<html>
<head>
<base href="https://bugs.freedesktop.org/">
</head>
<body><span class="vcard"><a class="email" href="mailto:teuf@gnome.org" title="Christophe Fergeau <teuf@gnome.org>"> <span class="fn">Christophe Fergeau</span></a>
</span> changed
<a class="bz_bug_link
bz_status_NEW "
title="NEW - specifying --spice-ca-file yields Load CA, file: (null)"
href="https://bugs.freedesktop.org/show_bug.cgi?id=106764">bug 106764</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>teuf@gnome.org
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - specifying --spice-ca-file yields Load CA, file: (null)"
href="https://bugs.freedesktop.org/show_bug.cgi?id=106764#c2">Comment # 2</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - specifying --spice-ca-file yields Load CA, file: (null)"
href="https://bugs.freedesktop.org/show_bug.cgi?id=106764">bug 106764</a>
from <span class="vcard"><a class="email" href="mailto:teuf@gnome.org" title="Christophe Fergeau <teuf@gnome.org>"> <span class="fn">Christophe Fergeau</span></a>
</span></b>
<pre>(In reply to Shem Pasamba from <a href="show_bug.cgi?id=106764#c0">comment #0</a>)
<span class="quote">> Hello,
>
> I'm trying to connect to Proxmox spice server and it doesn't work so I'm
> trying: remote-viewer --spice-ca-file /etc/ssl/certs/ca-certificates.crt
> --spice-debug ~/Downloads/spiceproxy
>
> But the output says:
>
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.476: spice-session.c:2064
> proxy lookup ready
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.476: spice-session.c:2047
> main-1:0: connecting 0x7eff411e7a70...
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.479: spice-session.c:2031
> main-1:0: connect ready
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.480: spice-channel.c:2451
> main-1:0: Load CA, file: (null), data: 0x55c9448b9000
>
> (remote-viewer:24345): GSpice-WARNING **: 09:19:59.481: main-1:0:
> SSL_connect: error:00000001:lib(0):func(0):reason(1)
> As you can see the SSL_connect files, and I'm guessing, because the CAFile
> is empty?</span >
When using a .vv file (~/Downloads/spiceproxy) together with --spice-ca-file,
the CA specified in the 'spiceproxy' file will take precedence over the one you
specified on the command line, that's why you are getting CAFile(null).
However, you should not be getting a file with an invalid CA from proxmox.
Maybe it's misconfigured? There is this bug opened
<a class="bz_bug_link
bz_status_NEW "
title="NEW - spice-gtk / remote-viewer SSL verification behavior"
href="show_bug.cgi?id=94063">https://bugs.freedesktop.org/show_bug.cgi?id=94063</a> but the error message is
different, so probably not the same one.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>