forked from cedrozor/myrtille
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathCHANGELOG
192 lines (167 loc) · 14.5 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
2018-08-19 Version 2.1.2 (stable)
fixed an ipv6 connection issue (that may occurred when checking the link-local ipv6 address)
2018-08-14 Version 2.1.1 (stable)
Resynced FreeRDP (2.0.0-dev4)
Hyper-V VM direct connection is now labelled "RDP over VM bus" into the login screen as a distinct host type
login form inputs are shown/hidden depending of the selected host type
added support of enhanced mode for Hyper-V VM direct connection (faster rendering and remote clipboard/printer are available) (thanks jol64)
added the name of the connected user into the toolbar (in addition to the connected server) when it's possible to retrieve it (standard rdp connection and non interactive logon)
updated documentation
2018-08-06 Version 2.1.0 (stable)
support of Hyper-V VM direct connection (extension of the RDP protocol; doesn't require remote desktop access to be enabled on the guest VM) (thanks jol64)
updated documentation for usage and limitations of the Hyper-V connection
fixed a potential inversion of arrows and numbers keys (whatever the numlock status)
fixed a path issue for the myrtille PDF virtual printer (in debug build or if the printer service runs under a custom account)
fixed the files popup which always downloaded the first document, regardless of the selected one (regression from version 1.9.0)
2018-07-31 Version 2.0.0 (stable)
Resynced FreeRDP (FQDN hotfix, introduced into myrtille 1.7.0, is still active... wfreerdp need some love :/)
the RDP security protocol (NLA, TLS, RDP, etc.) can now be selected from the login screen (RDP for compatibility and interactive logon, or in case of NLA issue; see https://github.com/cedrozor/myrtille/issues/116)
SSH terminal support (thanks Paul)
removed any RDP references on the gateway to make it fully protocol agnostic (support of any remote access protocol)
file transfer and print download can now be disabled from web config (along with remote clipboard and session sharing)
when sharing a remote session, guests now can't interact with it (they are just spectators)
included prompt for user credentials in enterprise mode
fixed login failure when passing domain in enterprise mode if IP is used instead of FQDN
fixed some css in enterprise mode (under Firefox)
websockets are now buffered for optimal performance on high latency / low bandwidth networks (thanks SieldP)
re-enabled stat button, which could help to diagnose connection issues (shows latency, bandwidth usage, etc.)
added a small icon on top of the screen to toggle the toolbar while connected (thanks windylea)
improved error messages in case of connection failure
some refactoring
2018-06-09 Version 1.9.1 (stable)
reinstated the hotfix removed into version 1.9.0, forcing IP connection when using FQDN; fact is, some people still have issues even with openssl 1.1.x (unable to reproduce, may depend on a specific configuration). more details here: https://github.com/FreeRDP/FreeRDP/issues/4525#issuecomment-380635647
improved performance mitigation in case of high latency network
the installer no longer requires administrator rights by default (but may still needs elevation during the installation, depending on the installed component(s))
2018-05-24 Version 1.9.0 (stable)
resynced FreeRDP (version 2.0-RC2-dev3), now using the openssl 1.1.x architecture. Should fix any previously reported FQDN and NLA issues
added a pdf virtual printer; any document printed with the "Myrtille PDF" printer is downloaded to the browser and can be opened/saved/printed from there
pdf content is now downloaded into an hidden iframe, instead of a new tab, to prevent popup blockers to block it
added a client ip tracking option to prevent unauthorized accesses. configurable into web.config (thanks bigpjo)
cookieless sessions are now disabled by default. This lowers the risk of session stealing (by simply copying the url) but also removes the ability to have multiple connections/tabs. can still be enabled into web.config, but use at your own risk! (thanks bigpjo)
strengthened security to prevent session fixation attack or spoofing if cookieless sessions are enabled
the remote session can now be shared with a new toolbar button that generates a one time usage url. can be disabled into web.config. (thanks bigpjo)
a shared session now can't be disconnected by a guest. (thanks bigpjo)
security fixes with enterprise mode to ensure that shared sessions do not give access to owner hosts. (thanks bigpjo)
added an option to enterprise mode to allow hosts to be restricted to specific users (by username). (thanks bigpjo)
enterprise mode now have a better reporting of login failures and includes a change password dialog if the user is required to change it. (thanks bigpjo)
fixed issue with enterprise host create session including invalid /popup/ path in sessionURL. (thanks bigpjo)
the remote session is now disconnected after the browser window/tab is closed, or connection is lost, to prevent it from being left open server side. configurable into web.config (thanks bigpjo)
the database connection string (into bin/Myrtille.Services.exe.config) can now be configured to specify the SQLCE file location or use a standard SQL server (useful for a centralized database, with myrtille clustered). (thanks bigpjo)
added MFA and enterprise mode configuration steps into the installer
installer logs are now created into the install log folder (log/Myrtille.Setup.log)
2018-04-02 Version 1.8.1 (beta)
enterprise mode data folder is now created by the installer (thanks hac)
fixed installer error 1001 regarding CERTENROLLLib.CX509PrivateKey
updated openssl to version 1.0.2o
added an error message if the remote connection fails or is closed unexpectedly
2018-03-29 Version 1.8.0 (beta)
resynced FreeRDP with master repository (fixes the NLA issue introduced with Windows updates KB4088776, KB4088787, KB4088876, KB4088875)
added support for MFA (one time password and one time host session url) (thanks Paul Oliver). Refer to documentation for activation
added enterprise mode (AD pre-authentication and hosts list management) (thanks Paul Oliver). Refer to documentation for activation
in enterprise mode, the security mode for the host connection is now configurable (NLA, TLS, RDP, etc.)
most FreeRDP connection params are now configurable (myrtille\bin\Myrtille.Services.exe.config)
the remote clipboard can now be disabled, for enhanced security (myrtille\Web.config)
replaced client redirects by server redirects (cleaner and more friendly to proxies)
added more connection details to myrtille logs
2018-02-07 Version 1.7.0 (stable)
resynced FreeRDP with master repository; FreeRDP 2.0-RC2 milestone: https://github.com/FreeRDP/FreeRDP/milestone/8
FreeRDP HOTFIX: connection using FQDN is broken (either direct connection or through a connection broker redirection), using target IP instead
FreeRDP HOTFIX: fixed client IP resolution when using an ipv6 connection
updated the connection tooltip (ipv6 addresses require brackets, i.e. [::1])
changed the right-click button mechanism to a toggle
2017-12-09 Version 1.6.1 (stable)
enabled fonts smoothing
modified disconnect button tooltip
removed pipes messages size limitation
pipes are no longer buffered
added support for multiple websockets on a single remote session to allow for collaborative mode (was already supported using long-polling). To share a remote session, simply copy and share the session url (contains the session id). CAUTION! this is experimental (no access control, no presenter role, etc.)
enforced wfreerdp process identity on pipes access rule
pipes are now used in byte mode instead of message (small performance improvement)
remote session is now closed in case of pipes failure instead of being stuck
2017-11-14 Version 1.6.0 (stable)
resynced FreeRDP with master repository; among other things, fixes multiple vulnerabilities reported by the Cisco Talos Team (http://blog.talosintelligence.com/2017/07/vulnerbility-spotlight-freerdp-multiple.html) (thanks hac)
ignore certificate warning (when using NLA); may happen, for example, with a self-signed certificate (not trusted) or if the server joined a domain after the certificate was issued (name mismatch). more details here: http://www.vkernel.ro/blog/configuring-certificates-in-2012r2-remote-desktop-services-rds (required with the latest FreeRDP build)
connection settings (including user credentials) are no longer passed to FreeRDP through command line; using pipe communication instead (thanks Paul)
auto-connect / start program from url now doesn't require the "&program=" parameter (access to the desktop if missing or empty) (thanks noetius)
custom mouse cursors are now supported with IE (thanks Thijs)
added a "Right-Click" button (into the toolbar) to simulate a right-click action on devices which don't have a mouse (or a right button) (thanks Scott)
performance tweak: now using PNG encoding by default (instead of mixed PNG/JPEG); drawback is it uses more bandwidth with graphic applications (use AUTO encoding in this case; config.js)
performance tweak: disabled mouse move sampling; drawback is it may lower the responsiveness with graphical applications (enable the sampling in this case; 10% for example; config.js)
performance tweak: disabled blob support (using base64 instead); blob is a newer javascript construct but is cached on disk whereas base64 data is cached in memory (faster); config.js
minor refactoring
2017-07-27 Version 1.5.0 (stable)
changed prerequisites: IIS 8+ with websocket protocol enabled and .NET 4.5 (instead of .NET 4.0)
replaced Fleck websocket server by IIS 8+ websocket handler (now using standard 80 and 443 ports)
added websocket binary communication (no more base64 33% bandwidth overhead)
added session fixation protection (a new session ID is generated upon login)
added custom port support (i.e.: IIS Express uses port 2323)
fixed installer issue if both IIS and IIS Express are available on the target machine
fixed building issue with CERTENROLLLib (COM object) under Windows 10 (thanks mak1311)
fixed the blue mouse pointer shadow
fixed a (myrtille) read access violation regarding the mouse pointer (c0000005 exception code)
fixed a (FreeRDP) read access violation regarding the H264 codec init, when available on the client machine (c0000005 exception code)
disabled H264 (Myrtille does process bitmaps updates, not video streams)
fixed remote clipboard under IE (wasn't displayed into the popup)
increased max file upload/download size up to 1GB (tweakable into Myrtille.Web and Myrtille.Services configs, if needed)
improved UI (stat, debug and rendering mode are now hidden by default into default.css, customizable logo, myrtille version, etc.)
