On 11/07/2012 01:37 AM, Alex Leonhardt wrote:
I think this post I just found is related to my issue :
http://www.mail-archive.com/users@ovirt.org/msg03010.html
at the bottom it explains how changing the "display network" can break spice ...
you can tell the spice client the subject of the certificate to expect, regardless of the ip you are connecting to.
i'll try the removal of the host and re-adding (hopefully my VMs are safe!)
Alex
On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
Yep, found it - and it's related to this site / update to spice here :
http://spice-space.org/page/SSLConnection
but now i get :
$ spicec -h 192.168.1.21 -s 5901 Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338: Warning: SSL Error:
I belive that's got something to do with trying to use ssl3 (as the ca cert is ssl v3) instead of ssl v2 ...
Alex
On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
----- Original Message -----
From: "Alex Leonhardt"<alex.tuxx@gmail.com> To: "Alon Levy"<alevy@redhat.com> Cc:spice-devel@lists.freedesktop.org,users@ovirt.org Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:129 : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: Warning: SSL Error:
Alex
You need --ca-file parameter. Download the certificate usinghttp://engine/ca.crt
Alon
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users