Red Hat Bugzilla – Bug 815175
virt-viewer failed to initialize software smartcard.
Last modified: 2013-08-04 23:43:39 EDT
Created attachment 579401 [details] This is what I got with --spice-debug option. Description of problem: virt-viewer failed to initialize software smartcard. Version-Release number of selected component (if applicable): virt-viewer-0.5.2-5.el6.x86_64 How reproducible: 100% Steps to Reproduce: 1. Imaging there is a running guest, and executed #yum groupinstall "smart card support". 2. mkdir ~/.netscape 3. certutil -N (use an empty password) 4. certutil -x -t "CT,CT,CT" -S -s "CN=cert1" -n cert1 5. certutil -x -t "CT,CT,CT" -S -s "CN=cert2" -n cert2 6. certutil -x -t "CT,CT,CT" -S -s "CN=cert3" -n cert3 7. spicec -p 5900 -h localhost --smartcard --smartcard-db ~/.netscape/ --smartcard-cert cert1,cert2,cert3 8. virt-viewer --spice-smartcard --spice-smartcard-db=~/.netscape/ --spice-smartcard-certificates=cert1,cert2,cert3 $guestname Actual results: 1. After step7, guest can read smart card successfully. 2. After step8, there is an error in terminal. "GSpice-WARNING **: Failed to initialize smart card", and guest cannot get software smart card." Expected results: 1. After step8, guest can get smart card just like spicec without error. Additional info: 1. remote-viewer --spice-smartcard --spice-smartcard-db=~/.netscape/ --spice-smartcard-certificates=cert1,cert2,cert3 spice://127.0.0.1:5900, this command has the same issue.
Step 8 works for me if I use the full path to ~/.netscape, /home/teuf/.netscape in my case. Can you confirm it's working for you too? It's also working if I change "--spice-smartcard-db=~/.netscape/" to "--spice-smartcard-db ~/.netscape/", and this makes the command line closer to the spicec one. spicy has the same behaviour so it's a spice-gtk bug. The behaviour with and without = is inconsistent, but most apps accepting an optional '=' in their options probably have the same behaviour (I think the shell does the ~ -> /home/foo/ substitution when it's preceded by a blank space, but not when there's a =). If you can confirm things are working for you with the changes I mentioned, then I think we can close this bug with no further action.
I have retried with following 2 commands virt-viewer --spice-smartcard --spice-smartcard-db ~/.netscape/ --spice-smartcard-certificates=cert1,cert2,cert3 $guestname virt-viewer --spice-smartcard --spice-smartcard-db /root/.netscape/ --spice-smartcard-certificates=cert1,cert2,cert3 $guestname Both of them works well for me.
Ok, thanks for retesting, I'm closing this bug then. If anyone disagree, just reopen it.