Bug#894830: freerdp-x11: Cant connect to windows2012r2 RDP with FIPS after 3/2018 Windows update

[Matt Weatherford]

Package: freerdp-x11
Version: 1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
Severity: important

Dear Maintainer,

xfreerdp via remmina was working fine until march 2018 when a windows update apparently changed something in the negotiation protocol.  I only "know" this from reading on the remmina issues forum here:

https://github.com/FreeRDP/Remmina/issues/1513

would be nice to be able to use remmina on Debian 9!

Note that windows 2016 server works fine.

Heres the output of:

$ xfreerdp /log-level:debug  /v:senkaku
connected to senkaku:3389
Password: 
SSL_read: Failure in SSL library (protocol error?)
SSL_read: error:14094419:SSL routines:ssl3_read_bytes:tlsv1 alert access denied
credssp_recv() error: -1
Authentication failure, check credentials.
If credentials are valid, the NTLMSSP implementation may be to blame.
Error: protocol security negotiation or connection failure
$ 





-- System Information:
Debian Release: 9.4
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.14.0-0.bpo.3-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages freerdp-x11 depends on:
ii  libc6                     2.24-11+deb9u3
ii  libfreerdp-cache1.1       1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-client1.1      1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-codec1.1       1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-common1.1.0    1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-core1.1        1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-crypto1.1      1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-gdi1.1         1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-locale1.1      1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-primitives1.1  1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-rail1.1        1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libfreerdp-utils1.1       1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libjpeg62-turbo           1:1.5.1-2
ii  libssl1.0.2               1.0.2l-2+deb9u3
ii  libwinpr-crt0.1           1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-crypto0.1        1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-dsparse0.1       1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-environment0.1   1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-file0.1          1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-handle0.1        1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-heap0.1          1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-input0.1         1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-interlocked0.1   1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-library0.1       1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-path0.1          1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-pool0.1          1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-registry0.1      1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-rpc0.1           1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-sspi0.1          1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-synch0.1         1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-sysinfo0.1       1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-thread0.1        1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libwinpr-utils0.1         1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libx11-6                  2:1.6.4-3
ii  libxcursor1               1:1.1.14-1+deb9u1
ii  libxext6                  2:1.3.3-1+b2
ii  libxfreerdp-client1.1     1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2
ii  libxi6                    2:1.7.9-1
ii  libxinerama1              2:1.1.3-1+b3
ii  libxkbfile1               1:1.0.9-2
ii  libxrender1               1:0.9.10-1
ii  libxv1                    2:1.0.11-1
ii  zlib1g                    1:1.2.8.dfsg-5

Versions of packages freerdp-x11 recommends:
ii  libfreerdp-plugins-standard  1.1.0~git20140921.1.440916e+dfsg1-13+deb9u2

freerdp-x11 suggests no packages.

-- no debconf information