From jeff at mayesnetwork.com Thu Sep 27 11:25:15 2012 Content-Type: multipart/mixed; boundary="===============6226744885284588705==" MIME-Version: 1.0 From: Jeff Mayes To: users at ovirt.org Subject: [Users] Cannot connect to guest with spice console; SSL validate error Date: Thu, 27 Sep 2012 08:24:53 -0700 Message-ID: --===============6226744885284588705== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable I did not see a solution for this issue, yet spent a couple of hours on it. In my case, the following command cleared the issue for all VMs: iptables --flush After that, no more SSL errors and I could connect via Spice. Jeff ----- Jeff Mayes --===============6226744885284588705== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" SSBkaWQgbm90IHNlZSBhIHNvbHV0aW9uIGZvciB0aGlzIGlzc3VlLCB5ZXQgc3BlbnQgYSBjb3Vw bGUgb2YgaG91cnMgb24gCml0LqAgSW4gbXkgY2FzZSwgdGhlIGZvbGxvd2luZyBjb21tYW5kIGNs ZWFyZWQgdGhlIGlzc3VlIGZvciBhbGwgVk1zOjxicj48YnI+aXB0YWJsZXMgLS1mbHVzaDxicj48 YnI+QWZ0ZXIgdGhhdCwgbm8gbW9yZSBTU0wgZXJyb3JzIGFuZCBJIGNvdWxkIGNvbm5lY3Qgdmlh IFNwaWNlLjxicj4KCjxicj5KZWZmPGJyIGNsZWFyPSJhbGwiPjxicj4tLS0tLTxicj5KZWZmIE1h eWVzPGJyPjxicj48YnI+Cg== --===============6226744885284588705==-- From cybertimber2000 at hotmail.com Thu Sep 27 11:51:43 2012 Content-Type: multipart/mixed; boundary="===============5243850690357860370==" MIME-Version: 1.0 From: Nicholas Kesick To: users at ovirt.org Subject: Re: [Users] Cannot connect to guest with spice console; SSL validate error Date: Thu, 27 Sep 2012 11:51:42 -0400 Message-ID: In-Reply-To: CAC4aQSmCZk3docdp7kU1z3jWUiVzKEHCGA4L_Z3fRa4o5ZeYhg@mail.gmail.com --===============5243850690357860370== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable --_ce2be967-1938-44a9-bd22-a161160955c8_ Content-Type: text/plain; charset=3D"iso-8859-1" Content-Transfer-Encoding: quoted-printable > From: jeff(a)mayesnetwork.com > Date: Thu=3D2C 27 Sep 2012 08:24:53 -0700 > To: users(a)ovirt.org > Subject: [Users] Cannot connect to guest with spice console=3D3B SSL val= id=3D ate error > I did not see a solution for this issue=3D2C yet spent a couple of hours = on=3D =3D0A=3D it. In my case=3D2C the following command cleared the issue for all VMs: > iptables --flush That seems like a very bad solution. iptables --flush removes all of the fi= =3D rewall rules=3D2C leaving your VM unprotected. I'm curious to know which rule was blocking it though. > After that=3D2C no more SSL errors and I could connect via Spice. =3D0A=3D =3D0A=3D > Jeff > ----- > Jeff Mayes =3D0A=3D _______________________________________________=3D0A=3D Users mailing list=3D0A=3D Users(a)ovirt.org=3D0A=3D http://lists.ovirt.org/mailman/listinfo/users =3D --_ce2be967-1938-44a9-bd22-a161160955c8_ Content-Type: text/html; charset=3D"iso-8859-1" Content-Transfer-Encoding: quoted-printable
>=3D3B From: jeff(a)mayesn= etwork.c=3D om
>=3D3B Date: Thu=3D2C 27 Sep 2012 08:24:53 -0700
>=3D3B T= o: use=3D rs(a)ovirt.org
>=3D3B Subject: [Users] Cannot connect to guest with s= pice=3D console=3D3B SSL validate error

>=3D3B I did not see a solution f= or t=3D his issue=3D2C yet spent a couple of hours on =3D0A=3D it. =3D3B In my case=3D2C the following command cleared the issue for a= ll V=3D Ms:

>=3D3B iptables --flush

That seems like a very bad solu= ti=3D on. iptables --flush removes all of the firewall rules=3D2C leaving your VM= u=3D nprotected.
