Re: [Spice-devel] SSL connect problem

2012-03-26 Thread Christophe Fergeau
Hey, On Fri, Mar 23, 2012 at 10:04:35PM +0200, Alon Levy wrote: > Huh? It's known to fail so you have to relaunch spicec or just that > failed connections appear in the log? the later is the only thing I know > of. Any BZ? The former, this is https://bugzilla.redhat.com/show_bug.cgi?id=723582 Ch

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread Alon Levy
On Fri, Mar 23, 2012 at 11:37:47AM +0100, David Jaša wrote: > Anthony James píše v Pá 23. 03. 2012 v 06:26 -0400: > > David, > > > > Thanks for the reply. I've tried adding --ca-file to the spicec > > command line but still receive the same error. Here is the command: > > > > spicec -h localhos

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread Anthony James
Problem resolved, it was a cert issue. Thanks for the help. On Fri, Mar 23, 2012 at 8:03 AM, Anthony James wrote: > I did have spaces after the commas in the host subject but after > regenerating the certs and modifying the command I receive the same error. > I followed the steps to create the

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread David Jaša
Anthony James píše v Pá 23. 03. 2012 v 08:03 -0400: > I did have spaces after the commas in the host subject but after > regenerating the certs Hi Anthony, You should not need to regenerate the certs, just do 's/, /,/' on the existing string. > and modifying the command I receive the same error

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread Anthony James
I did have spaces after the commas in the host subject but after regenerating the certs and modifying the command I receive the same error. I followed the steps to create the certs from the http://www.spice-space.org/page/SSLConnection site. Should those steps work? On Fri, Mar 23, 2012 at 7:36

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread David Jaša
Hi Anthony, I don't see anything clearly wrong in what you posted in your last two mails. Just one note: -spice addr=127.0.0.1 means that the host will only be accessible on the localhost - if you add "" element to "" element in domain xml, qemu will bind to all ipv4 addresses. I'd just check the

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread Anthony James
I just tried connecting using remote-viewer, here is the command: remote-viewer --spice-ca-file=ca-cert.pem --spice-host-subject="$HOSTSUBJECT" spice://localhost/?port=$PORT&tls-port=$SPORT It connects but using only the non-tls port. When I remove port=$PORT to try and force it to use the tls-p

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread Anthony James
I created and started the VM with virt-manager. Here is what looks like the qemu cmd from /var/log/libvirt/qemu/$VM.log /usr/bin/qemu-kvm -S -M pc-0.15 -cpu core2duo,+lahf_lm, +rdtscp,+popcnt,+sse4.2,+sse4.1,+pdcm,+xtpr,+cx16,+tm2,+est,+smx,+vmx,+ds_cpl,+dtes64,+pbe,+tm,+ht,+ss,+acpi,+ds -enable

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread David Jaša
Anthony James píše v Pá 23. 03. 2012 v 06:46 -0400: > David, > > > I just tried about 20 times in a row, same error. When you say it's a > known bug in spicec when connecting manually, what is the alternative > to connecting manually? Is this bug present in spicy or > remote-viewer? Thanks in

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread Anthony James
David, I just tried about 20 times in a row, same error. When you say it's a known bug in spicec when connecting manually, what is the alternative to connecting manually? Is this bug present in spicy or remote-viewer? Thanks in advance. On Fri, Mar 23, 2012 at 6:37 AM, David Jaša wrote: > An

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread David Jaša
Anthony James píše v Pá 23. 03. 2012 v 06:26 -0400: > David, > > Thanks for the reply. I've tried adding --ca-file to the spicec > command line but still receive the same error. Here is the command: > > spicec -h localhost -p $PORT -s $SPORT --secure-channels all > --host-subject "$HOSTSUBJECT"

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread Anthony James
David, Thanks for the reply. I've tried adding --ca-file to the spicec command line but still receive the same error. Here is the command: spicec -h localhost -p $PORT -s $SPORT --secure-channels all --host-subject "$HOSTSUBJECT" --ca-file ca-cert.pem -w $PASSWD Same error: Error: failed to c

Re: [Spice-devel] SSL connect problem

2012-03-23 Thread David Jaša
Hi Anthony, Anthony James píše v Čt 22. 03. 2012 v 15:40 -0400: > I'm having problems connecting to a spice virtual machine using SSL. > I use the following command to connect: > > > spicec -h localhost -p $PORT -s $SPORT --secure-channels all > --host-subject "$HOSTSUBJECT" -w $PASSWD > You'r

[Spice-devel] SSL connect problem

2012-03-22 Thread Anthony James
I'm having problems connecting to a spice virtual machine using SSL. I use the following command to connect: spicec -h localhost -p $PORT -s $SPORT --secure-channels all --host-subject "$HOSTSUBJECT" -w $PASSWD The error I receive is: Error: failed to connect w/SSL, ssl_error error:0001:lib