[Spice-devel] SSL-problem occurs with Spice-glib on Arch linux (when connecting from Proxmox)

Mon Jun 26 07:53:52 UTC 2017

Hello,

On Sun, 2017-06-25 at 01:15 +0200, AmigAsger wrote:
> Dear Spice-Devel,
> 
> I have been investigating an SSL-issue, which all of a sudden
> occured on my Arch Linux distribution (when connecting to my proxmox
> virtualization center).
> 
> Something seems to break from spice-glib-0.33-3-x86_64.pkg.tar.xz
> to spice-glib-0.33-4-x86_64.pkg.tar.xz when using spice-gtk3-0.33-6.
> 
Then its your distro (packaging) related issue - we distribute only
0.33 tarball upstream.

> If I update to spice-glib-0.33-4 (or later) then I get the "Cannot
> connect to graphics server [path]" - and spice-debug gives following
> SSL-error:

Just a guess: Check your openssl library version. spice-gtk could be
compiled using different openssl version than the one in your system.

Pavel

> remote-viewer --spice-debug ~/Hentninger/download 
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:285 New session
> (compiled from package spice-gtk 0.33)
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:289 Supported
> channels: main, display, inputs, cursor, playback, record,
> smartcard, usbredir
> (remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:523 auto-
> connect filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:1736 no
> migration in progress
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:146 main-1:0:
> spice_channel_constructed
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:2239 main-1:0:
> new main channel, switching
> (remote-viewer:6416): GSpice-DEBUG: spice-gtk-session.c:1099
> Changing main channel from (nil) to 0x206e400
> (remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device
> added 05c6:9204 (0x1ec2490)
> (remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device
> added 17ef:4816 (0x2015fd0)
> (remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device
> added 0a5c:217f (0x1e6da70)
> (remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:1008 device
> added 147e:2016 (0x1f14590)
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2614 main-1:0:
> Open coroutine starting 0x206e400
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2455 main-1:0:
> Started background coroutine 0x206e290
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:2173 Missing
> port value, not attempting unencrypted connection.
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2481 main-1:0:
> trying with TLS port
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:2185 main-1:0:
> Using TLS, port 61000
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:2133 (with proxy
> http://10.0.10.10:3128)
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:2057 proxy
> lookup ready
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:2040 main-1:0:
> connecting 0x7f3bcebfcab0...
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:2024 main-1:0:
> connect ready
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2382 main-1:0:
> Load CA, file: (null), data: 0x204c030
> 
> (remote-viewer:6416): GSpice-WARNING **: main-1:0: SSL_connect:
> error:00000001:lib(0):func(0):reason(1)
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2591 main-1:0:
> Coroutine exit main-1:0
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2784 main-1:0:
> reset 
> (remote-viewer:6416): GSpice-DEBUG: channel-main.c:1537 agent
> connected: no
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2726 main-1:0:
> channel reset
> (remote-viewer:6416): GSpice-DEBUG: spice-channel.c:2337 main-1:0:
> Delayed unref channel 0x206e400
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:1930 session:
> disconnecting 0
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:285 New session
> (compiled from package spice-gtk 0.33)
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:289 Supported
> channels: main, display, inputs, cursor, playback, record,
> smartcard, usbredir
> (remote-viewer:6416): GSpice-DEBUG: usb-device-manager.c:523 auto-
> connect filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
> (remote-viewer:6416): GSpice-DEBUG: spice-session.c:1930 session:
> disconnecting 0
> 
> If I downgrade again to:
> spice-glib-0.33-3-x86_64.pkg.tar.xz  - then the problem dissappears.
> 
> Here is log from working library:
> 
> (remote-viewer:6511): GSpice-DEBUG: spice-session.c:2133 (with proxy
> http://10.0.10.10:3128)
> (remote-viewer:6511): GSpice-DEBUG: spice-session.c:2057 proxy
> lookup ready
> (remote-viewer:6511): GSpice-DEBUG: spice-session.c:2040 inputs-3:0: 
> connecting 0x7f4805ffcb40...
> (remote-viewer:6511): GSpice-DEBUG: spice-session.c:2057 proxy
> lookup ready
> (remote-viewer:6511): GSpice-DEBUG: spice-session.c:2040 cursor-4:0: 
> connecting 0x7f47e7ffeb40...
> (remote-viewer:6511): GSpice-DEBUG: spice-session.c:2024 inputs-3:0: 
> connect ready
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2379 inputs-3:0: 
> Load CA, file: (null), data: 0x13f9830
> (remote-viewer:6511): GSpice-DEBUG: spice-session.c:2024 cursor-4:0: 
> connect ready
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2379 cursor-4:0: 
> Load CA, file: (null), data: 0x13f9830
> (remote-viewer:6511): GSpice-DEBUG: channel-display.c:1656 primary
> flags: 1
> (remote-viewer:6511): GSpice-DEBUG: channel-display.c:793 display-
> 2:0: Create primary canvas
> (remote-viewer:6511): Spice-DEBUG: ssl_verify.c:400:verify_subject:
> subjects match
> (remote-viewer:6511): Spice-DEBUG: ssl_verify.c:400:verify_subject:
> subjects match
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1302 inputs-3:0: 
> channel type 3 id 0 num common caps 1 num caps 0
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1302 cursor-4:0: 
> channel type 4 id 0 num common caps 1 num caps 0
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:289 update
> monitor area 0:0
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:302 update
> monitor: no monitor 0
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1
