Bug 106764

Summary:	specifying --spice-ca-file yields Load CA, file: (null)
Product:	Spice	Reporter:	Shem Pasamba <shemgp>
Component:	spice-gtk	Assignee:	Spice Bug List <spice-bugs>
Status:	RESOLVED MOVED	QA Contact:
Severity:	normal
Priority:	medium	CC:	teuf
Version:	unspecified
Hardware:	Other
OS:	All
Whiteboard:
i915 platform:		i915 features:

Description Shem Pasamba 2018-06-01 01:29:55 UTC

Hello,

I'm trying to connect to Proxmox spice server and it doesn't work so I'm trying: remote-viewer --spice-ca-file /etc/ssl/certs/ca-certificates.crt --spice-debug ~/Downloads/spiceproxy

But the output says:

(remote-viewer:24345): GSpice-DEBUG: 09:19:59.374: spice-session.c:286 New session (compiled from package spice-gtk 0.34)
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.374: spice-session.c:290 Supported channels: main, display, inputs, cursor, playback, record, smartcard, usbredir, webdav
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.374: usb-device-manager.c:509 auto-connect filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.382: spice-session.c:1743 no migration in progress
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.383: spice-channel.c:146 main-1:0: spice_channel_constructed
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.383: spice-session.c:2246 main-1:0: new main channel, switching
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: usb-device-manager.c:974 device added 058f:6366 (0x55c9448fc520)
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: usb-device-manager.c:974 device added 0c76:1608 (0x55c9447c3450)
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: usb-device-manager.c:974 device added 0ac8:3420 (0x55c9448cc1d0)
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: usb-device-manager.c:974 device added 04d9:1702 (0x55c944917e20)
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: spice-channel.c:2688 main-1:0: Open coroutine starting 0x55c944977560
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: spice-channel.c:2529 main-1:0: Started background coroutine 0x55c944976be0
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: spice-session.c:2180 Missing port value, not attempting unencrypted connection.
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: spice-channel.c:2555 main-1:0: trying with TLS port
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.451: spice-session.c:2192 main-1:0: Using TLS, port 61004
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.452: spice-session.c:2140 (with proxy http://decapolis.cc.aiias.edu:3128)
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.476: spice-session.c:2064 proxy lookup ready
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.476: spice-session.c:2047 main-1:0: connecting 0x7eff411e7a70...
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.479: spice-session.c:2031 main-1:0: connect ready
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.480: spice-channel.c:2451 main-1:0: Load CA, file: (null), data: 0x55c9448b9000

(remote-viewer:24345): GSpice-WARNING **: 09:19:59.481: main-1:0: SSL_connect: error:00000001:lib(0):func(0):reason(1)
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.481: spice-channel.c:2665 main-1:0: Coroutine exit main-1:0
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.481: spice-channel.c:2858 main-1:0: reset 
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.481: channel-main.c:1539 agent connected: no
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.481: spice-channel.c:2800 main-1:0: channel reset
(remote-viewer:24345): GSpice-DEBUG: 09:19:59.482: spice-channel.c:2410 main-1:0: Delayed unref channel 0x55c944977560
(remote-viewer:24345): GSpice-DEBUG: 09:20:01.653: spice-session.c:1937 session: disconnecting 0
(remote-viewer:24345): GSpice-DEBUG: 09:20:01.653: spice-session.c:286 New session (compiled from package spice-gtk 0.34)
(remote-viewer:24345): GSpice-DEBUG: 09:20:01.653: spice-session.c:290 Supported channels: main, display, inputs, cursor, playback, record, smartcard, usbredir, webdav
(remote-viewer:24345): GSpice-DEBUG: 09:20:01.654: usb-device-manager.c:509 auto-connect filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
(remote-viewer:24345): GSpice-DEBUG: 09:20:01.661: spice-session.c:1937 session: disconnecting 0

As you can see the SSL_connect files, and I'm guessing, because the CAFile is empty?

Please help. Thank you.

Comment 1 Shem Pasamba 2018-06-01 01:32:31 UTC

Using remote-viewer version 6.0

Comment 2 Christophe Fergeau 2018-06-01 15:58:04 UTC

(In reply to Shem Pasamba from comment #0)
> Hello,
> 
> I'm trying to connect to Proxmox spice server and it doesn't work so I'm
> trying: remote-viewer --spice-ca-file /etc/ssl/certs/ca-certificates.crt
> --spice-debug ~/Downloads/spiceproxy
> 
> But the output says:
> 
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.476: spice-session.c:2064
> proxy lookup ready
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.476: spice-session.c:2047
> main-1:0: connecting 0x7eff411e7a70...
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.479: spice-session.c:2031
> main-1:0: connect ready
> (remote-viewer:24345): GSpice-DEBUG: 09:19:59.480: spice-channel.c:2451
> main-1:0: Load CA, file: (null), data: 0x55c9448b9000
> 
> (remote-viewer:24345): GSpice-WARNING **: 09:19:59.481: main-1:0:
> SSL_connect: error:00000001:lib(0):func(0):reason(1)
> As you can see the SSL_connect files, and I'm guessing, because the CAFile
> is empty?

When using a .vv file (~/Downloads/spiceproxy) together with --spice-ca-file, the CA specified in the 'spiceproxy' file will take precedence over the one you specified on the command line, that's why you are getting CAFile(null).
However, you should not be getting a file with an invalid CA from proxmox. Maybe it's misconfigured? There is this bug opened https://bugs.freedesktop.org/show_bug.cgi?id=94063 but the error message is different, so probably not the same one.

Comment 3 GitLab Migration User 2018-06-03 10:20:30 UTC

-- GitLab Migration Automatic Message --

This bug has been migrated to freedesktop.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.freedesktop.org/spice/spice-gtk/issues/13.

Use of freedesktop.org services, including Bugzilla, is subject to our Code of Conduct. How we collect and use information is described in our Privacy Policy.