尝试连接时,Remmina RDP 证书名称不匹配错误

尝试连接时,Remmina RDP 证书名称不匹配错误

我在本地 PC 上使用 Ubuntu 18.04,需要使用 VPN 通过 rdp 连接到远程 Windows 8.1 PC。我已成功正确设置 VPN(MSCHAPv2,128 位,带 MPPE),并且可以 ping 远程计算机(例如通过其 IP:192.168.1.170)。

我已经为 rdp 连接设置了最新的 Remmina,并填写了所有连接参数,但在第一次连接尝试时出现错误:

[23:04:24:341] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpdr
[23:04:24:354] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpsnd
[23:04:24:354] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
[23:04:24:354] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx drdynvc
[23:04:24:619] [10334:10620] [INFO][com.freerdp.crypto] - creating directory /home/bajiepka/snap/remmina/3223/.config/freerdp
[23:04:24:619] [10334:10620] [INFO][com.freerdp.crypto] - creating directory [/home/bajiepka/snap/remmina/3223/.config/freerdp/certs]
[23:04:24:619] [10334:10620] [INFO][com.freerdp.crypto] - created directory [/home/bajiepka/snap/remmina/3223/.config/freerdp/server]
[23:04:24:647] [10334:10620] [WARN][com.freerdp.crypto] - Certificate verification failure 'unable to get local issuer certificate (20)' at stack position 0
[23:04:24:647] [10334:10620] [WARN][com.freerdp.crypto] - CN = comp100
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - @           WARNING: CERTIFICATE NAME MISMATCH!           @
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - The hostname used for this connection (192.168.1.170:3389) 
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - does not match the name given in the certificate:
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - Common Name (CN):
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] -  comp100
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - A valid certificate for the wrong name should NOT be trusted!
[23:04:24:647] [10334:10620] [WARN][com.freerdp.crypto] - The VerifyCertificate callback is deprecated, migrate your application to VerifyCertificateEx
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core.nla] - SPNEGO failed with NTSTATUS: 0xC0000192
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_AUTHENTICATION_FAILED [0x00020009]
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1

(org.remmina.Remmina:10334): Gtk-WARNING **: 23:04:36.934: ../../../../gtk/gtkwidget.c:8584: widget not within a GtkWindow

据我从日志输出中了解,问题出在缺少应该位于目录中的证书/home/bajiepka/snap/remmina/3223/.config/freerdp/certs

进一步的尝试显示出类似的错误:

[23:06:15:385] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpdr
[23:06:15:385] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpsnd
[23:06:15:385] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
[23:06:15:386] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx drdynvc
[23:06:15:435] [10334:10667] [WARN][com.freerdp.crypto] - Certificate verification failure 'unable to get local issuer certificate (20)' at stack position 0
[23:06:15:435] [10334:10667] [WARN][com.freerdp.crypto] - CN = comp100
[23:06:15:462] [10334:10667] [ERROR][com.freerdp.core.nla] - SPNEGO failed with NTSTATUS: 0xC0000192
[23:06:15:463] [10334:10667] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_AUTHENTICATION_FAILED [0x00020009]
[23:06:15:463] [10334:10667] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[23:06:15:463] [10334:10667] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1

(org.remmina.Remmina:10334): Gtk-WARNING **: 23:06:15.570: ../../../../gtk/gtkwidget.c:8584: widget not within a GtkWindow

我可以手动生成此证书吗?或者我是否遗漏了有关此证书使用的任何信息?我该如何解决此连接问题?

相关内容