaving it on 1 with openssl3 in my opinion does not make a lot of sense

@akarl10
Copy link
Contributor Author

akarl10 commented May 1, 2022

Remmina probably will have such a setting version 1.4.26
see
FreeRDP/Remmina@ba5c6ce

@Neustradamus
Copy link

To follow this ticket.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants