Spice client on windows cannot connect

[bkraegelin]

When I try to connect from my Win7 machine, I get the error:

"Unable to connect to the graphic server"

After a little searching around I tried all hints, nothing helps.

I ran remote-viewer with option --debug to see error messages.
I did this within one second(!!) after download of the config file.

What I can see is:

((null):8896): Spice-Warning **: ../../../spice-common/common/ssl_verify.c:428penssl_verify:
Error in certificate chain verification: certificate has expired
(num=10:depth1:/CN=Proxmox Virtual Environment/OU=5554741f7f9da7f9f644ea30d27c181a/O=PVE Cluster Manager CA)
(remote-viewer.exe:8896): GSpice-WARNING **: main-1:0: SSL_connect: error:00000001:
lib(0):func(0):reason(1)

Server and Client have correct date and time and both have German Summer Time (CEST).

Any help?

Thanks
Birger

 

[miguelo]

Are you using Kaspersky Antivirus?

I had the same problem with that. I solved it by disabling web antivirus option in kaspersky configuration settings.

 

[bkraegelin]

I managed to decode the certificatewhich gets delivered in the .vv file.

It says
Valid From: December 31, 2001
Valid To: December 29, 2011

Where do I have to update the server certificate?

Thanks
Birger

 

[dietmar]

Valid From: December 31, 2001
Valid To: December 29, 2011

Who issued the certificate?

 

[bkraegelin]

Nobody - I didn't install any certificate. It might be the selfsigned one by installation of Proxmox.

 

[dietmar]

It might be the selfsigned one by installation of Proxmox.

Please check the 'Issuer' attribute inside the certificate.

Anyways, maybe system time was wrong at installation time? To reinstall the certs, use

# pvecm updatecerts --force

 

[bkraegelin]

I did this on all three nodes and rebootet all of them. It didn't help.

Certificate Information:
Common Name: Proxmox Virtual Environment
Organization: PVE Cluster Manager CA
Valid From: December 31, 2001
Valid To: December 29, 2011
Issuer: Proxmox Virtual Environment, PVE Cluster Manager CA

I still have this certificate in /etc/pve/pve-root-ca.pem.

Success:
Found in another thread this hint:
>Try to remove the and regenerate the CA certificate:
>
># rm /etc/pve/pve-root-ca.pem

This did it.

Thanks
Birger