v0.6.3-alpha — RDP to non-AD Windows (NTLM) fixed
mRemoteNXT v0.6.3-alpha
Fixed
- RDP to standalone / workgroup Windows hosts (no Active Directory) now works.
Connecting to a Windows host that authenticates with NTLM — for example an
AWS EC2 Windows instance — failed at the NLA stage and was reported as the
misleadingERRCONNECT_CONNECT_TRANSPORT_FAILED, even though the network was
fine. The real cause: NTLM computes its password hash with MD4, which OpenSSL 3
moved into a separate "legacy" provider that was not bundled or loaded. The app
now ships and loads the legacy provider, so NTLM authentication succeeds.
(RDP to Active Directory hosts, and SSH, were never affected — they don't use MD4.)
Signed with Developer ID and notarized by Apple — no Gatekeeper warning.
Thanks to Brian Pendergrass for the detailed diagnostic report that pinned this down.