[Users] Unable to establish spice session
This is a multi-part message in MIME format. --------------050202000006070109080707 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Hi, Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this : Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed Anyone any idea ? Alex --------------050202000006070109080707 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=ISO-8859-1"> </head> <body bgcolor="#FFFFFF" text="#000000"> <font size="-1"><font face="Tahoma">Hi,<br> <br> Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this : <br> <br> Nov 1 23:29:02 ale spice: _=/usr/bin/env<br> Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header<br> Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE<br> Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270)<br> Nov 1 23:29:06 ale spice: remote-viewer execution failed<br> <br> Anyone any idea ? <br> <br> Alex<br> <br> </font></font> </body> </html> --------------050202000006070109080707--
On 11/02/2012 01:35 AM, Alex Leonhardt wrote:
Hi,
Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this :
did you make any change?
Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed
Anyone any idea ?
adding spice-devel
Hi, nope, no changes were made, at least none that I'm aware of. Alex 2012/11/2 Itamar Heim <iheim@redhat.com>
On 11/02/2012 01:35 AM, Alex Leonhardt wrote:
Hi,
Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this :
did you make any change?
Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed
Anyone any idea ?
adding spice-devel
On 11/02/2012 01:35 AM, Alex Leonhardt wrote:
Hi,
Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this :
did you make any change?
Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed
Is this the full log? can you export the following environment variables and capture the stdout/stderr? export G_MESSAGES_DEBUG=all export SPICE_DEBUG=1
Anyone any idea ?
adding spice-devel _______________________________________________ Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
Here it is. BTW, thought I update to Firefox 16 with Spice XPI 2.7 (as was before) - but no luck either. Still getting the same issues. Thanks Alex On 11/04/2012 11:44 AM, Alon Levy wrote:
On 11/02/2012 01:35 AM, Alex Leonhardt wrote:
Hi,
Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this : did you make any change?
Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed Is this the full log? can you export the following environment variables and capture the stdout/stderr?
export G_MESSAGES_DEBUG=all export SPICE_DEBUG=1
Anyone any idea ? adding spice-devel
Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
This is a multi-part message in MIME format. --------------060604050706090806080404 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit This is what i receive when trying to launch it manually : $ spicec -h 192.168.1.21 -p 5901 -s 5901 Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:129: 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: Warning: SSL Error: Alex On 11/05/2012 09:22 PM, Alex Leonhardt wrote:
Here it is.
BTW, thought I update to Firefox 16 with Spice XPI 2.7 (as was before) - but no luck either. Still getting the same issues.
Thanks Alex
On 11/04/2012 11:44 AM, Alon Levy wrote:
On 11/02/2012 01:35 AM, Alex Leonhardt wrote:
Hi,
Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this : did you make any change?
Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed Is this the full log? can you export the following environment variables and capture the stdout/stderr?
export G_MESSAGES_DEBUG=all export SPICE_DEBUG=1
Anyone any idea ? adding spice-devel
Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
--------------060604050706090806080404 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <font size="-1"><font face="Tahoma">This is what i receive when trying to launch it manually : <br> <br> $ spicec -h 192.168.1.21 -p 5901 -s 5901<br> <br> Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem<br> 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r')<br> 140141786060104:error:2006D080:BIO routines:BIO_new_<a class="moz-txt-link-freetext" href="file:no">file:no</a> such <a class="moz-txt-link-freetext" href="file:bss_file.c:129">file:bss_file.c:129</a>:<br> 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_<a class="moz-txt-link-freetext" href="file:system">file:system</a> lib:by_file.c:279:<br> Warning: SSL Error:<br> <br> Alex<br> <br> </font></font><br> On 11/05/2012 09:22 PM, Alex Leonhardt wrote: <blockquote cite="mid:50982E25.4010108@gmail.com" type="cite"> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> <font size="-1"><font face="Tahoma">Here it is. <br> <br> BTW, thought I update to Firefox 16 with Spice XPI 2.7 (as was before) - but no luck either. Still getting the same issues.