{"action":"created","issue":{"url":"https://api.github.com/repos/FreeRDP/FreeRDP/issues/3199","repository_url":"https://api.github.com/repos/FreeRDP/FreeRDP","labels_url":"https://api.github.com/repos/FreeRDP/FreeRDP/issues/3199/labels{/name}","comments_url":"https://api.github.com/repos/FreeRDP/FreeRDP/issues/3199/comments","events_url":"https://api.github.com/repos/FreeRDP/FreeRDP/issues/3199/events","html_url":"https://github.com/FreeRDP/FreeRDP/issues/3199","id":138475057,"number":3199,"title":"/cert-ignore is not applied when using rdp file with authentication level set","user":{"login":"HenryJacques","id":11716929,"avatar_url":"https://avatars.githubusercontent.com/u/11716929?v=3","gravatar_id":"","url":"https://api.github.com/users/HenryJacques","html_url":"https://github.com/HenryJacques","followers_url":"https://api.github.com/users/HenryJacques/followers","following_url":"https://api.github.com/users/HenryJacques/following{/other_user}","gists_url":"https://api.github.com/users/HenryJacques/gists{/gist_id}","starred_url":"https://api.github.com/users/HenryJacques/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/HenryJacques/subscriptions","organizations_url":"https://api.github.com/users/HenryJacques/orgs","repos_url":"https://api.github.com/users/HenryJacques/repos","events_url":"https://api.github.com/users/HenryJacques/events{/privacy}","received_events_url":"https://api.github.com/users/HenryJacques/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-03-04T13:21:03Z","updated_at":"2016-03-07T08:18:06Z","closed_at":null,"body":"Hello,\r\n\r\nWith latest master, this is what I get using xfreerdp and a rdp file to connect to a Windows 2012-R2 RDS farm:\r\n\r\nthe culprit is the `authentication level:i:2` in the rdp file.\r\nIf set to 1 or 2, it fails with the following error.\r\nIf set to 0, there is no error.\r\n\r\nBut I have set /cert-ignore in my command line, which is ignored.\r\n\r\n> echo 'password' | xfreerdp file.rdp -toggle-fullscreen /cert-ignore +compression /compression-level:2 +heartbeat /d:DOM /u:user /f /sec:nla /from-stdin /kbd:french +auto-reconnect /client-hostname:myhost +multitouch /sound:sys:pulse,quality:high,rate:44100 /sound:latency:50 +async-update +async-transport\r\n[14:14:07:962] [20529:20530] [INFO][com.freerdp.client.common.cmdline] - loading channel rdpdr\r\n[14:14:07:963] [20529:20530] [INFO][com.freerdp.client.common.cmdline] - loading channel rdpsnd\r\n[14:14:07:963] [20529:20530] [WARN][com.freerdp.core.client] - Skipping, channel already loaded\r\n[14:14:07:964] [20529:20530] [INFO][com.freerdp.client.common.cmdline] - loading channel rdpsnd\r\n[14:14:07:965] [20529:20530] [INFO][com.freerdp.client.common.cmdline] - loading channel cliprdr\r\n[14:14:07:965] [20529:20530] [INFO][com.freerdp.client.common.cmdline] - loading channel drdynvc\r\nCertificate details:\r\n        Subject: C = FR, O = MYO, OU = MYOU, CN = BROKER.DOM, emailAddress = certificats@dom.fr\r\n        Issuer: C = FR, O = MYO, OU = MYOU, CN = BROKER.DOM, emailAddress = certificats@dom.fr\r\n        Thumbprint: 67:3e:4e:6b:dc:45:2c:1e:f5:78:16:17:eb:5b:65:9a:ad:61:c6:39\r\nThe above X.509 certificate could not be verified, possibly because you do not have\r\nthe CA certificate in your certificate store, or the certificate has expired.\r\nPlease look at the documentation on how to create local certificate store for a private CA.\r\n[14:14:07:017] [20529:20530] [ERROR][com.freerdp.crypto] - certificate not trusted, aborting.\r\n[14:14:07:017] [20529:20530] [ERROR][com.freerdp.core] - freerdp_set_last_error ERRCONNECT_CONNECT_CANCELLED [0x2000B]\r\n[14:14:07:017] [20529:20530] [ERROR][com.freerdp.core.connection] - Error: protocol security negotiation or connection failure\r\n[14:14:07:017] [20529:20530] [ERROR][com.freerdp.client.x11] - Freerdp connect error exit status 1\r\n"},"comment":{"url":"https://api.github.com/repos/FreeRDP/FreeRDP/issues/comments/193149208","html_url":"https://github.com/FreeRDP/FreeRDP/issues/3199#issuecomment-193149208","issue_url":"https://api.github.com/repos/FreeRDP/FreeRDP/issues/3199","id":193149208,"user":{"login":"akallabeth","id":3472254,"avatar_url":"https://avatars.githubusercontent.com/u/3472254?v=3","gravatar_id":"","url":"https://api.github.com/users/akallabeth","html_url":"https://github.com/akallabeth","followers_url":"https://api.github.com/users/akallabeth/followers","following_url":"https://api.github.com/users/akallabeth/following{/other_user}","gists_url":"https://api.github.com/users/akallabeth/gists{/gist_id}","starred_url":"https://api.github.com/users/akallabeth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/akallabeth/subscriptions","organizations_url":"https://api.github.com/users/akallabeth/orgs","repos_url":"https://api.github.com/users/akallabeth/repos","events_url":"https://api.github.com/users/akallabeth/events{/privacy}","received_events_url":"https://api.github.com/users/akallabeth/received_events","type":"User","site_admin":false},"created_at":"2016-03-07T08:18:05Z","updated_at":"2016-03-07T08:18:05Z","body":"@HenryJacques ```authentication level``` and ```/cert-ignore``` are mutually exclusive. The ```/cert-ignore``` is set but later overwritten by the ```authentication level``` from the RDP file."}}