[Spice-devel] Help with TLS and SPICE client

[Alon Levy]

On Thu, Sep 22, 2011 at 07:40:11PM +0000, Kirkpatrick, Jeffrey W wrote:

Thanks for the detailed report, notes below.

[snip]
> spicec -h IPADDRESS_OF_KVM_HOST -p 5901 -s 5902 --ca-file .\spice_truststore.pem --secure-channels all --host-subject "C=TX, L=Dallas, O=Bofa, CN=KVMhostname.bankofamerica.com"
> 

Well, I think the problem is from the ugly way that spicec expects the subject host to be handed to it - without any spaces after the commmas. So try:
 -host-subject "C=TX,L=Dallas,O=Bofa,CN=KVMhostname.bankofamerica.com"

FWIW my own script for the same reads:
 host_subject = ','.join(os.popen('openssl x509 -noout -text -in server-cert.pem | grep Subject: | cut -f 10- -d " "').read().strip().split(', '))