Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How to generate transport script .signature file ? #103

Closed
NinhDoan opened this issue Dec 1, 2023 · 1 comment
Closed

How to generate transport script .signature file ? #103

NinhDoan opened this issue Dec 1, 2023 · 1 comment
Assignees

Comments

@NinhDoan
Copy link

NinhDoan commented Dec 1, 2023

Hi
I want to use remmina instead of xfreerdp for linux client, but I can't find how to generate signature file, is there any guide to do this ?

@dkmstr
Copy link
Collaborator

dkmstr commented Dec 1, 2023

Sorry about that. If you want to provide your own signatures, you will have to provide your own signing key for all the process. I mean, we, as developers, have created an own "secret" private signing key, that is not (and will be not) public. This ensures that the "executable" scripts are "trusted" (that is, no other one has changed nor replaced anything...)
So, in order to provide your own signed scripts you have a few options:
1.- Generate your own signature keys, update the client to accept them
2.- Use a "modified" UDS Client, that do not check the signatures (i strongly do not recommend this, except for debugging purposes, due to HIGH security risks...)
3.- Use the "modified" UDS Client to debug your implementation, and, once you have it, request to include it in the "mainstream", and i will sign it using the "trusted key" :).
4.- You can create an script on "/usr/bin" called udsrdp (look here:

udsrdp = tools.findApp('udsrdp')
) that will receive the parameters that normally will receive xfreerdp client. There, you can process them and, in turn, invoke the remmina client

Take into account that, due to high security considerations, the signing key could not be public, because in that case, we cannot ensure that no harmful code is executed locally :(

Hope this responds to your question.

regards

@dkmstr dkmstr closed this as completed Dec 1, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants