forked from cedrozor/myrtille
-
Notifications
You must be signed in to change notification settings - Fork 0
/
CHANGELOG
305 lines (272 loc) · 25.2 KB
/
CHANGELOG
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
2020-01-26 Version 2.8.0 (stable)
pre-requisites change; myrtille now requires Windows 8.1 or Windows Server 2012 R2 or greater
the installer is now shipped without bootstraper (Setup.exe); open the myrtille msi file directly instead
the installer now installs the myrtille pre-requisites automatically (roles and features); the related powershell scripts can also be run manually from outside the installer, if needed
the installer now supports upgrading (thanks to Orca, which allows finer control over msi files), removing the need to uninstall a previous version first
myrtille is now available as a docker image (see DOCUMENTATION.MD)
resynced FreeRDP (among many things, fixes some issues related to the clipboard and audio)
fixed session disconnect occuring under some circumstances on clipboard paste
fixed an issue where only the first letter of the clipboard content was displayed on clipboard paste
simplified hosts management (no domain or enterprise mode required); default login: admin/admin (changed upon first login)
updated the enterprise mode so that a member of "EnterpriseAdminGroup" can connect an host whatever the allowed groups or users defined on it (thanks dgcom)
fixed an issue with the enterprise mode, which prompted to change the password due to expiration whereas the expiration date was just not set (thanks dgcom)
security protocol is now configurable for RDP over VM bus
user domain is now configurable whatever the protocol and displayed into the toolbar, if defined
updated comments to drain disconnected sessions when using a connection broker in HA mode (myrtille services config)
starting with Windows Server 2019 (or Windows 10 release 1903), RDS introduces changes with NLA and the way disconnected sessions are handled (see DOCUMENTATION.MD); myrtille now default to scale instead of reconnect
if scaling the display on browser resize, you can choose whether to preserve or not the aspect ratio (config.js, default = don't keep)
various minor fixes
2019-11-27 Version 2.7.1 (stable)
* HOTFIX * fixed a potential crash of myrtille services when sending a disconnect notification (https://github.com/cedrozor/myrtille/issues/187, thanks gtmsew)
the automatic application pool recycling is now disabled by default, and is not applicable if using the enterprise mode (this prevents enterprise sessions to be dropped unexpectedly!)
if recycling is enabled, a new http session is now acquired on disconnect; this prevents a subsequent login failure (due to the old http session being invalid) without any error message
2019-11-19 Version 2.7.0 (stable)
* HOTFIX * fixed a critical issue with FreeRDP (exit code 131085) when using an RD license server configured in "per device" mode, past the 120 days of the RDS grace period
updated readme and documentation about the RDS role
the browser "heartbeat" (used to detect if the browser window/tab was closed) is now on a different timer than the periodical fullscreen update (config.js; default 10 secs)
disabled the alt key capture because it may interfere with the browser alt+key menu
keys following the alt+gr modifier are now sent as scancode instead of unicode
ability to configure the login url (by default the myrtille login page; web.config)
updated the installer for a better display of prerequisites
added the option into the installer to choose either to pass the http session ID into url or store it into the default "ASP.NET_SessionId" cookie (the former allows multiple connections/tabs or iframes)
the connection API is now out of beta and installed by default (full auto-connect/start program from url syntax is still available)
the scale feature now keeps the aspect ratio on browser resize
fixed a display refresh issue under chrome + https if the clipboard is empty
increased the image cache duration (1 sec -> 3 secs)
halved the input buffer duration (based on the roundtrip duration)
updated display tweaking
improved cleanup on session disconnect into wfreerdp to prevent memory leaks with GDI+
improved cleanup on session disconnect into Myrtille to prevent memory leaks on the application pool
removed any unnecessary memory allocation and released any disposable object on the application pool
the application pool is now automatically recycled when there is no active remote session (configurable into web.config)
fixed an issue related to the disconnect callback (which was sometimes not received by the gateway due a WCF deadlock)
scripts and styles now have computed hashes to prevent browser caching (in case content is changed); they could also be minified, as needed (see comments in BundleConfig.cs)
re-enabled multiple connections/tabs (web.config, read comments about security)
the address of the connected server is now displayed into the window/tab title, if not using a connection API (thanks Zak)
fixed invalid mouse cursor update under certain circumstances (thanks joburg)
fixed potential delayed wfreerdp exit in case of session disconnect
2019-09-02 Version 2.6.0 (stable)
resynced FreeRDP (2.0.0-dev5)
added a REST API to disconnect a given remote session or all of them (on a gateway)
fixed an issue with some network or domain configuration that could delay the start of a connection
