[pve-devel] spice tls + proxy: ssl_verify.c:484:openssl_verify: ssl: hostname

[Dietmar Maurer]

> the proxy address is generated here :
> 
> http://lists.freedesktop.org/archives/spice-devel/2012-August/010610.html
> 
> +    address = g_proxy_address_new(G_INET_ADDRESS(it->data), pport,
> "http",
> +                                      s->host, port, NULL, NULL);
> +        if (address != NULL)
> 
> 
> (NULL,NULL are login/password, so we just need to extend the proxy
> parameter in the spice lib (client side)
> 
> something like = http://user:pass@host:port

Sigh, so we cannot encode anything in the host.

> And try to push it upstream.

Maybe, but that can take a long time?

Just found the following in virt-viewer-file.c:

* - ca: string PEM data (use \n to seperate the lines)
* - host-subject: string

What is 'host-subject' used for?