Andy Dixon
50c0104d57
clients::rdp connects over any caller-dialled TCP stream (direct, proxy or SSH tunnel), upgrades to TLS and logs on with NLA (CredSSP/NTLM), optionally falling back to TLS-only logon for servers without NLA such as xrdp (credentials are passed so they log straight in). The server certificate is pinned through a caller check on its SHA256 fingerprint before any credentials are sent. The desktop decodes into the VNC client's RGBA framebuffer; input (IronRDP's scancode/Unicode/mouse operations), Display Control resizes and the deactivation-reactivation sequence run on the session thread. IronRDP's releases need three vendored patches (vendor/README.md): picky and sspi with their RustCrypto release-candidate pins relaxed so they share russh's stable versions (their own suites, 402 tests, pass against them), and ironrdp-session with two unreleased upstream bitmap fixes (#1486 stride, #1524 RDP6 orientation) without which xrdp desktops render sheared. Verified live against xrdp (scottyhardy/docker-remote-desktop): logon, full desktop rendering, keyboard and mouse input.
23 lines
823 B
Markdown
23 lines
823 B
Markdown
[](https://crates.io/crates/picky)
|
|
[](https://docs.rs/picky)
|
|
|
|
|
|
Compatible with rustc 1.85.
|
|
Minimal rustc version bumps happen [only with minor number bumps in this project](https://github.com/Devolutions/picky-rs/issues/89#issuecomment-868303478).
|
|
|
|
# picky
|
|
|
|
Portable X.509, PKI, JOSE and HTTP signature implementation.
|
|
|
|
## X.509 / PKI
|
|
|
|
[See doc](https://docs.rs/picky/latest/picky/x509/index.html) for tested examples.
|
|
|
|
## HTTP signature
|
|
|
|
[See doc](https://docs.rs/picky/latest/picky/http/index.html) for tested examples.
|
|
|
|
## JOSE
|
|
|
|
Doc doesn't have example yet, but [tests](https://github.com/Devolutions/picky-rs/blob/master/picky/src/jose/jwt.rs#L438) are good reference.
|