support of Connection Broker database, in High Availability mode
support of RDS API
configurable drain of disconnected sessions
seamless clipboard synchronization, using the async clipboard API (requires Chrome and HTTPS) with fallback to standard web API (for other browsers and HTTP)
now hiding iframe content on browser resize
various mockup improvements
get focus back on main window after a popup is closed
screenshot is now returned as HttpResponseMessage, byte array content
clipboard virtual channel comments and check
the self-signed certificate (installed by myrtille on install) is now issued with the machine FQDN to prevent ERR_CERT_AUTHORITY_INVALID (Subject Alternative Name Missing) in recent Chrome releases
now using a web worker for the periodical fullscreen updates to keep them going even if the main thread is paused (due to inactive window/tab, after focus lost for example)
some refactoring
2019-06-01 Version 2.5.5 (stable)
added audio support (MP3 (default)/WAV, config.js)
(beta) added a REST API to prevent the connection details to be passed into the querystring; a connection identifier (&cid=) is passed instead and the connection details are retrieved by the myrtille gateway using the REST API
(beta) added a REST API to share a remote session and manage the active guest(s)
(beta) added a REST API to take screenshots of the remote session (either automatically (periodically), or manually)
added the ability to hide the toolbar (web.config, you can hide it if using your own UI)
added the ability to disable connection from login screen or url (web.config, you can disable it if using a connection API)
fixed a regression into the buffer processing
fixed a mouse left button bug which happened sometimes in HTML4
fixed a display glitch with too many divs displayed at once in HTML4
fixed a keyboard handling issue with Ubuntu in RDP over VM bus (Hyper-V) mode
fixed some issues related to session sharing
improved the ability to run myrtille into an iframe (like for multiple connections/tabs, requires "cookieless=useURI" mode into web.config): multiple iframes on a same page, key combination to switch from one iframe to another (shift + alt), focus management, etc.; cross domain restriction can be avoided by having all iframes on the same domain as the main page
improved the scale and reconnect features on browser resize; they can now be toggled from the toolbar (instead of using a web.config key)
toolbar state is now saved into a cookie to persist across page reload(s)
stat, debug and compatibility modes are now handled client side, saved into a cookie and always available; they are no longer bound to the remote session (so that, if the remote session is shared, guest(s) can now use them independently from the owner!)
a remote session now supports mixed HTML4 and HTML5 client(s)
fixed some issues in compatibility (HTML4) mode (long-polling); for example, missing carriage returns and line feeds into SSH terminal and remote clipboard popup
removed the display websocket buffer (as the connection remains open, it was not really necessary nor did it provide satisfactory results)
2019-02-14 Version 2.3.1 (stable)
the remote session display is now automatically scaled to the browser size on session start
NEW! as an alternative to scaling, the remote session can be reconnected on browser resize to preserve the aspect ratio (web.config, disable "ScaleOnResize")
fixed a race condition in which the browser sent certain configuration parameters before the connection was effective
improved the up/down swipe gesture management (should be smoother now)
more FreeRDP params are now configurable (bin/Myrtille.Services.exe.config)
disabled FreeRDP glyph cache to fix display issues on Windows Server 2008 R2 (also fixes issues with chinese characters)
fixed unexpected disconnects on Windows Server 2008 R2 (https://github.com/FreeRDP/FreeRDP/issues/3595)
resynced FreeRDP (2.0.0-RC4)
2018-11-03 Version 2.3.0 (stable)
HOTFIX! increased the WCF channels limits; this fixes an issue where some connections failed under the load
added WCF traces (disabled by default; see comments in configs)
replaced the remote session auto-incremented counter (as identifier) by a guid; this ensures an unique identifier even if Myrtille.Services (or MyrtilleAppPool before version 2.2.0) is restarted
the Myrtille.PDF virtual printer now opens the browser print dialog, removing the need to install a PDF viewer on the end user machine and providing direct access to local (or network) printers (not working with the built-in Firefox PDF.js, option to open/download the pdf instead)
added swipe up/down gesture management for touchscreen devices (useful to scroll the display in applications that need it; can be disabled into the toolbar) * experimental feature! * not working on IE/Edge (see below)
emulating mouse events for IE/Edge on touchscreen devices (touchscreen is disabled by default into IE/Edge and use pointer events instead of touch when enabled into about:flags)
for easier auto-connect / start program from url management, you can generate a password hash from url (thanks jol64). syntax: https://server/myrtille/GetHash.aspx?password=password
resynced FreeRDP (2.0.0 RC3)
2018-10-21 Version 2.2.0 (stable)
disabled the myrtille application pool recycling
moved the remote session counter (auto-increment) to the service layer
myrtille pdf printer is now disabled by default in web.config
fixed SSH on non-default port (thanks pk910)
2018-08-19 Version 2.1.2 (stable)
fixed an ipv6 connection issue (that may occurred when checking the link-local ipv6 address)
2018-08-14 Version 2.1.1 (stable)
Resynced FreeRDP (2.0.0-dev4)
Hyper-V VM direct connection is now labelled "RDP over VM bus" into the login screen as a distinct host type
login form inputs are shown/hidden depending of the selected host type
added support of enhanced mode for Hyper-V VM direct connection (faster rendering and remote clipboard/printer are available) (thanks jol64)
added the name of the connected user into the toolbar (in addition to the connected server) when it's possible to retrieve it (standard rdp connection and non interactive logon)
updated documentation
2018-08-06 Version 2.1.0 (stable)
support of Hyper-V VM direct connection (extension of the RDP protocol; doesn't require remote desktop access to be enabled on the guest VM) (thanks jol64)
updated documentation for usage and limitations of the Hyper-V connection
fixed a potential inversion of arrows and numbers keys (whatever the numlock status)
fixed a path issue for the myrtille PDF virtual printer (in debug build or if the printer service runs under a custom account)
fixed the files popup which always downloaded the first document, regardless of the selected one (regression from version 1.9.0)
2018-07-31 Version 2.0.0 (stable)
Resynced FreeRDP (FQDN hotfix, introduced into myrtille 1.7.0, is still active... wfreerdp need some love :/)
the RDP security protocol (NLA, TLS, RDP, etc.) can now be selected from the login screen (RDP for compatibility and interactive logon, or in case of NLA issue; see https://github.com/cedrozor/myrtille/issues/116)
SSH terminal support (thanks Paul)
removed any RDP references on the gateway to make it fully protocol agnostic (support of any remote access protocol)
file transfer and print download can now be disabled from web config (along with remote clipboard and session sharing)
when sharing a remote session, guests now can't interact with it (they are just spectators)
included prompt for user credentials in enterprise mode
fixed login failure when passing domain in enterprise mode if IP is used instead of FQDN
fixed some css in enterprise mode (under Firefox)
websockets are now buffered for optimal performance on high latency / low bandwidth networks (thanks SieldP)
re-enabled stat button, which could help to diagnose connection issues (shows latency, bandwidth usage, etc.)
added a small icon on top of the screen to toggle the toolbar while connected (thanks windylea)
improved error messages in case of connection failure
some refactoring
2018-06-09 Version 1.9.1 (stable)
reinstated the hotfix removed into version 1.9.0, forcing IP connection when using FQDN; fact is, some people still have issues even with openssl 1.1.x (unable to reproduce, may depend on a specific configuration). more details here: https://github.com/FreeRDP/FreeRDP/issues/4525#issuecomment-380635647
improved performance mitigation in case of high latency network
the installer no longer requires administrator rights by default (but may still needs elevation during the installation, depending on the installed component(s))
2018-05-24 Version 1.9.0 (stable)
resynced FreeRDP (version 2.0-RC2-dev3), now using the openssl 1.1.x architecture. Should fix any previously reported FQDN and NLA issues
added a pdf virtual printer; any document printed with the "Myrtille PDF" printer is downloaded to the browser and can be opened/saved/printed from there
pdf content is now downloaded into an hidden iframe, instead of a new tab, to prevent popup blockers to block it
added a client ip tracking option to prevent unauthorized accesses. configurable into web.config (thanks bigpjo)
cookieless sessions are now disabled by default. This lowers the risk of session stealing (by simply copying the url) but also removes the ability to have multiple connections/tabs. can still be enabled into web.config, but use at your own risk! (thanks bigpjo)
strengthened security to prevent session fixation attack or spoofing if cookieless sessions are enabled
the remote session can now be shared with a new toolbar button that generates a one time usage url. can be disabled into web.config. (thanks bigpjo)
a shared session now can't be disconnected by a guest. (thanks bigpjo)
security fixes with enterprise mode to ensure that shared sessions do not give access to owner hosts. (thanks bigpjo)
added an option to enterprise mode to allow hosts to be restricted to specific users (by username). (thanks bigpjo)
enterprise mode now have a better reporting of login failures and includes a change password dialog if the user is required to change it. (thanks bigpjo)
fixed issue with enterprise host create session including invalid /popup/ path in sessionURL. (thanks bigpjo)
the remote session is now disconnected after the browser window/tab is closed, or connection is lost, to prevent it from being left open server side. configurable into web.config (thanks bigpjo)
the database connection string (into bin/Myrtille.Services.exe.config) can now be configured to specify the SQLCE file location or use a standard SQL server (useful for a centralized database, with myrtille clustered). (thanks bigpjo)