> in 0x52: yes
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:305 waiting until
> MonitorsConfig is received
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1
> in 0x52: yes
> (remote-viewer:6511): GSpice-DEBUG: channel-display.c:1726 display-
> 2:0: received new monitors config from guest: n: 1/1
> (remote-viewer:6511): GSpice-DEBUG: channel-display.c:1746 display-
> 2:0: monitor id: 0, surface id: 0, +0+0-1366x768
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:289 update
> monitor area 0:0
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:2372 update area
> +0+0 1366x768
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:2398 primary:
> 1366x768
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1164 recalc geom
> monitor: 0:0, guest +0+0:1366x768, window 0x0, zoom 1
> (remote-viewer:6511): GSpice-DEBUG: channel-display.c:969 display-
> 2:0: display_handle_mark
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:2509 widget mark:
> 1, 0:0 0x15583a0
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1398 release_keys
> (remote-viewer:6511): GSpice-DEBUG: spice-gtk-session.c:200 inputs-
> 3:0: client_modifiers:0x0, guest_modifiers:0x0
> 
> (remote-viewer:6511): GSpice-WARNING **: Warning no automount-
> inhibiting implementation available
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1746
> focus_in_event
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1326 inputs-3:0: 
> Peer version: 2:2
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1855 inputs-3:0: 
> spice_channel_recv_link_msg: 2 caps
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1865 inputs-3:0: 
> got common caps 0:0xB
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1871 inputs-3:0: 
> got channel caps 0:0x1
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 0
> in 0xB: yes
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1
> in 0xB: yes
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 3
> in 0xB: yes
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1903 inputs-3:0: 
> use mini header: 1
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1326 cursor-4:0: 
> Peer version: 2:2
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1855 cursor-4:0: 
> spice_channel_recv_link_msg: 1 caps
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1865 cursor-4:0: 
> got common caps 0:0xB
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 0
> in 0xB: yes
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 1
> in 0xB: yes
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:2835 test cap 3
> in 0xB: yes
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1903 cursor-4:0: 
> use mini header: 1
> 
> (remote-viewer:6511): Gtk-WARNING **: Allocating size to
> SpiceDisplay 0x15583a0 without calling
> gtk_widget_get_preferred_width/height(). How does the code know the
> size to allocate?
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1164 recalc geom
> monitor: 0:0, guest +0+0:1366x768, window 1280x720, zoom 1
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:836 grab keyboard
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1235 inputs-3:0: 
> channel up, state 3
> (remote-viewer:6511): GSpice-DEBUG: spice-channel.c:1235 cursor-4:0: 
> channel up, state 3
> (remote-viewer:6511): GSpice-DEBUG: channel-cursor.c:308 cursor-4:0: 
> set_cursor: flags 1, size 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 8x21, id 0, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 17x21, id 1, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 19x25, id 2, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 17x23, id 3, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 18x27, id 4, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 18x40, id 5, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 16x25, id 6, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 17x37, id 7, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 19x30, id 8, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 26x44, id 9, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 22x34, id 10, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 34x60, id 11, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 25x39, id 12, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 48x107, id 13, ref 0
> (remote-viewer:6511): GSpice-DEBUG: channel-main.c:1118 main-1:0:
> sending new monitors config to guest
> (remote-viewer:6511): GSpice-DEBUG: channel-main.c:1135 main-1:0:
> monitor #0: 1280x723+0+0 @ 32 bpp
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 24x41, id 14, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 51x129, id 15, ref 0
> (remote-viewer:6511): GSpice-DEBUG: channel-main.c:2014
> main_agent_handle_msg: reply: type 2, success
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:864 ungrab
> keyboard
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 26x48, id 16, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:96
> glz_decoder_window_resize: array resize 16 -> 32
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 41x95, id 17, ref 0
> (remote-viewer:6511): GSpice-DEBUG: decode-glz.c:373 decode_header:
> 22x45, id 18, ref 0
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1783
> focus_out_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1398 release_keys
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1714 enter_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
> (remote-viewer:6511): GSpice-DEBUG: spice-widget.c:1729 leave_event
> (remote-viewer:6511): GSpice-DEBUG: spice-gtk-session.c:200 inputs-
> 3:0: client_modifiers:0x0, guest_modifiers:0x0
> 
> Sadly its hard for me to pinpoint the error more detailed. I hope
> the logs will make it possible to trace the bug - and get it solved
> in newer versions.
> -- 
> 
> Kind Regards
> Asger Stig Holten
> 
> Email: amigasger at gmail.com
> _______________________________________________
> Spice-devel mailing list
> Spice-devel at lists.freedesktop.org
> https://lists.freedesktop.org/mailman/listinfo/spice-devel