1

For example,

me RDP Client --connect to--> a Linux ServerA 1.1.1.1:3388 --iptables_Port_Forwarding--> a Windows ServerB 2.2.2.2:3389

Then, Is the part of me RDP Client >-to-> the Jump ServerA 1.1.1.1:3388 also Encrypted by RDP(TLS), or not like "naked"?

1 Answer 1

3

Yes, RDP supports encryption between client and server. Remember how it asks for certificate trust when you first connect, and complains when common name in the certificate doesn't match hostname you entered? This is it.

In general, you use MS AD Certificate Services to issue certificates for server. Then, because AD CA certificates could be distributed to all domain computers, connections from those computers will verify server's certificates successfully and automatically. The dialog should not appear in this case. This is how it is intended to work.

If you enter IP address of a server to connect to instead of its FQDN, or connect from outside network via address translation, or connect from a computer which doesn't have CA certificate, this verification is impossible and the confirmation dialog appears.

FreeRDP asks for this confirmation too, showing the details of the remote presented certificate at first connection, and it maintains the list of "confirmed" servers in .config/freerdp/known_hosts2 file, much like ssh client does.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .