[Spice-devel] Spice-Client Windows + SSL Bug+fix ?

[thomast at cs.tu-berlin.de]

Hi,
I followed http://spice-space.org/page/SSLConnection and used --host-subject.

I use:
spicec -h 192.168.0.5 -s 5924 --host-subject
 C=DE,L=Berlin,O=MyTestingBench,CN=spiceserver

It Command runs with the Linuxclient without a Problem.
On Windows it crashes as I described it. When I remove the [0] from
(char*)&options.host_auth.host_pubkey[0] it works without an Problem.

Greetings
Thomas Tyminski
Berlin , Germany

> Hi,
> after quick look and user's perspective, Did you specify --host-subject on
> the client side?
> It would give you an error If you do not.
>
> ----- Original Message -----
>> From: thomast at cs.tu-berlin.de
>> To: spice-devel at lists.freedesktop.org
>> Sent: Tuesday, June 21, 2011 12:50:04 PM
>> Subject: [Spice-devel] Spice-Client Windows + SSL Bug+fix ?
>> Hi,
>> I tried to use SSL with the Windowsclient.
>>
>> When I use the old one (from
>> http://spice-space.org/download/binaries/spice-client-win32-0.6.3.zip):
>>
>> 1308268882 INFO [11344:8892] Platform::set_clipboard_owner: new
>> clipboard
>> owner: none
>> 1308268882 INFO [11344:8892] PlatformWinProc: Unsupported clipboard
>> format
>> 1308268882 INFO [11344:8892] Application::main: starting 0.5.0.0
>> 1308268882 INFO [11344:8892] GUI::GUI:
>> 1308268883 INFO [11344:8892] ForeignMenu::ForeignMenu: Creating a
>> foreign
>> menu connection SpiceForeignMenu-11344
>> 1308268883 INFO [11344:10072] RedPeer::connect_unsecure: Trying
>> 192.169.0.5 5924
>> 1308268883 INFO [11344:10072] RedPeer::connect_unsecure: Connected to
>> 192.169.0.5 5924
>> 1308268884 WARN [11344:10072] RedPeer::connect_secure: failed to
>> connect
>> w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1)
>> 1308268884 WARN [11344:10072] RedChannel::run: SSL Error:
>> 1308268884 INFO [11344:8892] WinMain: Spice client terminated
>> (exitcode = 7)
>>
>> in the spicec.log.
>>
>> The Server says:
>> reds_handle_ssl_accept: SSL_accept failed, error=1
>>
>> So I tried to compile it by myself.
>> Spice 0.8.1 won't compile but the current master branch.
>>
>> Debug spicec.exe gives me an Assertion Runtimeerror:
>> "vector subscript out of range".
>>
>> Server says on that:
>> reds_handle_ssl_accept: SSL_accept failed, error=5
>>
>> The Runtimeerror is triggered inside the Methode "connect_secure" of
>> the
>> class "RedPeer".
>> Concretely Line 184 fw.
>> "verify = spice_openssl_verify_new(
>> _ssl, auth_flags,
>> host,
>> (char*)&options.host_auth.host_pubkey[0],
>> options.host_auth.host_pubkey.size(),
>> options.host_auth.host_subject.c_str());"
>> seems to be the Problem.
>> Changing Line 187 to
>> "(char*)&options.host_auth.host_pubkey" fixes that Problem and I can
>> run
>> the Client with SSL.
>>
>> Btw. the variable vertify is never used (expect of freeing it) and
>> options.host_auth.host_pubkey is empty/NULL, shouldn't it contain the
>> data
>> from spice_truststore.pem)?
>>
>> Greetings
>> Thomas Tyminski
>> Berlin , Germany
>>
>> =================
>> P.S:
>> If you already received this E-Mail, I am sorry for that.
>>
>> _______________________________________________
>> Spice-devel mailing list
>> Spice-devel at lists.freedesktop.org
>> http://lists.freedesktop.org/mailman/listinfo/spice-devel
>