added MFA and enterprise mode configuration steps into the installer
installer logs are now created into the install log folder (log/Myrtille.Setup.log)
2018-04-02 Version 1.8.1 (beta)
enterprise mode data folder is now created by the installer (thanks hac)
fixed installer error 1001 regarding CERTENROLLLib.CX509PrivateKey
updated openssl to version 1.0.2o
added an error message if the remote connection fails or is closed unexpectedly
2018-03-29 Version 1.8.0 (beta)
resynced FreeRDP with master repository (fixes the NLA issue introduced with Windows updates KB4088776, KB4088787, KB4088876, KB4088875)
added support for MFA (one time password and one time host session url) (thanks Paul Oliver). Refer to documentation for activation
added enterprise mode (AD pre-authentication and hosts list management) (thanks Paul Oliver). Refer to documentation for activation
in enterprise mode, the security mode for the host connection is now configurable (NLA, TLS, RDP, etc.)
most FreeRDP connection params are now configurable (myrtille\bin\Myrtille.Services.exe.config)
the remote clipboard can now be disabled, for enhanced security (myrtille\Web.config)
replaced client redirects by server redirects (cleaner and more friendly to proxies)
added more connection details to myrtille logs
2018-02-07 Version 1.7.0 (stable)
resynced FreeRDP with master repository; FreeRDP 2.0-RC2 milestone: https://github.com/FreeRDP/FreeRDP/milestone/8
FreeRDP HOTFIX: connection using FQDN is broken (either direct connection or through a connection broker redirection), using target IP instead
FreeRDP HOTFIX: fixed client IP resolution when using an ipv6 connection
updated the connection tooltip (ipv6 addresses require brackets, i.e. [::1])
changed the right-click button mechanism to a toggle
2017-12-09 Version 1.6.1 (stable)
enabled fonts smoothing
modified disconnect button tooltip
removed pipes messages size limitation
pipes are no longer buffered
added support for multiple websockets on a single remote session to allow for collaborative mode (was already supported using long-polling). To share a remote session, simply copy and share the session url (contains the session id). CAUTION! this is experimental (no access control, no presenter role, etc.)
enforced wfreerdp process identity on pipes access rule
pipes are now used in byte mode instead of message (small performance improvement)
remote session is now closed in case of pipes failure instead of being stuck
2017-11-14 Version 1.6.0 (stable)
resynced FreeRDP with master repository; among other things, fixes multiple vulnerabilities reported by the Cisco Talos Team (http://blog.talosintelligence.com/2017/07/vulnerbility-spotlight-freerdp-multiple.html) (thanks hac)
ignore certificate warning (when using NLA); may happen, for example, with a self-signed certificate (not trusted) or if the server joined a domain after the certificate was issued (name mismatch). more details here: http://www.vkernel.ro/blog/configuring-certificates-in-2012r2-remote-desktop-services-rds (required with the latest FreeRDP build)
connection settings (including user credentials) are no longer passed to FreeRDP through command line; using pipe communication instead (thanks Paul)
auto-connect / start program from url now doesn't require the "&program=" parameter (access to the desktop if missing or empty) (thanks noetius)
custom mouse cursors are now supported with IE (thanks Thijs)
added a "Right-Click" button (into the toolbar) to simulate a right-click action on devices which don't have a mouse (or a right button) (thanks Scott)
performance tweak: now using PNG encoding by default (instead of mixed PNG/JPEG); drawback is it uses more bandwidth with graphic applications (use AUTO encoding in this case; config.js)
performance tweak: disabled mouse move sampling; drawback is it may lower the responsiveness with graphical applications (enable the sampling in this case; 10% for example; config.js)
performance tweak: disabled blob support (using base64 instead); blob is a newer javascript construct but is cached on disk whereas base64 data is cached in memory (faster); config.js
minor refactoring
2017-07-27 Version 1.5.0 (stable)
changed prerequisites: IIS 8+ with websocket protocol enabled and .NET 4.5 (instead of .NET 4.0)
replaced Fleck websocket server by IIS 8+ websocket handler (now using standard 80 and 443 ports)
added websocket binary communication (no more base64 33% bandwidth overhead)
added session fixation protection (a new session ID is generated upon login)
added custom port support (i.e.: IIS Express uses port 2323)
fixed installer issue if both IIS and IIS Express are available on the target machine
fixed building issue with CERTENROLLLib (COM object) under Windows 10 (thanks mak1311)
fixed the blue mouse pointer shadow
fixed a (myrtille) read access violation regarding the mouse pointer (c0000005 exception code)
fixed a (FreeRDP) read access violation regarding the H264 codec init, when available on the client machine (c0000005 exception code)
disabled H264 (Myrtille does process bitmaps updates, not video streams)
fixed remote clipboard under IE (wasn't displayed into the popup)
increased max file upload/download size up to 1GB (tweakable into Myrtille.Web and Myrtille.Services configs, if needed)
improved UI (stat, debug and rendering mode are now hidden by default into default.css, customizable logo, myrtille version, etc.)
