[Spice-devel] SSL-problem occurs with Spice-glib on Arch linux (when connecting from Proxmox)

Sat Jun 24 23:15:01 UTC 2017

Dear Spice-Devel,

I have been investigating an SSL-issue, which all of a sudden occured on my
Arch Linux distribution (when connecting to my proxmox virtualization
center).

Something seems to break from spice-glib-0.33-3-x86_64.pkg.tar.xz
to spice-glib-0.33-4-x86_64.pkg.tar.xz when using spice-gtk3-0.33-6.

If I update to spice-glib-0.33-4 (or later) then I get the "Cannot connect
to graphics server [path]" - and spice-debug gives following SSL-error:

remote-viewer --spice-debug ~/Hentninger/download
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:285 New session
(compiled from package spice-gtk 0.33)
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:289 Supported channels:
main, display, inputs, cursor, playback, record, smartcard, usbredir
(remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:523 auto-connect
filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:1736 no migration in
progress
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:146 main-1:0:
spice_channel_constructed
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:2239 main-1:0: new main
channel, switching
(remote-viewer:6416): GSpice-DEBUG: spice-gtk-session.c:1099 Changing main
channel from (nil) to 0x206e400
(remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device added
05c6:9204 (0x1ec2490)
(remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device added
17ef:4816 (0x2015fd0)
(remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device added
0a5c:217f (0x1e6da70)
(remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device added
147e:2016 (0x1f14590)
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2614 main-1:0: Open
coroutine starting 0x206e400
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2455 main-1:0: Started
background coroutine 0x206e290
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:2173 Missing port
value, not attempting unencrypted connection.
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2481 main-1:0: trying
with TLS port
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:2185 main-1:0: Using
TLS, port 61000
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:2133 (with proxy
http://10.0.10.10:3128)
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:2057 proxy lookup ready
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:2040 main-1:0:
connecting 0x7f3bcebfcab0...
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:2024 main-1:0: connect
ready
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2382 main-1:0: Load CA,
file: (null), data: 0x204c030

(remote-viewer:6416): GSpice-WARNING **: main-1:0: SSL_connect:
error:00000001:lib(0):func(0):reason(1)
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2591 main-1:0:
Coroutine exit main-1:0
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2784 main-1:0: reset
(remote-viewer:6416): GSpice-DEBUG: channel-main.c:1537 agent connected: no
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2726 main-1:0: channel
reset
(remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2337 main-1:0: Delayed
unref channel 0x206e400
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:1930 session:
disconnecting 0
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:285 New session
(compiled from package spice-gtk 0.33)
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:289 Supported channels:
main, display, inputs, cursor, playback, record, smartcard, usbredir
(remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:523 auto-connect
filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
(remote-viewer:6416): GSpice-DEBUG: spice-session.c:1930 session:
disconnecting 0

If I downgrade again to:
spice-glib-0.33-3-x86_64.pkg.tar.xz  - then the problem dissappears.

Here is log from working library:

(remote-viewer:6511): GSpice-DEBUG: spice-session.c:2133 (with proxy
http://10.0.10.10:3128)
(remote-viewer:6511): GSpice-DEBUG: spice-session.c:2057 proxy lookup ready
(remote-viewer:6511): GSpice-DEBUG: spice-session.c:2040 inputs-3:0:
connecting 0x7f4805ffcb40...
(remote-viewer:6511): GSpice-DEBUG: spice-session.c:2057 proxy lookup ready
(remote-viewer:6511): GSpice-DEBUG: spice-session.c:2040 cursor-4:0:
connecting 0x7f47e7ffeb40...
(remote-viewer:6511): GSpice-DEBUG: spice-session.c:2024 inputs-3:0:
connect ready
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2379 inputs-3:0: Load
CA, file: (null), data: 0x13f9830
(remote-viewer:6511): GSpice-DEBUG: spice-session.c:2024 cursor-4:0:
connect ready
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2379 cursor-4:0: Load
CA, file: (null), data: 0x13f9830
(remote-viewer:6511): GSpice-DEBUG: channel-display.c:1656 primary flags: 1
(remote-viewer:6511): GSpice-DEBUG: channel-display.c:793 display-2:0:
Create primary canvas
(remote-viewer:6511): Spice-DEBUG: ssl_verify.c:400:verify_subject:
subjects match
(remote-viewer:6511): Spice-DEBUG: ssl_verify.c:400:verify_subject:
subjects match
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1302 inputs-3:0:
channel type 3 id 0 num common caps 1 num caps 0
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1302 cursor-4:0:
channel type 4 id 0 num common caps 1 num caps 0
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:289 update monitor area
0:0
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:302 update monitor: no
monitor 0
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1 in
0x52: yes
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:305 waiting until
MonitorsConfig is received
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1 in
0x52: yes
(remote-viewer:6511): GSpice-DEBUG: channel-display.c:1726 display-2:0:
received new monitors config from guest: n: 1/1
(remote-viewer:6511): GSpice-DEBUG: channel-display.c:1746 display-2:0:
monitor id: 0, surface id: 0, +0+0-1366x768
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:289 update monitor area
0:0
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:2372 update area +0+0
1366x768
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:2398 primary: 1366x768
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1164 recalc geom
monitor: 0:0, guest +0+0:1366x768, window 0x0, zoom 1
(remote-viewer:6511): GSpice-DEBUG: channel-display.c:969 display-2:0:
display_handle_mark
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:2509 widget mark: 1, 0:0
0x15583a0
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1398 release_keys
(remote-viewer:6511): GSpice-DEBUG: spice-gtk-session.c:200 inputs-3:0:
client_modifiers:0x0, guest_modifiers:0x0

