[pve-devel] spice problems

Thu Jan 5 20:02:10 CET 2017

On Thu, 5 Jan 2017 16:21:38 +0100 (CET)
Dietmar Maurer <dietmar at proxmox.com> wrote:

> 
> If you do not want to debug yourself, please can you file a 
> bug at bugzilla.proxmox.com?
> 
I will do that but I think I have nailed the problem down to either
wrong instructions on the wiki or some kind af regression in pveproxy.

The certificate inside the pveproxy ticket is this one:
openssl x509 -in /tmp/cert -text -noout
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:97:1d:5b:17:b7:bc:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN = Proxmox Virtual Environment, OU = d43de9da-071f-4ae5-b05b-a31593bb5668, O = PVE Cluster Manager CA
        Validity
            Not Before: Dec 30 00:38:47 2016 GMT
            Not After : Dec 28 00:38:47 2026 GMT
        Subject: CN = Proxmox Virtual Environment, OU = d43de9da-071f-4ae5-b05b-a31593bb5668, O = PVE Cluster Manager CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (4096 bit)
                Modulus:
                    00:b2:c6:e5:a5:e6:8f:7e:48:44:2a:ca:40:50:b2:
                    8c:67:45:6a:ee:27:31:21:5d:3b:99:5b:71:8d:fe:
                    7c:74:e7:5f:5f:65:e1:74:55:a1:45:38:c8:1c:43:
                    7c:3e:d8:bd:d0:e1:49:f1:3b:2b:9e:78:eb:49:71:
                    54:27:2d:72:b5:0f:c3:5f:73:f0:22:6e:6c:cf:7b:
                    22:3d:fe:b4:cf:3b:61:43:7e:c9:54:a7:91:1b:33:
                    70:b2:4f:42:08:c0:a5:da:19:df:8d:02:f0:e9:0e:
                    db:dd:a1:c2:22:01:d1:4d:5c:41:e7:ac:3b:42:63:
                    f5:36:2d:56:94:7b:35:90:cc:a4:5d:6f:35:9d:c7:
                    43:72:c4:f2:8c:84:cf:fa:fa:bd:26:0b:04:bd:63:
                    57:ac:42:ba:d8:c4:72:65:d8:15:85:27:64:96:6c:
                    6a:24:6e:5a:42:1c:c4:c6:4a:14:c9:f5:9f:4b:45:
                    0e:82:9f:ad:75:b6:8a:72:62:91:e9:1c:3d:04:5b:
                    a9:49:ee:d6:7b:80:41:bb:04:e5:dc:51:5a:6b:c6:
                    82:e7:ad:2d:df:88:c3:f1:01:ea:c0:dc:ad:29:87:
                    78:64:fa:0b:ac:3f:fa:f4:3e:8b:02:98:c3:4c:d3:
                    9f:e7:79:6a:ca:8a:85:0a:4b:78:5a:b2:89:a9:d2:
                    03:d2:5c:38:23:88:43:b2:aa:d5:62:69:e1:95:cf:
                    11:5a:83:56:6c:69:ee:5d:87:2a:eb:b3:ae:04:ed:
                    05:bc:1d:97:94:30:2e:05:3b:0a:7a:ac:a8:11:c8:
                    fc:3b:55:17:9c:30:2e:60:72:db:06:f7:b3:f1:ef:
                    6d:aa:33:8f:4b:27:4c:96:aa:d8:f6:3d:52:c8:ee:
                    cf:48:13:e3:15:a1:ed:8a:69:d3:68:9b:fe:fd:e3:
                    f7:3b:3e:b1:06:02:c8:43:45:d3:85:03:ae:d7:6c:
                    cd:3b:d2:49:7d:a4:d8:52:7e:e5:8c:18:49:84:65:
                    a0:a6:13:97:6f:b2:77:c5:05:bd:79:97:19:4a:8e:
                    4e:01:f2:11:31:e3:a0:83:4d:3a:b7:78:01:9f:55:
                    24:4f:bd:5f:81:d3:83:7f:f0:17:b0:e0:da:13:12:
                    29:21:d0:53:e5:aa:3e:a9:de:73:f8:59:41:98:44:
                    45:1c:6e:a6:ec:e5:bf:34:58:00:fe:ce:de:76:88:
                    89:65:1f:5f:7c:ea:5e:e4:54:2c:92:d1:b9:a6:41:
                    54:6e:83:6c:ae:44:ff:dd:0d:0e:b8:a5:5c:5d:98:
                    17:c3:6d:19:9a:9d:95:13:13:92:7f:26:c8:ca:6b:
                    3e:9a:6f:8d:d8:8e:49:d9:f8:41:a0:bb:ca:f1:ab:
                    7f:45:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                89:8C:D1:79:FC:90:92:E4:FD:E7:60:54:D4:47:23:DA:DD:71:25:66
            X509v3 Authority Key Identifier: 
                keyid:89:8C:D1:79:FC:90:92:E4:FD:E7:60:54:D4:47:23:DA:DD:71:25:66

