[ovirt-users] Re: websockify + ovirt

2021-03-24 Thread Pascal D
finally got it. I needed to force --ssl-version=tls1.2 I will write a summary of my findings fot anyone interested. ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statement: https://www.ovirt.org

[ovirt-users] Re: websockify + ovirt

2021-03-24 Thread Pascal D
I think part of my misunderstanding is that ovirt-websocket-proxy does a few things behind the scene as it is not the source of the initial connection to ovirt. I am going another route. My proxy are servers which get the console.vv file from ovirt when they are alerted someone wants to make a

[ovirt-users] Re: websockify + ovirt

2021-03-23 Thread Pascal D
Michal, Could you explain in details this part of your email? > We modified the client to sign the request for proxy that is verified by the > (also > modified) proxy. There are small changes but they would need to be done for > any other > client you’re trying to use (and for the proxy if you’

[ovirt-users] Re: websockify + ovirt

2021-03-23 Thread Pascal D
Michal, Thank you for your response. I know I am all over the place as I am trying to figure what works and what doesn't. What I know so far is this. spice-web-client from eyeos https://github.com/eyeos/spice-web-client and the forked version from flex-vdi https://github.com/flexVDI/spice-web-

[ovirt-users] Re: websockify + ovirt

2021-03-23 Thread Michal Skrivanek
> On 19. 3. 2021, at 20:26, Pascal DeMilly wrote: > > I will. I wish there was more documentation on how all of this works. My > current test sniffing the network show that actually the traffic is not on > the port as defined in the console file but on the tls-port of that file. so > I am a

[ovirt-users] Re: websockify + ovirt

2021-03-22 Thread Pascal D
Has someone able to get spice-html5 or any other web client working with ovirt? I am using 4.3 and trying to get it working but so far no luck? ___ Users mailing list -- users@ovirt.org To unsubscribe send an email to users-le...@ovirt.org Privacy Statem

[ovirt-users] Re: websockify + ovirt

2021-03-19 Thread Pascal D
This is currently what I got: CONSOLE is the path to the console.vv file just downloaded. I have tested that logic with remote-viewer. So I know this is working at least. Now my goal is to get spice-web-client to work as well. However I am not understanding yet everything about the expectation o

[ovirt-users] Re: websockify + ovirt

2021-03-19 Thread Pascal DeMilly
I will. I wish there was more documentation on how all of this works. My current test sniffing the network show that actually the traffic is not on the port as defined in the console file but on the tls-port of that file. so I am a little confused how all of this works. And since everything is SSLe

[ovirt-users] Re: websockify + ovirt

2021-03-19 Thread Vincent Royer
> > Obviously I am assuming spice-html5 works with ovirt. Maybe it doesn't. I > was never able to make it work except with direct libvirt over spice. > I could never get the html5 implementation working. If you get this new spice-web-client working, please post your config to the list! > _

[ovirt-users] Re: websockify + ovirt

2021-03-19 Thread Pascal D
Thanks for your response. From it I deduct that the authentication must happen from the client not the proxy. however I am not finding any code in spice-html5 which would confirm this. So my thinking is that the authentication must happen on the websockify side. From the websockify docs I can

[ovirt-users] Re: websockify + ovirt

2021-03-19 Thread Pascal DeMilly
AGPL spice-web-client is a spice html5 library from eyeos with another fork from flexvdi. I have tested them with libvirt (no encryption/authentication) and they really work great. I want to use them with Ovirt since spice-html5 is under-performant. However with ovirt I have to deal with authentica

[ovirt-users] Re: websockify + ovirt

2021-03-19 Thread Michal Skrivanek
Hi, > On 19. 3. 2021, at 3:56, Pascal D wrote: > > Hi, > > I am trying to get the spice-web-client working with ovirt. what is spice-web-client? > One area where I am having difficulties is authentication.Looking at > remote-viewer on linux I am able to see that the minimum fields to have a