NO VNC console Disconnect 1006 NEW

AntoWkill

Member
Jul 31, 2013
73
1
6
Hello,
From today without do nothing my novnc console stop working, its load and i can see the vm screen for 1-2 second and after disconnect and recharge.

The error is with ALL browser, i have also tried from Mobile Phone and i have the same error.

How can i solve this problem?


Problem found but not the solution: IF I ENABLE SSLV3 (FORCED) in: /usr/share/perl5/PVE/Service/pveproxy.pm the VNC CONSOLE start again to WORK. So the problem is TLS.





proxmox-ve: 4.4-95 (running kernel: 4.4.15-1-pve)
pve-manager: 4.4-18 (running version: 4.4-18/ef2610e8)
pve-kernel-4.4.79-1-pve: 4.4.79-95
pve-kernel-4.4.15-1-pve: 4.4.15-60
pve-kernel-4.2.8-1-pve: 4.2.8-41
pve-kernel-4.4.76-1-pve: 4.4.76-94
lvm2: 2.02.116-pve3
corosync-pve: 2.4.2-2~pve4+1
libqb0: 1.0.1-1 pve-cluster: 4.0-52
qemu-server: 4.0-112
pve-firmware: 1.1-11
libpve-common-perl: 4.0-96
libpve-access-control: 4.0-23
libpve-storage-perl: 4.0-76
pve-libspice-server1: 0.12.8-2
vncterm: 1.3-2
pve-docs: 4.4-4
pve-qemu-kvm: 2.7.1-4
pve-container: 1.0-101
pve-firewall: 2.0-33
pve-ha-manager: 1.0-41
ksm-control-daemon: 1.2-1
glusterfs-client: 3.5.2-2+deb8u3
lxc-pve: 2.0.7-4
lxcfs: 2.0.6-pve1
criu: 1.6.0-1
novnc-pve: 0.5-9
smartmontools: 6.5+svn4324-1~pve80
zfsutils: 0.6.5.9-pve15~bpo80
 
Last edited:
are you sure the VM is running ?
what is the output of

qm status my_vm_id

or

pct status my_ct_id

if you have a container here
 
qm status 100
status: running
Of course the vm is running, and the problem is with ALL vm with ALL device.

I post a video of strage beheviur for the console, who with a good connection open the screen for 5-10second and after reload again without do nothing.

 
set 25 12:52:29 ns3008621 pveproxy[372]: problem with client XXXX; ssl3_read_bytes: sslv3 alert bad certificate
I've already tried both letsencrypt and with the default certificate (the error becomes sslv3 alert unknown ca)

Please help!
 
Also, spiceproxy have problem: Sep 25 16:41:51 ns3008621 spiceproxy[2340]: problem with client XXXXXX;
Connection terminated by the correspondent
 
Problem found but not the solution: IF I ENABLE SSLV3 (FORCED) in: /usr/share/perl5/PVE/Service/pveproxy.pm the VNC CONSOLE start again to WORK. So the problem is TLS. @dcsapak @manu
 
Same problem for me: no console running if I access it via nginx reverse proxy. Accessing directly on port 8006, it works ....
 
no idea... do you use commercial/self-signed certificates (i mean not the autogenerated ones)?
do you use client certificates in your browsers?
did you set to trust the certificate pve uses?
do you have a proxy inbetween you and the pve host?
is your connection very slow?
 
no idea... do you use commercial/self-signed certificates (i mean not the autogenerated ones)?
do you use client certificates in your browsers?
did you set to trust the certificate pve uses?
do you have a proxy inbetween you and the pve host?
is your connection very slow?


I have installed LetEncrypy 1 month ago (so the problem isn't connected) already tried to remove it a
 
first, please stop deleting your posts, only to write it again to bump your post, if nobody answers, this most often has a reason (not knowing what the problem is, etc.)
second, i do not have a clue why it does not work for you, and i never saw this myself
you ruled out your certificates, but maybe you should consider this again and reset your certificates with
Code:
pvecm updatecerts --force

to try if this was your problem