TWS custom tls certificated

[gnzsnz]

I will show the steps to pass a custom certificates to the tws-rdesktop container. This will avoid the creation of new certificates every time the container is created. Depending on your RDP client, you will see a warning

The solution is to pass a custom certificate as a mount. Create certificate following this steps

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 \
-keyout key.pem \
-out cert.pem \
-subj "/C=US/ST=CA/L=Carlsbad/O=Linuxserver.io/OU=LSIO Server/CN=*"

touch keylock

Mount certificates in container

...
volumes:
  - ./config:/config # optional
  - ${PWD}/keylock:/keylock # required to avoid key generation by container
  - ${PWD/key.pem:/etc/xrdp/key.pem # key
  - ${PWD}/cert.pem:/etc/xrdp/cert.pem # cert
...