            X509v3 Basic Constraints: 
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:f2:7e:7a:77:86:08:3c:8f:71:c4:2b:c0:ce:ae:e8:61:
         3c:5f:a6:23:94:14:0f:90:a8:b3:0d:b7:e5:4e:0a:8a:25:85:
         2e:5d:a1:91:fa:4c:9e:40:9d:9a:18:f5:e6:8e:5e:36:fc:2d:
         6c:76:4e:e9:43:40:5c:e2:24:38:02:df:2a:ee:9d:2f:c5:82:
         64:fe:21:87:a0:91:99:5f:3e:1a:29:60:19:bd:f5:0e:fe:d9:
         27:ed:05:ab:4c:41:8f:0c:9f:c1:2f:8d:cd:93:3a:e9:d3:c3:
         42:c9:96:72:04:66:62:36:3b:6f:47:66:c8:32:19:ab:82:1a:
         5e:d8:69:19:49:dd:e8:a3:90:6e:e1:a1:e7:aa:a1:de:38:ef:
         34:19:a9:eb:de:e4:aa:ca:1d:e0:b6:14:94:91:c8:32:c0:23:
         65:34:68:c0:0a:bc:bf:bc:ca:b1:29:5a:64:2c:03:a1:8c:da:
         c1:d6:6e:95:cf:86:1c:19:e5:30:c1:15:b6:43:db:69:20:95:
         1e:c2:66:fa:89:d0:56:4f:53:2b:54:a1:0d:63:65:45:66:dd:
         ba:07:bd:4d:21:c4:a7:cf:f1:b1:08:45:f4:c9:13:6b:b6:89:
         c6:9e:cf:2b:a6:5c:4b:9e:cb:17:83:1d:86:5f:0a:be:84:ab:
         15:2e:58:e9:83:80:ca:41:42:6a:51:16:a8:e5:cc:fb:13:2a:
         08:2c:dc:13:64:c2:8c:ea:9d:62:a2:1e:b7:9d:ff:73:4f:56:
         2b:d8:c3:90:a8:35:fd:b6:43:bb:42:69:14:fe:db:5b:6b:2f:
         f6:4d:29:ef:8e:83:90:fa:1d:45:ea:59:3a:f5:b9:db:b1:18:
         19:3c:1b:f8:bd:50:3a:62:fb:36:49:fa:94:b7:be:97:f8:08:
         00:43:b6:f2:ae:fa:e9:8c:61:3f:0a:82:12:1f:b1:6d:a0:92:
         91:9e:a2:8a:fb:b4:7d:3c:70:67:1d:a0:e7:42:bb:5a:b7:4b:
         68:16:aa:87:d0:d4:02:55:f8:e9:d6:33:36:68:5a:c4:df:07:
         dd:d3:42:0e:00:b1:e6:21:65:ed:84:df:b5:d8:c0:de:dd:e7:
         94:07:8e:67:57:40:04:ca:37:2f:92:7d:46:47:de:51:ce:f4:
         c1:17:04:f0:57:bb:b2:29:75:6d:5c:6e:a5:00:81:cd:83:07:
         0b:cd:ea:e4:9a:f9:24:7d:6b:4d:dd:8a:d9:14:a5:ee:b9:65:
         fd:3a:61:fa:05:57:14:45:af:c5:e4:8b:c1:f7:72:16:c3:6f:
         db:08:75:c8:9e:e8:7d:16:66:08:e3:70:3c:9f:f8:9d:74:a8:
         70:1a:fa:1a:ff:75:a7:4c

Should that not have been the custom certificate?

-- 
Hilsen/Regards
Michael Rasmussen

Get my public GnuPG keys:
michael <at> rasmussen <dot> cc
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xD3C9A00E
mir <at> datanom <dot> net
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE501F51C
mir <at> miras <dot> org
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE3E80917
--------------------------------------------------------------
/usr/games/fortune -es says:
Lack of money is the root of all evil.
		-- George Bernard Shaw
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 195 bytes
Desc: OpenPGP digital signature
URL: <http://lists.proxmox.com/pipermail/pve-devel/attachments/20170105/c207c89f/attachment.sig>