Re: [Users] [Spice-devel] Unable to establish spice session

7 Nov 2012

      This is a multi-part message in MIME format.
--------------090205050505080405020202
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit

I think this post I just found is related to my issue :

http://www.mail-archive.com/users@ovirt.org/msg03010.html

at the bottom it explains how changing the "display network" can break 
spice ...

i'll try the removal of the host and re-adding (hopefully my VMs are safe!)

Alex

On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
...
Yep, found it - and it's related to this site / update to spice here :
http://spice-space.org/page/SSLConnection
but now i get :
$ spicec -h 192.168.1.21 -s 5901
Error: failed to connect w/SSL, ssl_error 
error:00000001:lib(0):func(0):reason(1)
140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong 
version number:s3_pkt.c:338:
Warning: SSL Error:
I belive that's got something to do with trying to use ssl3 (as the ca 
cert is ssl v3) instead of ssl v2 ...
Alex
On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
...
----- Original Message -----
...
From: "Alex Leonhardt"<alex.tuxx@gmail.com>
To: "Alon Levy"<alevy@redhat.com>
Cc:spice-devel@lists.freedesktop.org,users@ovirt.org
Sent: Wednesday, November 7, 2012 1:35:09 AM
Subject: Re: [Users] [Spice-devel]  Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed
CA_file=/home/user/.spicec/spice_truststore.pem
140141786060104:error:02001002:system library:fopen:No such file or
directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r')
140141786060104:error:2006D080:BIO routines:BIO_new_file:no  such
file:bss_file.c:129  :
140141786060104:error:0B084002:x509 certificate
routines:X509_load_cert_crl_file:system  lib:by_file.c:279:
Warning: SSL Error:
Alex
You need --ca-file parameter.
Download the certificate usinghttp://engine/ca.crt
Alon
--------------090205050505080405020202
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit

<html>
  <head>
    <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <font size="-1"><font face="Tahoma">I think this post I just found
        is related to my issue : <br>
        <br>
        <a class="moz-txt-link-freetext" href="http://www.mail-archive.com/users@ovirt.org/msg03010.html">http://www.mail-archive.com/users@ovirt.org/msg03010.html</a><br>
        <br>
        at the bottom it explains how changing the "display network" can
        break spice ... <br>
        <br>
        i'll try the removal of the host and re-adding (hopefully my VMs
        are safe!) <br>
        <br>
        Alex<br>
      </font></font><br>
    On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
    <blockquote cite="mid:5099A368.7080607@gmail.com" type="cite">
      <meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
      <font size="-1"><font face="Tahoma">Yep, found it - and it's
          related to this site / update to spice here :<br>
          <br>
          <a moz-do-not-send="true" class="moz-txt-link-freetext"
            href="http://spice-space.org/page/SSLConnection">http://spice-space.org/page/SSLConnection</a>
          <br>
          <br>
          but now i get :<br>
          <br>
          $ spicec -h 192.168.1.21 -s 5901 <br>
          Error: failed to connect w/SSL, ssl_error
          error:00000001:lib(0):func(0):reason(1)<br>
          140370158261576:error:1408F10B:SSL
          routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338:<br>
          Warning: SSL Error:<br>
          <br>
          I belive that's got something to do with trying to use ssl3
          (as the ca cert is ssl v3) instead of ssl v2 ... <br>
          <br>
          Alex<br>
          <br>
        </font></font><br>
      On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
      <blockquote
        cite="mid:2074196007.7576443.1352245333045.JavaMail.root@redhat.com"
        type="cite">
        <pre wrap="">
----- Original Message -----
</pre>
        <blockquote type="cite">
          <pre wrap="">From: "Alex Leonhardt" <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:alex.tuxx@gmail.com"><alex.tuxx@gmail.com></a>
To: "Alon Levy" <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:alevy@redhat.com"><alevy@redhat.com></a>
Cc: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:spice-devel@lists.freedesktop.org">spice-devel@lists.freedesktop.org</a>, <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:users@ovirt.org">users@ovirt.org</a>
Sent: Wednesday, November 7, 2012 1:35:09 AM
Subject: Re: [Users] [Spice-devel]  Unable to establish spice session

This is what i receive when trying to launch it manually :

$ spicec -h 192.168.1.21 -p 5901 -s 5901

Error: SSL_CTX_load_verify_locations failed
CA_file=/home/user/.spicec/spice_truststore.pem
140141786060104:error:02001002:system library:fopen:No such file or
directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r')
140141786060104:error:2006D080:BIO routines:BIO_new_ <a moz-do-not-send="true" class="moz-txt-link-freetext" href="file:no">file:no</a> such
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="file:bss_file.c:129">file:bss_file.c:129</a> :
140141786060104:error:0B084002:x509 certificate
routines:X509_load_cert_crl_ <a moz-do-not-send="true" class="moz-txt-link-freetext" href="file:system">file:system</a> lib:by_file.c:279:
Warning: SSL Error:

Alex

</pre>
        </blockquote>
        <pre wrap="">You need --ca-file parameter.
Download the certificate using <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://engine/ca.crt">http://engine/ca.crt</a>

Alon
</pre>
      </blockquote>
    </blockquote>
  </body>
</html>

--------------090205050505080405020202--