<br> <br> Thanks<br> Alex<br> <br> </font></font><br> On 11/04/2012 11:44 AM, Alon Levy wrote: <blockquote cite="mid:1688289053.26745866.1352029455980.JavaMail.root@redhat.com" type="cite"> <blockquote type="cite"> <pre wrap="">On 11/02/2012 01:35 AM, Alex Leonhardt wrote: </pre> <blockquote type="cite"> <pre wrap="">Hi, Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this : </pre> </blockquote> <pre wrap="">did you make any change? </pre> <blockquote type="cite"> <pre wrap="">Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed </pre> </blockquote> </blockquote> <pre wrap="">Is this the full log? can you export the following environment variables and capture the stdout/stderr? export G_MESSAGES_DEBUG=all export SPICE_DEBUG=1 </pre> <blockquote type="cite"> <blockquote type="cite"> <pre wrap="">Anyone any idea ? </pre> </blockquote> <pre wrap="">adding spice-devel _______________________________________________ Spice-devel mailing list <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:Spice-devel@lists.freedesktop.org">Spice-devel@lists.freedesktop.org</a> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.freedesktop.org/mailman/listinfo/spice-devel">http://lists.freedesktop.org/mailman/listinfo/spice-devel</a> </pre> </blockquote> </blockquote> </blockquote> </body> </html> --------------060604050706090806080404--
----- Original Message -----
From: "Alex Leonhardt" <alex.tuxx@gmail.com> To: "Alon Levy" <alevy@redhat.com> Cc: spice-devel@lists.freedesktop.org, users@ovirt.org Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_ file:no such file:bss_file.c:129 : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_ file:system lib:by_file.c:279: Warning: SSL Error:
Alex
You need --ca-file parameter. Download the certificate using http://engine/ca.crt Alon
This is a multi-part message in MIME format. --------------000108000507070902000808 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit Yep, found it - and it's related to this site / update to spice here : http://spice-space.org/page/SSLConnection but now i get : $ spicec -h 192.168.1.21 -s 5901 Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338: Warning: SSL Error: I belive that's got something to do with trying to use ssl3 (as the ca cert is ssl v3) instead of ssl v2 ... Alex On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
----- Original Message -----
From: "Alex Leonhardt"<alex.tuxx@gmail.com> To: "Alon Levy"<alevy@redhat.com> Cc: spice-devel@lists.freedesktop.org, users@ovirt.org Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_ file:no such file:bss_file.c:129 : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_ file:system lib:by_file.c:279: Warning: SSL Error:
Alex
You need --ca-file parameter. Download the certificate using http://engine/ca.crt
Alon
--------------000108000507070902000808 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <font size="-1"><font face="Tahoma">Yep, found it - and it's related to this site / update to spice here :<br> <br> <a class="moz-txt-link-freetext" href="http://spice-space.org/page/SSLConnection">http://spice-space.org/page/SSLConnection</a> <br> <br> but now i get :<br> <br> $ spicec -h 192.168.1.21 -s 5901 <br> Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1)<br> 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338:<br> Warning: SSL Error:<br> <br> I belive that's got something to do with trying to use ssl3 (as the ca cert is ssl v3) instead of ssl v2 ... <br> <br> Alex<br> <br> </font></font><br> On 11/06/2012 11:42 PM, Alon Bar-Lev wrote: <blockquote cite="mid:2074196007.7576443.1352245333045.JavaMail.root@redhat.com" type="cite"> <pre wrap=""> ----- Original Message ----- </pre> <blockquote type="cite"> <pre wrap="">From: "Alex Leonhardt" <a class="moz-txt-link-rfc2396E" href="mailto:alex.tuxx@gmail.com"><alex.tuxx@gmail.com></a> To: "Alon Levy" <a class="moz-txt-link-rfc2396E" href="mailto:alevy@redhat.com"><alevy@redhat.com></a> Cc: <a class="moz-txt-link-abbreviated" href="mailto:spice-devel@lists.freedesktop.org">spice-devel@lists.freedesktop.org</a>, <a class="moz-txt-link-abbreviated" href="mailto:users@ovirt.org">users@ovirt.org</a> Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session This is what i receive when trying to launch it manually : $ spicec -h 192.168.1.21 -p 5901 -s 5901 Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_ <a class="moz-txt-link-freetext" href="file:no">file:no</a> such <a class="moz-txt-link-freetext" href="file:bss_file.c:129">file:bss_file.c:129</a> : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_ <a class="moz-txt-link-freetext" href="file:system">file:system</a> lib:by_file.c:279: Warning: SSL Error: Alex </pre> </blockquote> <pre wrap=""> You need --ca-file parameter. Download the certificate using <a class="moz-txt-link-freetext" href="http://engine/ca.crt">http://engine/ca.crt</a> Alon </pre> </blockquote> </body> </html> --------------000108000507070902000808--
This is a multi-part message in MIME format. --------------090205050505080405020202 Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit I think this post I just found is related to my issue : http://www.mail-archive.com/users@ovirt.org/msg03010.html at the bottom it explains how changing the "display network" can break spice ... i'll try the removal of the host and re-adding (hopefully my VMs are safe!) Alex On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
Yep, found it - and it's related to this site / update to spice here :
http://spice-space.org/page/SSLConnection
but now i get :
$ spicec -h 192.168.1.21 -s 5901 Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338: Warning: SSL Error:
I belive that's got something to do with trying to use ssl3 (as the ca cert is ssl v3) instead of ssl v2 ...
