Andy Dixon
ae2b07db4b
RDP profiles can go through a Remote Desktop Gateway (MS-TSGU over an
HTTPS WebSocket) with its own username and password, stored like other
credentials (rdp-gateway-password). The gateway stream is bridged to a
loopback socket so the blocking RDP client uses it like any transport.
IronRDP's gateway crate (0.0.1) is vendored with fixes: it used
ironrdp-tls, which accepts any certificate, before sending Basic
credentials — the gateway is now verified against the web PKI; its
asserts on gateway-supplied lengths are errors instead of panics; and
the server port is passed through. Checked against a self-signed
openssl s_server: the connection is refused ('invalid peer certificate')
before any request or credential is sent. Not tested against a real
gateway; Basic-auth gateways only (no NTLM).
53 lines
1.6 KiB
TOML
53 lines
1.6 KiB
TOML
[package]
|
|
name = "nexus-core"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
|
|
[features]
|
|
# Exposes parser entry points for rust/fuzz (cargo-fuzz).
|
|
fuzzing = []
|
|
|
|
[dependencies]
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
rusqlite = { version = "0.37", features = ["bundled"] }
|
|
uuid = { version = "1", features = ["v4"] }
|
|
chrono = { version = "0.4", features = ["serde"] }
|
|
argon2 = "0.5"
|
|
aes-gcm = "0.10"
|
|
rand = "0.8"
|
|
base64 = "0.22"
|
|
ureq = "3"
|
|
keyring = { version = "3", features = ["apple-native", "windows-native", "async-secret-service", "tokio", "crypto-rust"] }
|
|
russh = { version = "0.64.1", default-features = false, features = ["flate2", "ring", "rsa"] }
|
|
russh-sftp = "3.0.1"
|
|
tokio = { version = "1.53.2", features = ["full"] }
|
|
sha2 = "0.11.0"
|
|
hmac = "0.13.0"
|
|
sha1 = "0.11.0"
|
|
zeroize = "1"
|
|
parking_lot = "0.12"
|
|
tracing = "0.1"
|
|
portable-pty = "0.9.0"
|
|
serialport = { version = "4", default-features = false }
|
|
des = "0.9"
|
|
flate2 = "1"
|
|
image = { version = "0.25", default-features = false, features = ["jpeg"] }
|
|
|
|
rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
|
|
webpki-roots = "1"
|
|
ironrdp = { version = "0.17", features = ["connector", "session", "graphics", "pdu", "svc", "dvc", "displaycontrol", "input", "cliprdr", "rdpsnd", "rdpdr"] }
|
|
ironrdp-rdpsnd-native = { version = "0.7", default-features = false }
|
|
ironrdp-blocking = "0.10"
|
|
ironrdp-mstsgu = "0.0.1"
|
|
x509-cert = { version = "0.2", default-features = false, features = ["std"] }
|
|
|
|
[target.'cfg(unix)'.dependencies]
|
|
ironrdp-rdpdr-native = "0.7"
|
|
|
|
[dev-dependencies]
|
|
tiny_http = "0.12"
|
|
|
|
[target.'cfg(target_os = "linux")'.dev-dependencies]
|
|
libc = "0.2"
|