David, Thanks for the reply. I've tried adding --ca-file to the spicec command line but still receive the same error. Here is the command: spicec -h localhost -p $PORT -s $SPORT --secure-channels all --host-subject "$HOSTSUBJECT" --ca-file ca-cert.pem -w $PASSWD Same error: Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) 140613653984512:error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed:s3_clnt.c:1063: Warning: SSL Error: <div class="gmail_quote">On Fri, Mar 23, 2012 at 6:06 AM, David Jaša <<a href="mailto:djasa@redhat.com">djasa@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> Hi Anthony, Anthony James píše v Čt 22. 03. 2012 v 15:40 -0400: <div class="im">> I'm having problems connecting to a spice virtual machine using SSL. > I use the following command to connect: > > > spicec -h localhost -p $PORT -s $SPORT --secure-channels all > --host-subject "$HOSTSUBJECT" -w $PASSWD > </div>You're missing --ca-file $CA_CERTIFICATE_FILE in your command line. David <div class="im HOEnZb">> > The error I receive is: > > > Error: failed to connect w/SSL, ssl_error > error:00000001:lib(0):func(0):reason(1) > 139699632096512:error:14090086:SSL > routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify > failed:s3_clnt.c:1063: > Warning: SSL Error: > > > I have followed the instructions from the following 2 sites to > configure the SSL certs: > > > <a href="http://www.spice-space.org/page/SSLConnection" target="_blank">http://www.spice-space.org/page/SSLConnection</a> > > > <a href="http://fedoraproject.org/w/index.php?title=QA:Testcase_Virtualization_Manually_set_spice_listening_port_with_TLS_port_set&oldid=255162" target="_blank">http://fedoraproject.org/w/index.php?title=QA:Testcase_Virtualization_Manually_set_spice_listening_port_with_TLS_port_set&oldid=255162</a> > > > Any help would be greatly appreciated, I'm sure I'm missing something. > > > Thanks, > Tony </div><div class="HOEnZb"><div class="h5">> _______________________________________________ > Spice-devel mailing list > <a href="mailto:Spice-devel@lists.freedesktop.org">Spice-devel@lists.freedesktop.org</a> > <a href="http://lists.freedesktop.org/mailman/listinfo/spice-devel" target="_blank">http://lists.freedesktop.org/mailman/listinfo/spice-devel</a> </div></div>-- David Jaša, RHCE SPICE QE based in Brno GPG Key: 22C33E24 Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24 </blockquote></div>