the remote session log is now configurable into Myrtille.Services config (disabled by default)
the remote session display is now responsive (scale to browser size, disabled by default)
if starting a program from url without setting a display resolution, it's auto-detetected from the client
"start program from url" feature now supports hashed passwords (aka "password 51" into .rdp files)
commands can now be sent directly from the browser (i.e.: image quality tweak depending on the available bandwidth)
simplified config.js (added enums and autodetection for major settings)
customizable framerate (into config.js)
resynced the myrtille FreeRDP fork with the FreeRDP master repository
disabled the FreeRDP credentials popup when myrtille is running as a service (it can also be run in console mode for debug)
refactoring
2016-12-22 Version 1.4.0 (stable)
the login screen and connection toolbar appearance are now fully customizable in css (also removed unnecessary info from the connection toolbar)
the remote session desktop is now sized to fit the browser container exactly (no scrollbars at start)
fixed user event binding on old and modern browsers (attachEvent vs addEventListener)
qwerty mapping is now enforced on non standard keyboard layouts
multiple remote sessions can now be opened in different browser tabs
updated the image encoding to provide a better display quality and lower bandwidth usage
2016-10-31 Version 1.3.1 (stable)
re-enabled and updated WebP compression
improved WebP debug
2016-10-28 Version 1.3.0 (stable)
added program to run from URL feature
fixed image encoding and quality set properties
cleaner javascript calls
update UI refactoring
updated readme and documentation
2016-10-16 Version 1.2.1 (stable)
a failed connection or authentication now have the browser to go back to the login screen
fixed javascript calls (parent window) in long polling mode
disabled keyboard helper (config.js)
2016-10-14 Version 1.2.0 (stable)
the packaged FreeRDP and OpenSSL binaries are now statically linked, in order to remove the Microsoft Visual C++ redistributables dependencies
2016-10-09 Version 1.1.1 (stable)
connection settings are now passed through a posted form instead of url querystring, for security purpose
gdi rendering is forced software because there is a palette issue with windows server 2008 and some virtual machines settings
2016-09-10 Version 1.1.0 (beta)
upgraded freerdp to the latest version. additionnaly, myrtille and freerdp are now loose coupled (freerdp forked into https://github.com/cedrozor/FreeRDP)
NLA is now supported
hardware GDI (auto-detected)
added clipboard support
improved myrtille homepage
2016-07-14 Version 1.0.6 (stable)
added automatic creation of a myrtille self-signed certificate into IIS
removed password for the websocket server certificate as IIS certificate export is done on the gateway machine itself
2016-07-03 Version 1.0.5 (stable)
removed the RDS role, application server role and file storage service prerequisites
removed the creation of an rdp user ("Myrtille") on install (it was used for tests but is no longer relevant)
removed the configuration on the localhost rdp server
added automatic configuration of the firewall (websockets ports)
2016-06-11 Version 1.0.4 (beta)
Added domain support to file transfer (see file transfer configuration in documentation)
Build set back to AnyCPU to have 64 bits registry hives loaded on 64 bits machines (fix a load user profile issue)
2016-04-15 Version 1.0.3 (stable)
Added elevated privileges check (UAC) to the installer (must be run as administrator)
Fixed an installer issue in repair mode
2016-04-13 Version 1.0.2 (stable)
Added Ctrl+Alt+Del button
2016-04-06 Version 1.0.1 (stable)
Forced x86 (32 bits) build, in order to fix COM issues on mixed platforms
2016-03-08 Version 1.0.0 (stable)
Initial release version