the remote session log is now configurable into Myrtille.Services config (disabled by default)
the remote session display is now responsive (scale to browser size, disabled by default)
if starting a program from url without setting a display resolution, it's auto-detetected from the client
"start program from url" feature now supports hashed passwords (aka "password 51" into .rdp files)
commands can now be sent directly from the browser (i.e.: image quality tweak depending on the available bandwidth)
simplified config.js (added enums and autodetection for major settings)
customizable framerate (into config.js)
resynced the myrtille FreeRDP fork with the FreeRDP master repository
disabled the FreeRDP credentials popup when myrtille is running as a service (it can also be run in console mode for debug)
refactoring
2016-12-22 Version 1.4.0 (stable)
the login screen and connection toolbar appearance are now fully customizable in css (also removed unnecessary info from the connection toolbar)
the remote session desktop is now sized to fit the browser container exactly (no scrollbars at start)
fixed user event binding on old and modern browsers (attachEvent vs addEventListener)
qwerty mapping is now enforced on non standard keyboard layouts
multiple remote sessions can now be opened in different browser tabs
updated the image encoding to provide a better display quality and lower bandwidth usage
2016-10-31 Version 1.3.1 (stable)
re-enabled and updated WebP compression
improved WebP debug
2016-10-28 Version 1.3.0 (stable)
added program to run from URL feature
fixed image encoding and quality set properties
cleaner javascript calls
update UI refactoring
updated readme and documentation
2016-10-16 Version 1.2.1 (stable)
a failed connection or authentication now have the browser to go back to the login screen
fixed javascript calls (parent window) in long polling mode
disabled keyboard helper (config.js)
2016-10-14 Version 1.2.0 (stable)
the packaged FreeRDP and OpenSSL binaries are now statically linked, in order to remove the Microsoft Visual C++ redistributables dependencies
2016-10-09 Version 1.1.1 (stable)
connection settings are now passed through a posted form instead of url querystring, for security purpose
gdi rendering is forced software because there is a palette issue with windows server 2008 and some virtual machines settings
2016-09-10 Version 1.1.0 (beta)
upgraded freerdp to the latest version. additionnaly, myrtille and freerdp are now loose coupled (freerdp forked into https://github.com/cedrozor/FreeRDP)
NLA is now supported
hardware GDI (auto-detected)
added clipboard support
improved myrtille homepage
2016-07-14 Version 1.0.6 (stable)
added automatic creation of a myrtille self-signed certificate into IIS
removed password for the websocket server certificate as IIS certificate export is done on the gateway machine itself
2016-07-03 Version 1.0.5 (stable)
removed the RDS role, application server role and file storage service prerequisites
removed the creation of an rdp user ("Myrtille") on install (it was used for tests but is no longer relevant)
removed the configuration on the localhost rdp server
added automatic configuration of the firewall (websockets ports)
2016-06-11 Version 1.0.4 (beta)
Added domain support to file transfer (see file transfer configuration in documentation)
Build set back to AnyCPU to have 64 bits registry hives loaded on 64 bits machines (fix a load user profile issue)
2016-04-15 Version 1.0.3 (stable)
Added elevated privileges check (UAC) to the installer (must be run as administrator)
Fixed an installer issue in repair mode
2016-04-13 Version 1.0.2 (stable)
Added Ctrl+Alt+Del button
2016-04-06 Version 1.0.1 (stable)
Forced x86 (32 bits) build, in order to fix COM issues on mixed platforms
2016-03-08 Version 1.0.0 (stable)
Initial release version