[Users] [Spice-devel] Unable to establish spice session

[Alex Leonhardt]

I've figured it out - finally -

the issue is/was that I added a virtual interface to the bridge 
interface on startup. I added the "ovirtmgmt:1" interface to be able to 
get to the VMs which are on a completely different network range - to 
fix it, i had to remove the virtual interface (unfortunately), detached 
the ovirtmgmt interface from eth0 and then re-attached and voila, all 
good again ... i did a restart of the HV (node) just in case ;) ..

Alex


On 11/07/2012 09:47 AM, Itamar Heim wrote:
> On 11/07/2012 01:37 AM, Alex Leonhardt wrote:
>> I think this post I just found is related to my issue :
>>
>> http://www.mail-archive.com/users@ovirt.org/msg03010.html
>>
>> at the bottom it explains how changing the "display network" can break
>> spice ...
>
> you can tell the spice client the subject of the certificate to 
> expect, regardless of the ip you are connecting to.
>
>>
>> i'll try the removal of the host and re-adding (hopefully my VMs are 
>> safe!)
>>
>> Alex
>>
>> On 11/06/2012 11:55 PM, Alex Leonhardt wrote:
>>> Yep, found it - and it's related to this site / update to spice here :
>>>
>>> http://spice-space.org/page/SSLConnection
>>>
>>> but now i get :
>>>
>>> $ spicec -h 192.168.1.21 -s 5901
>>> Error: failed to connect w/SSL, ssl_error
>>> error:00000001:lib(0):func(0):reason(1)
>>> 140370158261576:error:1408F10B:SSL routines:SSL3_GET_RECORD:wrong
>>> version number:s3_pkt.c:338:
>>> Warning: SSL Error:
>>>
>>> I belive that's got something to do with trying to use ssl3 (as the ca
>>> cert is ssl v3) instead of ssl v2 ...
>>>
>>> Alex
>>>
>>>
>>> On 11/06/2012 11:42 PM, Alon Bar-Lev wrote:
>>>> ----- Original Message -----
>>>>> From: "Alex Leonhardt"<alex.tuxx at gmail.com>
>>>>> To: "Alon Levy"<alevy at redhat.com>
>>>>> Cc:spice-devel at lists.freedesktop.org,users at ovirt.org
>>>>> Sent: Wednesday, November 7, 2012 1:35:09 AM
>>>>> Subject: Re: [Users] [Spice-devel]  Unable to establish spice session
>>>>>
>>>>>
>>>>> This is what i receive when trying to launch it manually :
>>>>>
>>>>> $ spicec -h 192.168.1.21 -p 5901 -s 5901
>>>>>
>>>>> Error: SSL_CTX_load_verify_locations failed
>>>>> CA_file=/home/user/.spicec/spice_truststore.pem
>>>>> 140141786060104:error:02001002:system library:fopen:No such file or
>>>>> directory:bss_file.c:126:fopen('/home/user/.spicec/spice_truststore.pem','r') 
>>>>>
>>>>> 140141786060104:error:2006D080:BIO routines:BIO_new_file:no  such
>>>>> file:bss_file.c:129  :
>>>>> 140141786060104:error:0B084002:x509 certificate
>>>>> routines:X509_load_cert_crl_file:system  lib:by_file.c:279:
>>>>> Warning: SSL Error:
>>>>>
>>>>> Alex
>>>>>
>>>> You need --ca-file parameter.
>>>> Download the certificate usinghttp://engine/ca.crt
>>>>
>>>> Alon
>>
>>
>> _______________________________________________
>> Users mailing list
>> Users at ovirt.org
>> http://lists.ovirt.org/mailman/listinfo/users
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20121111/b24a8525/attachment-0001.html>