I'm curious to know which rule was blocking it though.
>=3D3B After that=3D2C no more SSL errors and I could connect via Spice= .=3D0A=3D =3D0A=3D
>=3D3B Jeff

>=3D3B -----
>=3D3B Jeff Ma= yes
<=3D br>
=3D0A=3D
_______________________________________________=3D0A=3D Users mailing list=3D0A=3D Users(a)ovirt.org=3D0A=3D http://lists.ovirt.org/mailman/listinfo/users
=3D --_ce2be967-1938-44a9-bd22-a161160955c8_-- --===============5243850690357860370== Content-Type: multipart/alternative MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.bin" LS1fY2UyYmU5NjctMTkzOC00NGE5LWJkMjItYTE2MTE2MDk1NWM4XwpDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9Imlzby04ODU5LTEiCkNvbnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6 IHF1b3RlZC1wcmludGFibGUKCj4gRnJvbTogamVmZkBtYXllc25ldHdvcmsuY29tCj4gRGF0ZTog VGh1PTJDIDI3IFNlcCAyMDEyIDA4OjI0OjUzIC0wNzAwCj4gVG86IHVzZXJzQG92aXJ0Lm9yZwo+ IFN1YmplY3Q6IFtVc2Vyc10gIENhbm5vdCBjb25uZWN0IHRvIGd1ZXN0IHdpdGggc3BpY2UgY29u c29sZT0zQglTU0wgdmFsaWQ9CmF0ZSBlcnJvcgoKPiBJIGRpZCBub3Qgc2VlIGEgc29sdXRpb24g Zm9yIHRoaXMgaXNzdWU9MkMgeWV0IHNwZW50IGEgY291cGxlIG9mIGhvdXJzIG9uPQogPTBBPQpp dC4gIEluIG15IGNhc2U9MkMgdGhlIGZvbGxvd2luZyBjb21tYW5kIGNsZWFyZWQgdGhlIGlzc3Vl IGZvciBhbGwgVk1zOgoKPiBpcHRhYmxlcyAtLWZsdXNoCgpUaGF0IHNlZW1zIGxpa2UgYSB2ZXJ5 IGJhZCBzb2x1dGlvbi4gaXB0YWJsZXMgLS1mbHVzaCByZW1vdmVzIGFsbCBvZiB0aGUgZmk9CnJl d2FsbCBydWxlcz0yQyBsZWF2aW5nIHlvdXIgVk0gdW5wcm90ZWN0ZWQuCkknbSBjdXJpb3VzIHRv IGtub3cgd2hpY2ggcnVsZSB3YXMgYmxvY2tpbmcgaXQgdGhvdWdoLgoKPiBBZnRlciB0aGF0PTJD IG5vIG1vcmUgU1NMIGVycm9ycyBhbmQgSSBjb3VsZCBjb25uZWN0IHZpYSBTcGljZS4KPTBBPQo9 MEE9Cgo+IEplZmYKPiAtLS0tLQo+IEplZmYgTWF5ZXMKCgo9MEE9CgpfX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXz0wQT0KVXNlcnMgbWFpbGluZyBsaXN0PTBB PQpVc2Vyc0BvdmlydC5vcmc9MEE9Cmh0dHA6Ly9saXN0cy5vdmlydC5vcmcvbWFpbG1hbi9saXN0 aW5mby91c2VycyAJCSAJICAgCQkgID0KCi0tX2NlMmJlOTY3LTE5MzgtNDRhOS1iZDIyLWExNjEx NjA5NTVjOF8KQ29udGVudC1UeXBlOiB0ZXh0L2h0bWw7IGNoYXJzZXQ9Imlzby04ODU5LTEiCkNv