Wednesday, July 31, 2024

Re: xfreerdp / remmina won't connect to Win11 RDP with NLA

On Wednesday, July 31st, 2024 at 16:11, Stuart Henderson <stu.lists@spacehopper.org> wrote:
> > What I also wanted to try was building 2.11.7 linked with OpenSSL on OpenBSD
> > but couldn't figure out the magic build option combination, yet. There's a
> > -DWITH_LIBRESSL flag in 3.x, but it's 3.x and I'm afraid it works the other
> > way around (i.e. forcing LibreSSL instead of disregarding it).
>
>
> I've not tried it with freerdp - in general you'll need something like
>
[...]

Hah, thanks for the hints!

Ultimately managed to find the cmake script(?) that searches for OpenSSL.
Replaced the pkg-config (.pc) name it searches for.

=======================8<=======================
diff --git a/x11/freerdp/Makefile b/x11/freerdp/Makefile
index 2fa4551fce3..720c1cc37e9 100644
--- a/x11/freerdp/Makefile
+++ b/x11/freerdp/Makefile
@@ -35,7 +35,8 @@ COMPILER_LANGS = c
MODULES = devel/cmake

CFLAGS += -I${X11BASE}/include \
- -I${LOCALBASE}/include
+ -I${LOCALBASE}/include \
+ -I${LOCALBASE}/include/eopenssl33/

BUILD_DEPENDS = security/pcsc-lite \
textproc/xmlto
=======================8<=======================

Not even sure if I need *all* of that... And I just turned things off

=======================8<=======================
$ cat patches/patch-cmake_FindOpenSSL_cmake
--- cmake/FindOpenSSL.cmake.orig Wed Jul 31 17:21:02 2024
+++ cmake/FindOpenSSL.cmake Wed Jul 31 17:21:17 2024
@@ -26,7 +26,7 @@

if (UNIX AND NOT ANDROID)
find_package(PkgConfig QUIET)
- pkg_check_modules(_OPENSSL QUIET openssl)
+ pkg_check_modules(_OPENSSL QUIET eopenssl33)
endif (UNIX AND NOT ANDROID)

# http://www.slproweb.com/products/Win32OpenSSL.html
=======================8<=======================

(Installed OpenSSL 3.3.1 from ports, that goes without saying.)

Interestingly enough, NLA works to this Windows 11 machine while using OpenSSL.
I bet if I rebuilt remmina linking to OpenSSL it would start working as well.

Not sure if this is a surprise or something worth noting in the port's description, though.


Daniel

No comments:

Post a Comment