[SOLVED] SPICE configuration with outdated certs

[Baumkuchen]

Hello,

I'm trying to set up SPICE for my guest OS Ubuntu 22.X on Proxmox 8.0.4. I followed the instructions from the given web sites:
Proxmox SPICE Guide
OSTechNix SPICE Guide

In summary, I added the SPICE display with 32 Mb and disabled the proxmox and client firewalls.
So far, SPICE would only throw the error "unable to connect to the graphic server PATH.TO.DOWNLOADED.FILE" when using virt-viewer as client 11.0 on a Windows 11 home machine. Virt Viewer

Any ideas how to solve the problem?

 

[Baumkuchen]

seems like pier00 has the same issue: Unable to connect to graphical server
I still couldn't resolve mine.

 

[Baumkuchen]

Here is my *.vv config file, just in case. The suffix-part of CN=myproxmoxhost.localdomain seems obsolete.
Do I need to resign the certificate for some reason?

[virt-viewer]
secure-attention=Ctrl+Alt+Ins
release-cursor=Ctrl+Alt+R
ca=-----BEGIN CERTIFICATE-----
...
\n-----END CERTIFICATE-----\n
tls-port=61000
title=VM 221
host-subject=OU=PVE Cluster Node,O=Proxmox Virtual Environment,CN=myproxmoxhost.localdomain
password=HEXNUMBERPASSWORD
proxy=http://myproxmoxhost:3128
type=spice
host=pvespiceproxy:HEXANDNUMBERS:myproxmoxhost::HEXANDNUMBERS
toggle-fullscreen=Shift+F11
delete-this-file=1

 

[Baumkuchen]

well, at least I'm on track. Syslog spits out the following while trying a connection:

Oct 27 23:27:06 myproxmoxhost QEMU[86378]: kvm: warning: Spice: error:0A000415:SSL routines::sslv3 alert certificate expired
Oct 27 23:27:06 myproxmoxhost QEMU[86378]: kvm: warning: Spice: ../server/red-stream.cpp:541:red_stream_ssl_accept: SSL_accept failed, error=1
Oct 27 23:27:06 myproxmoxhostspiceproxy[3383]: problem with client ::ffff:192.168.10.2; Connection reset by peer

I could solve the issue by following those topics:
https://forum.proxmox.com/threads/spice-error-unable-connect-to-graphic-server.108484/
https://forum.proxmox.com/threads/solved-pve-certificate-expires-in-more-than-2-years.79152/

pvecm updatecerts -f

did the trick.