bnRlbnQtVHJhbnNmZXItRW5jb2Rpbmc6IHF1b3RlZC1wcmludGFibGUKCjxodG1sPgo8aGVhZD4K PHN0eWxlPjwhLS0KLmhtbWVzc2FnZSBQCnsKbWFyZ2luOjBweD0zQgpwYWRkaW5nOjBweAp9CmJv ZHkuaG1tZXNzYWdlCnsKZm9udC1zaXplOiAxMnB0PTNCCmZvbnQtZmFtaWx5OkNhbGlicmkKfQot LT48L3N0eWxlPjwvaGVhZD4KPGJvZHkgY2xhc3M9M0QnaG1tZXNzYWdlJz48ZGl2IGRpcj0zRCds dHInPiZndD0zQiBGcm9tOiBqZWZmQG1heWVzbmV0d29yay5jPQpvbTxicj48ZGl2PiZndD0zQiBE YXRlOiBUaHU9MkMgMjcgU2VwIDIwMTIgMDg6MjQ6NTMgLTA3MDA8YnI+Jmd0PTNCIFRvOiB1c2U9 CnJzQG92aXJ0Lm9yZzxicj4mZ3Q9M0IgU3ViamVjdDogW1VzZXJzXSAgQ2Fubm90IGNvbm5lY3Qg dG8gZ3Vlc3Qgd2l0aCBzcGljZT0KIGNvbnNvbGU9M0IJU1NMIHZhbGlkYXRlIGVycm9yPGJyPjxi cj4mZ3Q9M0IgSSBkaWQgbm90IHNlZSBhIHNvbHV0aW9uIGZvciB0PQpoaXMgaXNzdWU9MkMgeWV0 IHNwZW50IGEgY291cGxlIG9mIGhvdXJzIG9uID0wQT0KaXQuJm5ic3A9M0IgSW4gbXkgY2FzZT0y QyB0aGUgZm9sbG93aW5nIGNvbW1hbmQgY2xlYXJlZCB0aGUgaXNzdWUgZm9yIGFsbCBWPQpNczo8 YnI+PGJyPiZndD0zQiBpcHRhYmxlcyAtLWZsdXNoPGJyPjxicj5UaGF0IHNlZW1zIGxpa2UgYSB2 ZXJ5IGJhZCBzb2x1dGk9Cm9uLiBpcHRhYmxlcyAtLWZsdXNoIHJlbW92ZXMgYWxsIG9mIHRoZSBm aXJld2FsbCBydWxlcz0yQyBsZWF2aW5nIHlvdXIgVk0gdT0KbnByb3RlY3RlZC48YnI+SSdtIGN1 cmlvdXMgdG8ga25vdyB3aGljaCBydWxlIHdhcyBibG9ja2luZyBpdCB0aG91Z2guPGJyPjxiPQpy PiZndD0zQiBBZnRlciB0aGF0PTJDIG5vIG1vcmUgU1NMIGVycm9ycyBhbmQgSSBjb3VsZCBjb25u ZWN0IHZpYSBTcGljZS48YnI9Cj49MEE9Cj0wQT0KPGJyPiZndD0zQiBKZWZmPGJyIGNsZWFyPTNE ImFsbCI+PGJyPiZndD0zQiAtLS0tLTxicj4mZ3Q9M0IgSmVmZiBNYXllczxicj48PQpicj48YnI+ PTBBPQo8YnI+X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX189 MEE9ClVzZXJzIG1haWxpbmcgbGlzdD0wQT0KVXNlcnNAb3ZpcnQub3JnPTBBPQpodHRwOi8vbGlz dHMub3ZpcnQub3JnL21haWxtYW4vbGlzdGluZm8vdXNlcnM8L2Rpdj4gCQkgCSAgIAkJICA8L2Rp dj48L2JvZHk9Cj4KPC9odG1sPj0KCi0tX2NlMmJlOTY3LTE5MzgtNDRhOS1iZDIyLWExNjExNjA5 NTVjOF8tLQo= --===============5243850690357860370==-- From jeff at mayesnetwork.com Thu Sep 27 12:14:22 2012 Content-Type: multipart/mixed; boundary="===============2999683258671658795==" MIME-Version: 1.0 From: Jeff Mayes To: users at ovirt.org Subject: Re: [Users] Cannot connect to guest