SSL problem of xrdp in oracle linux 9 in win11 subsystem

[ikarlmarx]

Trying to connect xrpd from win11 remotedesktop to oracle linux 9 in win11 subsystem , but failed.

xrdp.log as following:

[20240102-19:47:58] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 40110
[20240102-19:47:58] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20240102-19:47:58] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20240102-19:47:58] [INFO ] Security protocol: configured [SSL|RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [SSL]
[20240102-19:47:58] [ERROR] SSL_read: Failure in SSL library (protocol error?)
[20240102-19:47:58] [ERROR] SSL: error:0A000126:SSL routines::unexpected eof while reading
[20240102-19:47:58] [ERROR] libxrdp_force_read: header read error
[20240102-19:47:58] [ERROR] Processing [ITU-T T.125] Connect-Initial failed
[20240102-19:47:58] [ERROR] [MCS Connection Sequence] receive connection request failed
[20240102-19:47:58] [ERROR] xrdp_sec_incoming: xrdp_mcs_incoming failed
[20240102-19:47:58] [INFO ] Socket 12: AF_INET6 connection received from ::1 port 40116
[20240102-19:47:58] [ERROR] xrdp_rdp_incoming: xrdp_sec_incoming failed
[20240102-19:47:58] [INFO ] Using default X.509 certificate: /etc/xrdp/cert.pem
[20240102-19:47:58] [ERROR] xrdp_process_main_loop: libxrdp_process_incoming failed
[20240102-19:47:58] [ERROR] xrdp_iso_send: trans_write_copy_s failed
[20240102-19:47:58] [INFO ] Using default X.509 key file: /etc/xrdp/key.pem
[20240102-19:47:58] [ERROR] Sending [ITU T.125] DisconnectProviderUltimatum failed
[20240102-19:47:58] [INFO ] Security protocol: configured [SSL|RDP], requested [SSL|HYBRID|HYBRID_EX|RDP], selected [SSL]
[20240102-19:47:58] [INFO ] Connected client computer name: WIN11-T470P
[20240102-19:47:58] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc006 is unknown (ignored)
[20240102-19:47:58] [WARN ] Received [MS-RDPBCGR] TS_UD_HEADER type 0xc00a is unknown (ignored)
[20240102-19:47:58] [INFO ] xrdp_load_keyboard_layout: Keyboard information sent by the RDP client, keyboard_type:[0x04], keyboard_subtype:[0x00], keylayout:[0x00000804]
[20240102-19:47:58] [INFO ] xrdp_load_keyboard_layout: model [] variant [] layout [us] options []
[20240102-19:47:58] [INFO ] TLS connection established from ::1 port 40116: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384
[20240102-19:47:58] [INFO ] xrdp_caps_process_pointer: client supports new(color) cursor
[20240102-19:47:58] [INFO ] xrdp_process_offscreen_bmpcache: support level 1 cache size 10485760 MB cache entries 100
[20240102-19:47:58] [INFO ] xrdp_caps_process_codecs: nscodec, codec id 1, properties len 3
[20240102-19:47:58] [WARN ] xrdp_caps_process_codecs: unknown codec id 5
[20240102-19:47:58] [WARN ] Cannot find keymap file /etc/xrdp/km-00000804.ini
[20240102-19:47:58] [WARN ] Cannot find keymap file /etc/xrdp/km-00000804.ini
[20240102-19:47:58] [INFO ] Loading keymap file /etc/xrdp/km-00000409.ini
[20240102-19:47:58] [WARN ] local keymap file for 0x00000804 found and doesn't match built in keymap, using local keymap file
[20240102-19:48:06] [INFO ] connecting to sesman on 127.0.0.1:3350
[20240102-19:48:06] [INFO ] xrdp_wm_log_msg: sesman connect ok
[20240102-19:48:06] [INFO ] sesman connect ok
[20240102-19:48:06] [INFO ] sending login info to session manager. Please wait...
[20240102-19:48:06] [INFO ] xrdp_wm_log_msg: login successful for user karl on display 10
[20240102-19:48:06] [INFO ] login successful for user karl on display 10
[20240102-19:48:06] [INFO ] loaded module 'libxup.so' ok, interface size 10296, version 4
[20240102-19:48:06] [INFO ] started connecting
[20240102-19:48:06] [INFO ] lib_mod_connect: connecting via UNIX socket
[20240102-19:48:06] [INFO ] lib_mod_log_peer: xrdp_pid=3319 connected to X11rdp_pid=3322 X11rdp_uid=1000 X11rdp_gid=1000 client_ip=::1 client_port=40116
[20240102-19:48:06] [INFO ] connected ok

Anyone could give me some help?
Thanks.

[matt335672]

That all looks OK. The error messages are down to the way that the connection sequence works - see #2040.

I suggest you open a proper issue and fill in all the requested information. There's not enough here from our side to see what the problem is.