XRDP should generate Certs/Keys
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 141
- Forks
- 146
- Avg merge
- 11h 7m
- Merged PRs (30d)
- 407
Description
Summary
Currently, the xrdp package falls back on the shipped cert/key. This is insecure, a better default would be to generate the certificate/key on-demand (see sshd-keygen)
Steps to reproduce
Install xrdp. Start it
Expected result
Secure configuration
Actual result
Uses distribution-provided keys
Environment
- Is system up to date?
Repo
Shannon (stable)
Desktop Environment
Other
System details
N/A
Other comments
No response
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the xrdp package definition and its installation or startup hooks; compare its shipped certificate and key handling with the sshd-keygen approach mentioned in the issue. Confirm that a fresh xrdp installation generates its own certificate and key instead of using distribution-provided credentials, then install and start xrdp to verify the result.
Written by the indexing model from the issue text.
Assessment
- Domain
- desktop, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100