Hi, I followed http://spice-space.org/page/SSLConnection and used --host-subject.
I use: spicec -h 192.168.0.5 -s 5924 --host-subject C=DE,L=Berlin,O=MyTestingBench,CN=spiceserver It Command runs with the Linuxclient without a Problem. On Windows it crashes as I described it. When I remove the [0] from (char*)&options.host_auth.host_pubkey[0] it works without an Problem. Greetings Thomas Tyminski Berlin , Germany > Hi, > after quick look and user's perspective, Did you specify --host-subject on > the client side? > It would give you an error If you do not. > > ----- Original Message ----- >> From: thom...@cs.tu-berlin.de >> To: spice-devel@lists.freedesktop.org >> Sent: Tuesday, June 21, 2011 12:50:04 PM >> Subject: [Spice-devel] Spice-Client Windows + SSL Bug+fix ? >> Hi, >> I tried to use SSL with the Windowsclient. >> >> When I use the old one (from >> http://spice-space.org/download/binaries/spice-client-win32-0.6.3.zip): >> >> 1308268882 INFO [11344:8892] Platform::set_clipboard_owner: new >> clipboard >> owner: none >> 1308268882 INFO [11344:8892] PlatformWinProc: Unsupported clipboard >> format >> 1308268882 INFO [11344:8892] Application::main: starting 0.5.0.0 >> 1308268882 INFO [11344:8892] GUI::GUI: >> 1308268883 INFO [11344:8892] ForeignMenu::ForeignMenu: Creating a >> foreign >> menu connection SpiceForeignMenu-11344 >> 1308268883 INFO [11344:10072] RedPeer::connect_unsecure: Trying >> 192.169.0.5 5924 >> 1308268883 INFO [11344:10072] RedPeer::connect_unsecure: Connected to >> 192.169.0.5 5924 >> 1308268884 WARN [11344:10072] RedPeer::connect_secure: failed to >> connect >> w/SSL, ssl_error error:00000001:lib(0):func(0):reason(1) >> 1308268884 WARN [11344:10072] RedChannel::run: SSL Error: >> 1308268884 INFO [11344:8892] WinMain: Spice client terminated >> (exitcode = 7) >> >> in the spicec.log. >> >> The Server says: >> reds_handle_ssl_accept: SSL_accept failed, error=1 >> >> So I tried to compile it by myself. >> Spice 0.8.1 won't compile but the current master branch. >> >> Debug spicec.exe gives me an Assertion Runtimeerror: >> "vector subscript out of range". >> >> Server says on that: >> reds_handle_ssl_accept: SSL_accept failed, error=5 >> >> The Runtimeerror is triggered inside the Methode "connect_secure" of >> the >> class "RedPeer". >> Concretely Line 184 fw. >> "verify = spice_openssl_verify_new( >> _ssl, auth_flags, >> host, >> (char*)&options.host_auth.host_pubkey[0], >> options.host_auth.host_pubkey.size(), >> options.host_auth.host_subject.c_str());" >> seems to be the Problem. >> Changing Line 187 to >> "(char*)&options.host_auth.host_pubkey" fixes that Problem and I can >> run >> the Client with SSL. >> >> Btw. the variable vertify is never used (expect of freeing it) and >> options.host_auth.host_pubkey is empty/NULL, shouldn't it contain the >> data >> from spice_truststore.pem)? >> >> Greetings >> Thomas Tyminski >> Berlin , Germany >> >> ================= >> P.S: >> If you already received this E-Mail, I am sorry for that. >> >> _______________________________________________ >> Spice-devel mailing list >> Spice-devel@lists.freedesktop.org >> http://lists.freedesktop.org/mailman/listinfo/spice-devel > _______________________________________________ Spice-devel mailing list Spice-devel@lists.freedesktop.org http://lists.freedesktop.org/mailman/listinfo/spice-devel