Alex
On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
----- Original Message -----
From: "Alex Leonhardt"<alex.tuxx@gmail.com> To: "Alon Levy"<alevy@redhat.com> Cc:spice-devel@lists.freedesktop.org,users@ovirt.org Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:129 : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: Warning: SSL Error:
Alex
You need --ca-file parameter. Download the certificate usinghttp://engine/ca.crt
Alon
--------------090205050505080405020202 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <font size="-1"><font face="Tahoma">I think this post I just found is related to my issue : <br> <br> <a class="moz-txt-link-freetext" href="http://www.mail-archive.com/users@ovirt.org/msg03010.html">http://www.mail-archive.com/users@ovirt.org/msg03010.html</a><br> <br> at the bottom it explains how changing the "display network" can break spice ... <br> <br> i'll try the removal of the host and re-adding (hopefully my VMs are safe!) <br> <br> Alex<br> </font></font><br> On 11/06/2012 11:55 PM, Alex Leonhardt wrote: <blockquote cite="mid:5099A368.7080607@gmail.com" type="cite"> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> <font size="-1"><font face="Tahoma">Yep, found it - and it's related to this site / update to spice here :<br> <br> <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://spice-space.org/page/SSLConnection">http://spice-space.org/page/SSLConnection</a> <br> <br> but now i get :<br> <br> $ spicec -h 192.168.1.21 -s 5901 <br> Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1)<br> 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338:<br> Warning: SSL Error:<br> <br> I belive that's got something to do with trying to use ssl3 (as the ca cert is ssl v3) instead of ssl v2 ... <br> <br> Alex<br> <br> </font></font><br> On 11/06/2012 11:42 PM, Alon Bar-Lev wrote: <blockquote cite="mid:2074196007.7576443.1352245333045.JavaMail.root@redhat.com" type="cite"> <pre wrap=""> ----- Original Message ----- </pre> <blockquote type="cite"> <pre wrap="">From: "Alex Leonhardt" <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:alex.tuxx@gmail.com"><alex.tuxx@gmail.com></a> To: "Alon Levy" <a moz-do-not-send="true" class="moz-txt-link-rfc2396E" href="mailto:alevy@redhat.com"><alevy@redhat.com></a> Cc: <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:spice-devel@lists.freedesktop.org">spice-devel@lists.freedesktop.org</a>, <a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:users@ovirt.org">users@ovirt.org</a> Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session This is what i receive when trying to launch it manually : $ spicec -h 192.168.1.21 -p 5901 -s 5901 Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_ <a moz-do-not-send="true" class="moz-txt-link-freetext" href="file:no">file:no</a> such <a moz-do-not-send="true" class="moz-txt-link-freetext" href="file:bss_file.c:129">file:bss_file.c:129</a> : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_ <a moz-do-not-send="true" class="moz-txt-link-freetext" href="file:system">file:system</a> lib:by_file.c:279: Warning: SSL Error: Alex </pre> </blockquote> <pre wrap="">You need --ca-file parameter. Download the certificate using <a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://engine/ca.crt">http://engine/ca.crt</a> Alon </pre> </blockquote> </blockquote> </body> </html> --------------090205050505080405020202--
On 11/07/2012 01:37 AM, Alex Leonhardt wrote:
I think this post I just found is related to my issue :
http://www.mail-archive.com/users@ovirt.org/msg03010.html
at the bottom it explains how changing the "display network" can break spice ...
you can tell the spice client the subject of the certificate to expect, regardless of the ip you are connecting to.
i'll try the removal of the host and re-adding (hopefully my VMs are safe!)
Alex
On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
Yep, found it - and it's related to this site / update to spice here :
http://spice-space.org/page/SSLConnection
but now i get :
$ spicec -h 192.168.1.21 -s 5901 Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338: Warning: SSL Error:
I belive that's got something to do with trying to use ssl3 (as the ca cert is ssl v3) instead of ssl v2 ...
