spice troubles with newer versions of remote-viewer

[Thomas Jagoditsch]

hi,

i've got an old small pve 3.4 cluster with 2 nodes and drbd 8.3 which works flawlessly for some years now.
it runs a small office environment with a file server VM and a couple of windows 7 VMs used with spice for the users, kind of VDI.
we did not upgrade for the drbd-not-supported-anymore reason and the cluster was reliable enough for its purpose.

recently i wanted to upgrade the (ubuntu-based) terminals but ran into a ssl issue with remote-viewer version 6.0.

opening a spice connection to one of the VMs via browser throws an error sayin "Verbindung zum Grafik-server <connection file name> konnte nicht hergestellt werden".
if i use (a debug added) spice-example-sh i get the output below.

i found some posts sayin that there is some issue with SSL/CAs etc. - we use no custom certs whatsoever.

is there any workaround to get a successfull connection with remote-viewer 6.0, for example via script that mods/edits the downloaded remote-viewer connection file or calls remote-viewer with params ?


tia,tja...

(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.569: Opening display to spiceproxy
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.569: Guest (null) has a spice display
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.569: spice-session.c:286 New session (compiled from package spice-gtk 0.34)
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.569: spice-session.c:290 Supported channels: main, display, inputs, cursor, playback, record, smartcard, usbredir, webdav
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.569: usb-device-manager.c:509 auto-connect filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.573: ignoring [ovirt] section content as URL, VM GUID are missing from the .vv file
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.573: After open connection callback fd=-1
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.573: Opening connection to display at spiceproxy
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.574: spice-session.c:1743 no migration in progress
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.575: spice-channel.c:146 main-1:0: spice_channel_constructed
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.575: spice-session.c:2246 main-1:0: new main channel, switching
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.575: New spice channel 0x5647de8043c0 SpiceMainChannel 0
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.575: notebook show status 0x5647de86a3b0
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: usb-device-manager.c:974 device added 046d:c069 (0x5647de6a5870)
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: usb-device-manager.c:974 device added 046d:c227 (0x5647de786020)
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: usb-device-manager.c:974 device added 046d:c226 (0x5647de78d230)
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: spice-channel.c:2688 main-1:0: Open coroutine starting 0x5647de8043c0
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: spice-channel.c:2529 main-1:0: Started background coroutine 0x5647de803a40
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: spice-session.c:2180 Missing port value, not attempting unencrypted connection.
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: spice-channel.c:2555 main-1:0: trying with TLS port
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.643: spice-session.c:2192 main-1:0: Using TLS, port 61003
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.656: spice-session.c:2140 (with proxy http://192.168.0.12:3128)
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.656: spice-session.c:2064 proxy lookup ready
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.657: spice-session.c:2047 main-1:0: connecting 0x7f5ceabfda70...
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.695: spice-session.c:2031 main-1:0: connect ready
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.696: spice-channel.c:2451 main-1:0: Load CA, file: (null), data: 0x5647de8f4000

(remote-viewer:14252): GSpice-WARNING **: 08:35:05.714: main-1:0: SSL_connect: error:00000001:lib(0):func(0):reason(1)
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.714: spice-channel.c:2665 main-1:0: Coroutine exit main-1:0
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.714: spice-channel.c:2858 main-1:0: reset
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.714: channel-main.c:1539 agent connected: no
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.714: spice-channel.c:2800 main-1:0: channel reset
(remote-viewer:14252): GSpice-DEBUG: 08:35:05.714: spice-channel.c:2410 main-1:0: Delayed unref channel 0x5647de8043c0
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.714: Destroy SPICE channel SpiceMainChannel 0
(remote-viewer:14252): virt-viewer-DEBUG: 08:35:05.714: zap main channel
(remote-viewer:14252): GSpice-DEBUG: 08:35:09.581: spice-session.c:1937 session: disconnecting 0
(remote-viewer:14252): GSpice-DEBUG: 08:35:09.581: spice-session.c:286 New session (compiled from package spice-gtk 0.34)
(remote-viewer:14252): GSpice-DEBUG: 08:35:09.581: spice-session.c:290 Supported channels: main, display, inputs, cursor, playback, record, smartcard, usbredir, webdav
(remote-viewer:14252): GSpice-DEBUG: 08:35:09.581: usb-device-manager.c:509 auto-connect filter set to 0x03,-1,-1,-1,0|-1,-1,-1,-1,1
(remote-viewer:14252): GSpice-DEBUG: 08:35:09.584: spice-session.c:1937 session: disconnecting 0

 

[tom]

3.4 is very outdated and a not supported version - so I doubt that you can get much help here.

=> upgrade to current version (5.x).

 

[Thomas Jagoditsch]

3.4 is very outdated and a not supported version - so I doubt that you can get much help here.

=> upgrade to current version (5.x).

thx tom.
i would do that gladly but im not sure that the drbd 8.3 configuration will work in 5.x ?!?

wbr,tja...

 

[tom]

as always, you need to test.

current drbd is managed by linstor. AFAIK, this is currently under heavy development.