From 222ff42e02ffcc32b677ee4e948618e026af952d Mon Sep 17 00:00:00 2001
From: Armin Novak <armin.novak@thincast.com>
Date: Wed, 24 Sep 2025 11:33:49 +0200
Subject: [PATCH] [gateway,arm] do not use RDSTLS if AAD is enabled

---
 libfreerdp/core/gateway/arm.c | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/libfreerdp/core/gateway/arm.c b/libfreerdp/core/gateway/arm.c
index fda4671ee..69f0548dd 100644
--- a/libfreerdp/core/gateway/arm.c
+++ b/libfreerdp/core/gateway/arm.c
@@ -983,7 +983,10 @@ static BOOL arm_fill_gateway_parameters(rdpArm* arm, const char* message, size_t
 			goto fail;
 	}
 
-	status = arm_fill_rdstls(arm, settings, json, redirectedServerCert);
+	if (freerdp_settings_get_bool(settings, FreeRDP_AadSecurity))
+		status = TRUE;
+	else
+		status = arm_fill_rdstls(arm, settings, json, redirectedServerCert);
 
 fail:
 	WINPR_JSON_Delete(json);