晚上好!有人能帮我解决我的问题吗...我在本地电脑上使用 ubuntu 18.04,我需要使用 VPN 通过 rdp 连接到远程 windows 8.1 电脑。我已经设法设置了 VPN(MSCHAPv2,128 位,带 MPPE),我可以 ping 远程机器(它的 ip:192.168.1.170)我已经为 rdp 连接设置了最新的 Remmina,填写了所有连接参数,但首次连接尝试时我收到这样的错误:
[23:04:24:341] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpdr
[23:04:24:354] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpsnd
[23:04:24:354] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
[23:04:24:354] [10334:10620] [INFO][com.freerdp.client.common.cmdline] - loading channelEx drdynvc
[23:04:24:619] [10334:10620] [INFO][com.freerdp.crypto] - creating directory /home/bajiepka/snap/remmina/3223/.config/freerdp
[23:04:24:619] [10334:10620] [INFO][com.freerdp.crypto] - creating directory [/home/bajiepka/snap/remmina/3223/.config/freerdp/certs]
[23:04:24:619] [10334:10620] [INFO][com.freerdp.crypto] - created directory [/home/bajiepka/snap/remmina/3223/.config/freerdp/server]
[23:04:24:647] [10334:10620] [WARN][com.freerdp.crypto] - Certificate verification failure 'unable to get local issuer certificate (20)' at stack position 0
[23:04:24:647] [10334:10620] [WARN][com.freerdp.crypto] - CN = comp100
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - @ WARNING: CERTIFICATE NAME MISMATCH! @
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - @@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - The hostname used for this connection (192.168.1.170:3389)
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - does not match the name given in the certificate:
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - Common Name (CN):
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - comp100
[23:04:24:647] [10334:10620] [ERROR][com.freerdp.crypto] - A valid certificate for the wrong name should NOT be trusted!
[23:04:24:647] [10334:10620] [WARN][com.freerdp.crypto] - The VerifyCertificate callback is deprecated, migrate your application to VerifyCertificateEx
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core.nla] - SPNEGO failed with NTSTATUS: 0xC0000192
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_AUTHENTICATION_FAILED [0x00020009]
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[23:04:36:788] [10334:10620] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1
(org.remmina.Remmina:10334): Gtk-WARNING **: 23:04:36.934: ../../../../gtk/gtkwidget.c:8584: widget not within a GtkWindow
据我了解,问题是由于缺少证书,而该证书应该位于日志输出的目录中:
/home/bajiepka/snap/remmina/3223/.config/freerdp/certs
进一步的尝试显示出几乎类似的错误:
[23:06:15:385] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpdr
[23:06:15:385] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx rdpsnd
[23:06:15:385] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx cliprdr
[23:06:15:386] [10334:10667] [INFO][com.freerdp.client.common.cmdline] - loading channelEx drdynvc
[23:06:15:435] [10334:10667] [WARN][com.freerdp.crypto] - Certificate verification failure 'unable to get local issuer certificate (20)' at stack position 0
[23:06:15:435] [10334:10667] [WARN][com.freerdp.crypto] - CN = comp100
[23:06:15:462] [10334:10667] [ERROR][com.freerdp.core.nla] - SPNEGO failed with NTSTATUS: 0xC0000192
[23:06:15:463] [10334:10667] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_AUTHENTICATION_FAILED [0x00020009]
[23:06:15:463] [10334:10667] [ERROR][com.freerdp.core.rdp] - rdp_recv_callback: CONNECTION_STATE_NLA - nla_recv_pdu() fail
[23:06:15:463] [10334:10667] [ERROR][com.freerdp.core.transport] - transport_check_fds: transport->ReceiveCallback() - -1
(org.remmina.Remmina:10334): Gtk-WARNING **: 23:06:15.570: ../../../../gtk/gtkwidget.c:8584: widget not within a GtkWindow
我可以手动生成此证书吗?或者我是否遗漏了有关此证书使用的任何信息?我该如何解决此连接问题?