with spice console; SSL validate error Date: Thu, 27 Sep 2012 09:14:00 -0700 Message-ID: In-Reply-To: SNT002-W168D69C1E330698839AB0A3A7830@phx.gbl --===============2999683258671658795== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable You are probably right about it being a bad solution. After as many hours as I spent, my patience was a bit thin. In any case, I allowed the engine-setup application to modify the iptables on a new F17 install. Jeff ----- On Thu, Sep 27, 2012 at 8:51 AM, Nicholas Kesick < cybertimber2000(a)hotmail.com> wrote: > > From: jeff(a)mayesnetwork.com > > Date: Thu, 27 Sep 2012 08:24:53 -0700 > > To: users(a)ovirt.org > > Subject: [Users] Cannot connect to guest with spice console; SSL > validate error > > > > I did not see a solution for this issue, yet spent a couple of hours on > it. In my case, the following command cleared the issue for all VMs: > > > iptables --flush > > That seems like a very bad solution. iptables --flush removes all of the > firewall rules, leaving your VM unprotected. > I'm curious to know which rule was blocking it though. > > > > After that, no more SSL errors and I could connect via Spice. > > > Jeff > > > ----- > > Jeff Mayes > > > > _______________________________________________ Users mailing list > Users(a)ovirt.org http://lists.ovirt.org/mailman/listinfo/users > --===============2999683258671658795== Content-Type: text/html MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="attachment.html" WW91IGFyZSBwcm9iYWJseSByaWdodCBhYm91dCBpdCBiZWluZyBhIGJhZCBzb2x1dGlvbi6gIEFm dGVyIGFzIG1hbnkgaG91cnMgYXMgSSBzcGVudCwgbXkgcGF0aWVuY2Ugd2FzIGEgYml0IHRoaW4u PGJyPjxicj5JbiBhbnkgY2FzZSwgSSBhbGxvd2VkIHRoZSBlbmdpbmUtc2V0dXAgYXBwbGljYXRp b24gdG8gbW9kaWZ5IHRoZSBpcHRhYmxlcyBvbiBhIG5ldyBGMTcgaW5zdGFsbC48YnI+CgoKPGJy PkplZmY8YnIgY2xlYXI9ImFsbCI+PGJyPi0tLS0tPGJyPgo8YnI+PGJyPjxkaXYgY2xhc3M9Imdt YWlsX3F1b3RlIj5PbiBUaHUsIFNlcCAyNywgMjAxMiBhdCA4OjUxIEFNLCBOaWNob2xhcyBLZXNp