[Users] unable to use spice-html5 in chrome due to certificate error

[Frantisek Kobzik]

Strange.

Just a question: are you totally sure you imported the certificate authority (not the certificate only)? (the websocket proxy uses different key/cert pair than the engine, but they have common CA that issues them).

Btw - could you please try noVNC client as well? I wonder if it prints the same thing.

Thank you,
Frank.

----- Original Message -----
From: "Gianluca Cecchi" <gianluca.cecchi at gmail.com>
To: "Frantisek Kobzik" <fkobzik at redhat.com>
Cc: "users" <users at ovirt.org>
Sent: Monday, December 9, 2013 11:03:09 PM
Subject: Re: [Users] unable to use spice-html5 in chrome due to certificate error

On Mon, Dec 9, 2013 at 10:18 PM, Gianluca Cecchi wrote:

> I notice that inside the opened console window I still get this link:
> https://tekkaman.localdomain.local//ovirt-engine-spicehtml5-main.html?host=192.168.1.101&port=6100
>
> What determines the 192.168.1.101 part here?

I had WebSocketProxy enigne variable set to the ip... and this is what
determines url composition...
So now after
engine-config -s WebSocketProxy=tekkaman.localdomain.local:6100

and restart of whole AIO server, on it I have

[root at tekkaman ~]# netstat -an|grep 6100
tcp        0      0 0.0.0.0:6100            0.0.0.0:*               LISTEN

[root at tekkaman ~]# iptables -L -n | grep 6100
ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0            state
NEW tcp dpt:6100

from client
[g.cecchi at ope46 ~]$ telnet tekkaman.localdomain.local 6100
Trying 192.168.1.101...
Connected to tekkaman.localdomain.local.
Escape character is '^]'.

still from my client, both using firefox and chrome as a test I get
only black window
Inside firefox debugger for this window I see
[22:53:17.949] Firefox can't establish a connection to the server at
wss://tekkaman.localdomain.local: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.
@ https://tekkaman.localdomain.local//ovirt-engine-files/spice-html5/spiceconn.js:34
[22:53:17.950] "ERROR: >> WebSockets.onerror[object Event]"
[22:53:17.951] "ERROR: [object Event]"
[22:53:17.951] ">> disconnect"
[22:53:17.952] "<< disconnect"

How to further debug to solve?