diff -up rdesktop-1.9.0/tcp.c.crypto rdesktop-1.9.0/tcp.c
--- rdesktop-1.9.0/tcp.c.crypto	2019-09-20 00:57:45.000000000 -0600
+++ rdesktop-1.9.0/tcp.c	2022-05-18 14:06:38.033248378 -0600
@@ -58,7 +58,7 @@
 /* Windows' self signed certificates omit the required Digital
    Signature key usage flag, and only %COMPAT makes GnuTLS ignore
    that violation. */
-#define GNUTLS_PRIORITY "NORMAL:%COMPAT"
+#define GNUTLS_PRIORITY "@SYSTEM:%COMPAT"
 
 #ifdef IPv6
 static struct addrinfo *g_server_address = NULL;