On 11/07/2012 01:37 AM, Alex Leonhardt wrote:
I think this post I just found is related to my issue :
http://www.mail-archive.com/users@ovirt.org/msg03010.html
at the bottom it explains how changing the "display network" can break
spice ...
you can tell the spice client the subject of the certificate to expect,
regardless of the ip you are connecting to.
i'll try the removal of the host and re-adding (hopefully my VMs are safe!)
Alex
On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
> Yep, found it - and it's related to this site / update to spice here :
>
>
http://spice-space.org/page/SSLConnection
>
> but now i get :
>
> $ spicec -h 192.168.1.21 -s 5901
> Error: failed to connect w/SSL, ssl_error
> error:00000001:lib(0):func(0):reason(1)
> 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong
> version number:s3_pkt.c:338:
> Warning: SSL Error:
>
> I belive that's got something to do with trying to use ssl3 (as the ca
> cert is ssl v3) instead of ssl v2 ...
>
> Alex
>
>
> On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
>> ----- Original Message -----
>>> From: "Alex Leonhardt"<alex.tuxx(a)gmail.com>
>>> To: "Alon Levy"<alevy(a)redhat.com>
>>> Cc:spice-devel@lists.freedesktop.org,users@ovirt.org
>>> Sent: Wednesday, November 7, 2012 1:35:09 AM
>>> Subject: Re: [Users] [Spice-devel] Unable to establish spice session
>>>
>>>
>>> This is what i receive when trying to launch it manually :
>>>
>>> $ spicec -h 192.168.1.21 -p 5901 -s 5901
>>>
>>> Error: SSL_CTX_load_verify_locations failed
>>> CA_file=/home/user/.spicec/spice_truststore.pem
>>> 140141786060104:error:02001002:system library:fopen:No such file or
>>>
directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r')
>>> 140141786060104:error:2006D080:BIO routines:BIO_new_file:no such
>>> file:bss_file.c:129 :
>>> 140141786060104:error:0B084002:x509 certificate
>>> routines:X509_load_cert_crl_file:system lib:by_file.c:279:
>>> Warning: SSL Error:
>>>
>>> Alex
>>>
>> You need --ca-file parameter.
>> Download the certificate usinghttp://engine/ca.crt
>>
>> Alon
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users