Y2sgPHNwYW4gZGlyPSJsdHIiPiZsdDs8YSBocmVmPSJtYWlsdG86Y3liZXJ0aW1iZXIyMDAwQGhv dG1haWwuY29tIiB0YXJnZXQ9Il9ibGFuayI+Y3liZXJ0aW1iZXIyMDAwQGhvdG1haWwuY29tPC9h PiZndDs8L3NwYW4+IHdyb3RlOjxicj48YmxvY2txdW90ZSBjbGFzcz0iZ21haWxfcXVvdGUiIHN0 eWxlPSJtYXJnaW46MCAwIDAgLjhleDtib3JkZXItbGVmdDoxcHggI2NjYyBzb2xpZDtwYWRkaW5n LWxlZnQ6MWV4Ij4KCgoKCgo8ZGl2PjxkaXYgZGlyPSJsdHIiPiZndDsgRnJvbTogPGEgaHJlZj0i bWFpbHRvOmplZmZAbWF5ZXNuZXR3b3JrLmNvbSIgdGFyZ2V0PSJfYmxhbmsiPmplZmZAbWF5ZXNu ZXR3b3JrLmNvbTwvYT48YnI+PGRpdj4mZ3Q7IERhdGU6IFRodSwgMjcgU2VwIDIwMTIgMDg6MjQ6 NTMgLTA3MDA8YnI+Jmd0OyBUbzogPGEgaHJlZj0ibWFpbHRvOnVzZXJzQG92aXJ0Lm9yZyIgdGFy Z2V0PSJfYmxhbmsiPnVzZXJzQG92aXJ0Lm9yZzwvYT48YnI+CgoKJmd0OyBTdWJqZWN0OiBbVXNl cnNdICBDYW5ub3QgY29ubmVjdCB0byBndWVzdCB3aXRoIHNwaWNlIGNvbnNvbGU7CVNTTCB2YWxp ZGF0ZSBlcnJvcjxkaXY+PGJyPjxicj4mZ3Q7IEkgZGlkIG5vdCBzZWUgYSBzb2x1dGlvbiBmb3Ig dGhpcyBpc3N1ZSwgeWV0IHNwZW50IGEgY291cGxlIG9mIGhvdXJzIG9uIAppdC6gIEluIG15IGNh c2UsIHRoZSBmb2xsb3dpbmcgY29tbWFuZCBjbGVhcmVkIHRoZSBpc3N1ZSBmb3IgYWxsIFZNczo8 YnI+PGJyPiZndDsgaXB0YWJsZXMgLS1mbHVzaDxicj48YnI+PC9kaXY+VGhhdCBzZWVtcyBsaWtl IGEgdmVyeSBiYWQgc29sdXRpb24uIGlwdGFibGVzIC0tZmx1c2ggcmVtb3ZlcyBhbGwgb2YgdGhl IGZpcmV3YWxsIHJ1bGVzLCBsZWF2aW5nIHlvdXIgVk0gdW5wcm90ZWN0ZWQuPGJyPgoKCkkmIzM5 O20gY3VyaW91cyB0byBrbm93IHdoaWNoIHJ1bGUgd2FzIGJsb2NraW5nIGl0IHRob3VnaC48ZGl2 Pjxicj48YnI+Jmd0OyBBZnRlciB0aGF0LCBubyBtb3JlIFNTTCBlcnJvcnMgYW5kIEkgY291bGQg Y29ubmVjdCB2aWEgU3BpY2UuPGJyPgoKPGJyPiZndDsgSmVmZjxiciBjbGVhcj0iYWxsIj48YnI+ Jmd0OyAtLS0tLTxicj4mZ3Q7IEplZmYgTWF5ZXM8YnI+PGJyPjxicj4KPGJyPjwvZGl2Pl9fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClVzZXJzIG1haWxpbmcg bGlzdAo8YSBocmVmPSJtYWlsdG86VXNlcnNAb3ZpcnQub3JnIiB0YXJnZXQ9Il9ibGFuayI+VXNl cnNAb3ZpcnQub3JnPC9hPgo8YSBocmVmPSJodHRwOi8vbGlzdHMub3ZpcnQub3JnL21haWxtYW4v bGlzdGluZm8vdXNlcnMiIHRhcmdldD0iX2JsYW5rIj5odHRwOi8vbGlzdHMub3ZpcnQub3JnL21h aWxtYW4vbGlzdGluZm8vdXNlcnM8L2E+PC9kaXY+IAkJIAkgICAJCSAgPC9kaXY+PC9kaXY+Cjwv YmxvY2txdW90ZT48L2Rpdj48YnI+Cg== --===============2999683258671658795==--