1WESTON-RDP(7) Miscellaneous Information Manual WESTON-RDP(7)
2
3
4
6 weston-rdp - the RDP backend for Weston
7
9 weston --backend=rdp-backend.so
10
12 The RDP backend allows to run a weston environment without the need of
13 specific graphic hardware, or input devices. Users can interact with
14 weston only by connecting using the RDP protocol.
15
16 The RDP backend uses FreeRDP to implement the RDP part, it acts as a
17 RDP server listening for incoming connections. It supports different
18 codecs for encoding the graphical content. Depending on what is sup‐
19 ported by the RDP client, the backend will encode images using remoteFx
20 codec, NS codec or will fallback to raw bitmapUpdate.
21
22 On the security part, the backend supports RDP security or TLS, keys
23 and certificates must be provided to the backend depending on which
24 kind of security is requested. The RDP backend will announce security
25 options based on which files have been given.
26
27 The RDP backend is multi-seat aware, so if two clients connect on the
28 backend, they will get their own seat.
29
30
32 When the RDP backend is loaded, weston will understand the following
33 additional command line options.
34
35 --address=address
36 The IP address on which the RDP backend will listen for RDP con‐
37 nections. By default it listens on 0.0.0.0.
38
39 --port=port
40 The TCP port to listen on for connections, it defaults to 3389.
41
42 --no-clients-resize
43 By default when a client connects on the RDP backend, it will
44 instruct weston to resize to the dimensions of the client's
45 announced resolution. When this option is set, weston will force
46 the client to resize to its own resolution.
47
48 --rdp4-key=file
49 The file containing the RSA key for doing RDP security. As RDP
50 security is known to be insecure, this option should be avoided
51 in production.
52
53 --rdp-tls-key=file
54 The file containing the key for doing TLS security. To have TLS
55 security you also need to ship a file containing a certificate.
56
57 --rdp-tls-cert=file
58 The file containing the certificate for doing TLS security. To
59 have TLS security you also need to ship a key file.
60
61
62
64 To generate a key file to use for RDP security, you need the winpr-
65 makecert utility shipped with FreeRDP:
66
67 $ winpr-makecert -rdp -silent -n rdp-security
68
69 This will create a rdp-security.key file.
70
71
72 You can generate a key and certificate file to use with TLS security
73 using a typical openssl invocations:
74
75 $ openssl genrsa -out tls.key 2048
76 Generating RSA private key, 2048 bit long modulus
77 [...]
78 $ openssl req -new -key tls.key -out tls.csr
79 [...]
80 $ openssl x509 -req -days 365 -signkey tls.key -in tls.csr -out tls.crt
81 [...]
82
83 You will get the tls.key and tls.crt files to use with the RDP backend.
84
86 weston(1)
87
88
89
90Weston 8.0.0 2017-12-14 WESTON-RDP(7)