change xrdp.ini security_layer=negotiate and auto generate tls keys on make install
This commit is contained in:
parent
da9439f24d
commit
4f33a9db1d
@ -18,7 +18,8 @@ xrdpsysconfdir = $(sysconfdir)/xrdp
|
||||
|
||||
install-data-hook:
|
||||
umask 077 && \
|
||||
if [ ! -f $(DESTDIR)$(xrdpsysconfdir)/rsakeys.ini ]; then ./xrdp-keygen xrdp $(DESTDIR)$(xrdpsysconfdir)/rsakeys.ini; fi
|
||||
if [ ! -f $(DESTDIR)$(xrdpsysconfdir)/rsakeys.ini ]; then ./xrdp-keygen xrdp $(DESTDIR)$(xrdpsysconfdir)/rsakeys.ini; fi && \
|
||||
if [ ! -f $(DESTDIR)$(xrdpsysconfdir)/cert.pem ]; then openssl req -x509 -newkey rsa:2048 -nodes -keyout $(DESTDIR)$(xrdpsysconfdir)/key.pem -out $(DESTDIR)$(xrdpsysconfdir)/cert.pem -days 365 -subj /C=US/ST=CA/L=Sunnyvale/O=xrdp/CN=www.xrdp.org; fi
|
||||
|
||||
uninstall-hook:
|
||||
rm -f $(DESTDIR)$(xrdpsysconfdir)/rsakeys.ini
|
||||
|
@ -13,7 +13,7 @@ fork=yes
|
||||
crypt_level=high
|
||||
# security layer can be 'tls', 'rdp' or 'negotiate'
|
||||
# for client compatible layer
|
||||
security_layer=rdp
|
||||
security_layer=negotiate
|
||||
# X.509 certificate and private key
|
||||
# openssl req -x509 -newkey rsa:2048 -nodes -keyout key.pem -out cert.pem -days 365
|
||||
certificate=
|
||||
|
Loading…
Reference in New Issue
Block a user