Re: [Spice-devel] problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
> Also, do you account for intermediate CA in your setup? You have basically > two options how to handle it: > > 1) "standard": server-cert.pem should contain the whole chain of certificates > under root CA, e.g: > * Int. CA 1 > * Int. CA 2 > * server cert > you just cat them to the fi

Re: [Spice-devel] [SOLVED again] video performance in rhel/centos 7 vs fedora 20

2014-08-25 Thread David Mansfield
On 08/06/2014 01:47 PM, David Mansfield wrote: On 07/16/2014 05:39 PM, David Mansfield wrote: On 07/15/2014 11:22 AM, Marc-André Lureau wrote: Hi - Original Message - Hi All, We have been piloting deployments of VM using Fedora 20 host and guest and have been very happy with perfo

Re: [Spice-devel] failed to initialize directx in w7

2014-08-25 Thread Alon Levy
On 08/21/2014 04:48 AM, arnaud gaboury wrote: > I am not sure this issue is tight to Red Hat qxl GPU driver, but I > can't initialize directxX on a guest windows 7. > > Trying to start a game, I get the merror message : > Failed to initialize directX > > Of course, directX is installed on the w7

Re: [Spice-devel] problems with intermediate certificates

2014-08-25 Thread Dietmar Maurer
> To make sure I understand, you start with a Root CA which I assume you > generated yourself and is self-signed? We use official certs from "StartCom Certification Authority" using " StartCom Class 2 Primary Intermediate Server CA" intermediate CA. But we just observed that the same setup wor

[Spice-devel] failed to initialize directx in w7

2014-08-25 Thread arnaud gaboury
I am not sure this issue is tight to Red Hat qxl GPU driver, but I can't initialize directxX on a guest windows 7. Trying to start a game, I get the merror message : Failed to initialize directX Of course, directX is installed on the w7 guest, and properly. The dxdiag command, a directx diagnosti

Re: [Spice-devel] problems with intermediate certificates

2014-08-25 Thread David Jaša
Hi Dietmar, do the certificate setup works for other TLS apps, such as web server/browser or just simple openssl s_(server|client)? Also, do you account for intermediate CA in your setup? You have basically two options how to handle it: 1) "standard": server-cert.pem should contain the whole cha

Re: [Spice-devel] problems with intermediate certificates

2014-08-25 Thread Christophe Fergeau
Hey, On Fri, Aug 22, 2014 at 08:22:22AM +, Dietmar Maurer wrote: > I use the following certificate files: > > # openssl verify -CAfile /etc/pve/pve-root-ca.pem /etc/pve/local/pve-ssl.pem > /etc/pve/local/pve-ssl.pem: OK > > I pass the content of /etc/pve/pve-root-ca.pem to virt-viewer: > [vi

Re: [Spice-devel] [PATCH spice-gtk] win32: fix coroutine assertion when switching to TLS port

2014-08-25 Thread Christophe Fergeau
On Thu, Aug 21, 2014 at 07:16:11PM +0200, Marc-André Lureau wrote: > Since v0.21-35-gbaa51c5, there are some new coroutine preconditions. > > The winfiber implementation can reach, when the structure isn't cleared, > which happens when switching channel connection to TLS port and the > coroutine i