Alex
On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
----- Original Message -----
From: "Alex Leonhardt"<alex.tuxx@gmail.com> To: "Alon Levy"<alevy@redhat.com> Cc:spice-devel@lists.freedesktop.org,users@ovirt.org Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:129 : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: Warning: SSL Error:
Alex
You need --ca-file parameter. Download the certificate usinghttp://engine/ca.crt
Alon
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
This is a multi-part message in MIME format. --------------070307000107030707080400 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit I've figured it out - finally - the issue is/was that I added a virtual interface to the bridge interface on startup. I added the "ovirtmgmt:1" interface to be able to get to the VMs which are on a completely different network range - to fix it, i had to remove the virtual interface (unfortunately), detached the ovirtmgmt interface from eth0 and then re-attached and voila, all good again ... i did a restart of the HV (node) just in case ;) .. Alex On 11/07/2012 09:47 AM, Itamar Heim wrote:
On 11/07/2012 01:37 AM, Alex Leonhardt wrote:
I think this post I just found is related to my issue :
http://www.mail-archive.com/users@ovirt.org/msg03010.html
at the bottom it explains how changing the "display network" can break spice ...
you can tell the spice client the subject of the certificate to expect, regardless of the ip you are connecting to.
i'll try the removal of the host and re-adding (hopefully my VMs are safe!)
Alex
On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
Yep, found it - and it's related to this site / update to spice here :
http://spice-space.org/page/SSLConnection
but now i get :
$ spicec -h 192.168.1.21 -s 5901 Error: failed to connect w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong version number:s3_pkt.c:338: Warning: SSL Error:
I belive that's got something to do with trying to use ssl3 (as the ca cert is ssl v3) instead of ssl v2 ...
Alex
On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
----- Original Message -----
From: "Alex Leonhardt"<alex.tuxx@gmail.com> To: "Alon Levy"<alevy@redhat.com> Cc:spice-devel@lists.freedesktop.org,users@ovirt.org Sent: Wednesday, November 7, 2012 1:35:09 AM Subject: Re: [Users] [Spice-devel] Unable to establish spice session
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r')
140141786060104:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:129 : 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: Warning: SSL Error:
Alex
You need --ca-file parameter. Download the certificate usinghttp://engine/ca.crt
Alon
_______________________________________________ Users mailing list Users@ovirt.org http://lists.ovirt.org/mailman/listinfo/users
--------------070307000107030707080400 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit <html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000000"> <font size="-1"><font face="Tahoma">I've figured it out - finally - <br> <br> the issue is/was that I added a virtual interface to the bridge interface on startup. I added the "ovirtmgmt:1" interface to be able to get to the VMs which are on a completely different network range - to fix it, i had to remove the virtual interface (unfortunately), detached the ovirtmgmt interface from eth0 and then re-attached and voila, all good again ... i did a restart of the HV (node) just in case ;) .. <br> <br> Alex<br> <br> </font></font><br> On 11/07/2012 09:47 AM, Itamar Heim wrote: <blockquote cite="mid:509A2E31.7090802@redhat.com" type="cite">On 11/07/2012 01:37 AM, Alex Leonhardt wrote: <br> <blockquote type="cite">I think this post I just found is related to my issue : <br> <br> <a class="moz-txt-link-freetext" href="http://www.mail-archive.com/users@ovirt.org/msg03010.html">http://www.mail-archive.com/users@ovirt.org/msg03010.html</a> <br> <br> at the bottom it explains how changing the "display network" can break <br> spice ... <br> </blockquote> <br> you can tell the spice client the subject of the certificate to expect, regardless of the ip you are connecting to. <br> <br> <blockquote type="cite"> <br> i'll try the removal of the host and re-adding (hopefully my VMs are safe!) <br> <br> Alex <br> <br> On 11/06/2012 11:55 PM, Alex Leonhardt wrote: <br> <blockquote type="cite">Yep, found it - and it's related to this site / update to spice here : <br> <br> <a class="moz-txt-link-freetext" href="http://spice-space.org/page/SSLConnection">http://spice-space.org/page/SSLConnection</a> <br> <br> but