On 11/07/2012 01:37 AM, Alex Leonhardt wrote:
I think this post I just found is related to my issue :
http://www.mail-archive.com/users@xxxxxxxxx/msg03010.html
at the bottom it explains how changing the "display network" can break
spice ...
you can tell the spice client the subject of the certificate to expect,
regardless of the ip you are connecting to.
i'll try the removal of the host and re-adding (hopefully my VMs are safe!)
Alex
On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
Yep, found it - and it's related to this site / update to spice here :
http://spice-space.org/page/SSLConnection
but now i get :
$ spicec -h 192.168.1.21 -s 5901
Error: failed to connect w/SSL, ssl_error
error:00000001:lib(0):func(0):reason(1)
140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong
version number:s3_pkt.c:338:
Warning: SSL Error:
I belive that's got something to do with trying to use ssl3 (as the ca
cert is ssl v3) instead of ssl v2 ...
Alex
On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
----- Original Message -----
From: "Alex Leonhardt"<alex.tuxx@xxxxxxxxx>
To: "Alon Levy"<alevy@xxxxxxxxxx>
Cc:spice-devel@xxxxxxxxxxxxxxxxxxxxx,users@xxxxxxxxx
Sent: Wednesday, November 7, 2012 1:35:09 AM
Subject: Re: [Users] Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed
CA_file=/home/user/.spicec/spice_truststore.pem
140141786060104:error:02001002:system library:fopen:No such file or
directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r')
140141786060104:error:2006D080:BIO routines:BIO_new_file:no such
file:bss_file.c:129 :
140141786060104:error:0B084002:x509 certificate
routines:X509_load_cert_crl_file:system lib:by_file.c:279:
Warning: SSL Error:
Alex
You need --ca-file parameter.
Download the certificate usinghttp://engine/ca.crt
Alon
_______________________________________________
Users mailing list
Users@xxxxxxxxx
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Spice-devel mailing list
Spice-devel@xxxxxxxxxxxxxxxxxxxxx
http://lists.freedesktop.org/mailman/listinfo/spice-devel