1WESTON-RDP(7)          Miscellaneous Information Manual          WESTON-RDP(7)
2
3
4

NAME

6       weston-rdp - the RDP backend for Weston
7

SYNOPSIS

9       weston --backend=rdp-backend.so
10

DESCRIPTION

12       The  RDP backend allows to run a weston environment without the need of
13       specific graphic hardware, or input devices. Users  can  interact  with
14       weston only by connecting using the RDP protocol.
15
16       The  RDP  backend  uses FreeRDP to implement the RDP part, it acts as a
17       RDP server listening for incoming connections.  It  supports  different
18       codecs  for  encoding  the graphical content. Depending on what is sup‐
19       ported by the RDP client, the backend will encode images using remoteFx
20       codec, NS codec or will fallback to raw bitmapUpdate.
21
22       On  the  security  part, the backend supports RDP security or TLS, keys
23       and certificates must be provided to the  backend  depending  on  which
24       kind  of  security is requested. The RDP backend will announce security
25       options based on which files have been given.
26
27       The RDP backend is multi-seat aware, so if two clients connect  on  the
28       backend, they will get their own seat.
29
30

OPTIONS

32       When  the  RDP  backend is loaded, weston will understand the following
33       additional command line options.
34
35       --address=address
36              The IP address on which the RDP backend will listen for RDP con‐
37              nections. By default it listens on 0.0.0.0.
38
39       --port=port
40              The TCP port to listen on for connections, it defaults to 3389.
41
42       --no-clients-resize
43              By  default  when  a client connects on the RDP backend, it will
44              instruct weston to resize to the dimensions of the client's  an‐
45              nounced  resolution.  When this option is set, weston will force
46              the client to resize to its own resolution.
47
48       --rdp4-key=file
49              The file containing the RSA key for doing RDP security.  As  RDP
50              security  is known to be insecure, this option should be avoided
51              in production.
52
53       --rdp-tls-key=file
54              The file containing the key for doing TLS security. To have  TLS
55              security you also need to ship a file containing a certificate.
56
57       --rdp-tls-cert=file
58              The  file  containing the certificate for doing TLS security. To
59              have TLS security you also need to ship a key file.
60
61
62

Generating cryptographic material for the RDP backend

64       To generate a key file to use for RDP security,  you  need  the  winpr-
65       makecert utility shipped with FreeRDP:
66
67       $ winpr-makecert -rdp -silent -n rdp-security
68
69       This will create a rdp-security.key file.
70
71
72       You  can  generate  a key and certificate file to use with TLS security
73       using a typical openssl invocations:
74
75       $ openssl genrsa -out tls.key 2048
76       Generating RSA private key, 2048 bit long modulus
77       [...]
78       $ openssl req -new -key tls.key -out tls.csr
79       [...]
80       $ openssl x509 -req -days 365 -signkey tls.key -in tls.csr -out tls.crt
81       [...]
82
83       You will get the tls.key and tls.crt files to use with the RDP backend.
84

SEE ALSO

86       weston(1)
87
88
89
90Weston 10.0.1                     2017-12-14                     WESTON-RDP(7)
Impressum