now i get : <br> <br> $ spicec -h 192.168.1.21 -s 5901 <br> Error: failed to connect w/SSL, ssl_error <br> error:00000001:lib(0):func(0):reason(1) <br> 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong <br> version number:s3_pkt.c:338: <br> Warning: SSL Error: <br> <br> I belive that's got something to do with trying to use ssl3 (as the ca <br> cert is ssl v3) instead of ssl v2 ... <br> <br> Alex <br> <br> <br> On 11/06/2012 11:42 PM, Alon Bar-Lev wrote: <br> <blockquote type="cite">----- Original Message ----- <br> <blockquote type="cite">From: "Alex Leonhardt"<a class="moz-txt-link-rfc2396E" href="mailto:alex.tuxx@gmail.com"><alex.tuxx@gmail.com></a> <br> To: "Alon Levy"<a class="moz-txt-link-rfc2396E" href="mailto:alevy@redhat.com"><alevy@redhat.com></a> <br> <a class="moz-txt-link-abbreviated" href="mailto:Cc:spice-devel@lists.freedesktop.org,users@ovirt.org">Cc:spice-devel@lists.freedesktop.org,users@ovirt.org</a> <br> Sent: Wednesday, November 7, 2012 1:35:09 AM <br> Subject: Re: [Users] [Spice-devel] Unable to establish spice session <br> <br> <br> This is what i receive when trying to launch it manually : <br> <br> $ spicec -h 192.168.1.21 -p 5901 -s 5901 <br> <br> Error: SSL_CTX_load_verify_locations failed <br> CA_file=/home/user/.spicec/spice_truststore.pem <br> 140141786060104:error:02001002:system library:fopen:No such file or <br> directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') <br> 140141786060104:error:2006D080:BIO routines:BIO_new_<a class="moz-txt-link-freetext" href="file:no">file:no</a> such <br> <a class="moz-txt-link-freetext" href="file:bss_file.c:129">file:bss_file.c:129</a> : <br> 140141786060104:error:0B084002:x509 certificate <br> routines:X509_load_cert_crl_<a class="moz-txt-link-freetext" href="file:system">file:system</a> lib:by_file.c:279: <br> Warning: SSL Error: <br> <br> Alex <br> <br> </blockquote> You need --ca-file parameter. <br> Download the certificate usinghttp://engine/ca.crt <br> <br> Alon <br> </blockquote> </blockquote> <br> <br> _______________________________________________ <br> Users mailing list <br> <a class="moz-txt-link-abbreviated" href="mailto:Users@ovirt.org">Users@ovirt.org</a> <br> <a class="moz-txt-link-freetext" href="http://lists.ovirt.org/mailman/listinfo/users">http://lists.ovirt.org/mailman/listinfo/users</a> <br> <br> </blockquote> <br> <br> </blockquote> </body> </html> --------------070307000107030707080400--
If you need to connect manually to RHEV/oVirt VM, please follow these instructions from the wiki: http://wiki.ovirt.org/wiki/How_to_Connect_to_SPICE_Console_Without_Portal David Alex Leonhardt píše v Út 06. 11. 2012 v 23:35 +0000:
This is what i receive when trying to launch it manually :
$ spicec -h 192.168.1.21 -p 5901 -s 5901
Error: SSL_CTX_load_verify_locations failed CA_file=/home/user/.spicec/spice_truststore.pem 140141786060104:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 140141786060104:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:129: 140141786060104:error:0B084002:x509 certificate routines:X509_load_cert_crl_file:system lib:by_file.c:279: Warning: SSL Error:
Alex
On 11/05/2012 09:22 PM, Alex Leonhardt wrote:
Here it is.
BTW, thought I update to Firefox 16 with Spice XPI 2.7 (as was before) - but no luck either. Still getting the same issues.
Thanks Alex
On 11/04/2012 11:44 AM, Alon Levy wrote:
On 11/02/2012 01:35 AM, Alex Leonhardt wrote:
Hi,
Since today I'm unable to establish a spice session to any/all VMs - the ony thing I see in the (local) logs is this : did you make any change?
Nov 1 23:29:02 ale spice: _=/usr/bin/env Nov 1 23:29:03 ale spice: (remote-viewer:5231): GSpiceController-DEBUG: controller.vala:187: new socket client, reading init header Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: send-cad=FALSE Nov 1 23:29:05 ale spice: ** (remote-viewer:5231): DEBUG: unimplemented property: secure-channels=((GStrv*) 0x1e83270) Nov 1 23:29:06 ale spice: remote-viewer execution failed Is this the full log? can you export the following environment variables and capture the stdout/stderr?
export G_MESSAGES_DEBUG=all export SPICE_DEBUG=1
Anyone any idea ? adding spice-devel
Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
-- David Jaša, RHCE SPICE QE based in Brno GPG Key: 22C33E24 Fingerprint: 513A 060B D1B4 2A72 7F0D 0278 B125 CD00 22C3 3E24
participants (5)
-
Alex Leonhardt -
Alon Bar-Lev -
Alon Levy -
David Jaša -
Itamar Heim