Spice error unable connect to graphic server

cvdveer

New Member
Apr 22, 2022
1
0
1
Hello,

Can't connect to any of the Spice enabled windows guests.
I can see SSL warnings but I need some assistance resolving them. I suspect the expired certificate but since I didn't touch that configuration I expected it to work with regular proxmox updates.

Apr 22 18:27:37 sarah QEMU[6387]: kvm: warning: Spice: error:14094415:SSL routines:ssl3_read_bytes:sslv3 alert certificate expired
Apr 22 18:27:37 sarah QEMU[6387]: kvm: warning: Spice: red-stream.c:542:red_stream_ssl_accept: SSL_accept failed, error=1

Regards,

Christiaan
 
Same problem for me. Regenerating the certificates did the trick, but all KVM machines must be fully stopped, and the restarted.
 
I'm getting

Code:
Mar 09 04:25:45 vlogic3 QEMU[2449776]: kvm: warning: Spice: error:14094415:SSL routines:ssl3_read_bytes:sslv3 alert certificate expired

I'm off to research updating certs, but noticed the comment above about the restarts
 
Well here is what I have ended up with so far

pvecm updatecerts --force

Gives me the following
Code:
(re)generate node files
generate new node certificate
CA expires in less than 2 weeks, unable to generate certificate.


viewing ssl cert data shows vailid sine 2023-01-25 05:14:45 expires 2023-02-06 05:14:45

The CA cert shows an expiration of 2023-02-09

I'm unsure how to work around/fix the CA expires unable to generate certificate error. Maybe a reboot is in order?
 
  • Like
Reactions: Torpedro1978