(remote-viewer:6511): GSpice-WARNING **: Warning no automount-inhibiting
implementation available
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746 focus_in_event
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1326 inputs-3:0: Peer
version: 2:2
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1855 inputs-3:0:
spice_channel_recv_link_msg: 2 caps
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1865 inputs-3:0: got
common caps 0:0xB
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1871 inputs-3:0: got
channel caps 0:0x1
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 0 in 0xB:
yes
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1 in 0xB:
yes
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 3 in 0xB:
yes
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1903 inputs-3:0: use
mini header: 1
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1326 cursor-4:0: Peer
version: 2:2
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1855 cursor-4:0:
spice_channel_recv_link_msg: 1 caps
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1865 cursor-4:0: got
common caps 0:0xB
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 0 in 0xB:
yes
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1 in 0xB:
yes
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 3 in 0xB:
yes
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1903 cursor-4:0: use
mini header: 1

(remote-viewer:6511): Gtk-WARNING **: Allocating size to SpiceDisplay
0x15583a0 without calling gtk_widget_get_preferred_width/height(). How does
the code know the size to allocate?
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1164 recalc geom
monitor: 0:0, guest +0+0:1366x768, window 1280x720, zoom 1
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:836 grab keyboard
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1235 inputs-3:0:
channel up, state 3
(remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1235 cursor-4:0:
channel up, state 3
(remote-viewer:6511): GSpice-DEBUG: channel-cursor.c:308 cursor-4:0:
set_cursor: flags 1, size 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 8x21,
id 0, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 17x21,
id 1, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 19x25,
id 2, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 17x23,
id 3, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 18x27,
id 4, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 18x40,
id 5, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 16x25,
id 6, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 17x37,
id 7, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 19x30,
id 8, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 26x44,
id 9, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 22x34,
id 10, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 34x60,
id 11, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 25x39,
id 12, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 48x107,
id 13, ref 0
(remote-viewer:6511): GSpice-DEBUG: channel-main.c:1118 main-1:0: sending
new monitors config to guest
(remote-viewer:6511): GSpice-DEBUG: channel-main.c:1135 main-1:0: monitor
#0: 1280x723+0+0 @ 32 bpp
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 24x41,
id 14, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 51x129,
id 15, ref 0
(remote-viewer:6511): GSpice-DEBUG: channel-main.c:2014
main_agent_handle_msg: reply: type 2, success
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:864 ungrab keyboard
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 26x48,
id 16, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:96
glz_decoder_window_resize: array resize 16 -> 32
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 41x95,
id 17, ref 0
(remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header: 22x45,
id 18, ref 0
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1783 focus_out_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1398 release_keys
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
(remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
(remote-viewer:6511): GSpice-DEBUG: spice-gtk-session.c:200 inputs-3:0:
client_modifiers:0x0, guest_modifiers:0x0

Sadly its hard for me to pinpoint the error more detailed. I hope the logs
will make it possible to trace the bug - and get it solved in newer
versions.
-- 

Kind Regards
*Asger Stig Holten*

Email: amigasger at gmail.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/spice-devel/attachments/20170625/dfa2f61a/attachment.html>