Andy Dixon
50c0104d57
clients::rdp connects over any caller-dialled TCP stream (direct, proxy or SSH tunnel), upgrades to TLS and logs on with NLA (CredSSP/NTLM), optionally falling back to TLS-only logon for servers without NLA such as xrdp (credentials are passed so they log straight in). The server certificate is pinned through a caller check on its SHA256 fingerprint before any credentials are sent. The desktop decodes into the VNC client's RGBA framebuffer; input (IronRDP's scancode/Unicode/mouse operations), Display Control resizes and the deactivation-reactivation sequence run on the session thread. IronRDP's releases need three vendored patches (vendor/README.md): picky and sspi with their RustCrypto release-candidate pins relaxed so they share russh's stable versions (their own suites, 402 tests, pass against them), and ironrdp-session with two unreleased upstream bitmap fixes (#1486 stride, #1524 RDP6 orientation) without which xrdp desktops render sheared. Verified live against xrdp (scottyhardy/docker-remote-desktop): logon, full desktop rendering, keyboard and mouse input.
39 lines
745 B
YAML
39 lines
745 B
YAML
version: 2
|
|
updates:
|
|
- package-ecosystem: "cargo"
|
|
directories:
|
|
- "/"
|
|
- "/fuzz/"
|
|
schedule:
|
|
interval: "weekly"
|
|
assignees:
|
|
- "CBenoit"
|
|
open-pull-requests-limit: 3
|
|
groups:
|
|
crypto:
|
|
patterns:
|
|
- "md-5"
|
|
- "md5"
|
|
- "md4"
|
|
- "sha1"
|
|
- "sha2"
|
|
- "sha3"
|
|
- "pkcs*"
|
|
- "x509-cert"
|
|
- "hmac"
|
|
- "der"
|
|
- "crypto-mac"
|
|
- "*tls*"
|
|
- "*rand*"
|
|
- "picky*"
|
|
windows:
|
|
patterns:
|
|
- "windows*"
|
|
- "winapi"
|
|
patch:
|
|
dependency-type: "production"
|
|
update-types:
|
|
- "patch"
|
|
dev:
|
|
dependency-type: "development"
|