[Spice-devel] [Users] Unable to establish spice session

[Itamar Heim]

On 11/07/2012 01:37 AM, Alex Leonhardt wrote:
> I think this post I just found is related to my issue :
>
> http://www.mail-archive.com/users@ovirt.org/msg03010.html
>
> at the bottom it explains how changing the "display network" can break
> spice ...

you can tell the spice client the subject of the certificate to expect, 
regardless of the ip you are connecting to.

>
> i'll try the removal of the host and re-adding (hopefully my VMs are safe!)
>
> Alex
>
> On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
>> Yep, found it - and it's related to this site / update to spice here :
>>
>> http://spice-space.org/page/SSLConnection
>>
>> but now i get :
>>
>> $ spicec -h 192.168.1.21 -s 5901
>> Error: failed to connect w/SSL, ssl_error
>> error:00000001:lib(0):func(0):reason(1)
>> 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong
>> version number:s3_pkt.c:338:
>> Warning: SSL Error:
>>
>> I belive that's got something to do with trying to use ssl3 (as the ca
>> cert is ssl v3) instead of ssl v2 ...
>>
>> Alex
>>
>>
>> On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
>>> ----- Original Message -----
>>>> From: "Alex Leonhardt"<alex.tuxx at gmail.com>
>>>> To: "Alon Levy"<alevy at redhat.com>
>>>> Cc:spice-devel at lists.freedesktop.org,users at ovirt.org
>>>> Sent: Wednesday, November 7, 2012 1:35:09 AM
>>>> Subject: Re: [Users] [Spice-devel]  Unable to establish spice session
>>>>
>>>>
>>>> This is what i receive when trying to launch it manually :
>>>>
>>>> $ spicec -h 192.168.1.21 -p 5901 -s 5901
>>>>
>>>> Error: SSL_CTX_load_verify_locations failed
>>>> CA_file=/home/user/.spicec/spice_truststore.pem
>>>> 140141786060104:error:02001002:system library:fopen:No such file or
>>>> directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r')
>>>> 140141786060104:error:2006D080:BIO routines:BIO_new_file:no  such
>>>> file:bss_file.c:129  :
>>>> 140141786060104:error:0B084002:x509 certificate
>>>> routines:X509_load_cert_crl_file:system  lib:by_file.c:279:
>>>> Warning: SSL Error:
>>>>
>>>> Alex
>>>>
>>> You need --ca-file parameter.
>>> Download the certificate usinghttp://engine/ca.crt
>>>
>>> Alon
>
>
> _______________________________________________
> Users mailing list
> Users at ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>