Description of problem:
After spice passwdValidTo get expired, migration will disconnect the spice connection session

Version-Release number of selected component (if applicable):
libvirt-0.9.10-14.el6.x86_64
qemu-kvm-0.12.1.2-2.282.el6.x86_64
kernel-2.6.32-262.el6.x86_64
spice-gtk-0.11-8.el6.x86_64
spice-server-0.10.1-5.el6.x86_64
spice-client-0.8.2-15.el6.x86_64

How reproducible:
100%

Steps to Reproduce:
1.# date -u
Thu Apr 26 06:28:22 UTC 2012

2.define a guest with 
"<graphics type='spice' port='5900' tlsPort='5901' autoport='yes' passwd='redhat' passwdValidTo='2012-04-26T06:34:01'>
      <channel name='main' mode='secure'/>
      <channel name='record' mode='insecure'/>
    </graphics>"
in xml file.

3.modify the followings in /etc/libvirt/qemu.conf in both source and target machine for migration.
   -# spice_listen = "0.0.0.0"
   + spice_listen = "0.0.0.0"

   -# spice_tls = 1
   + spice_tls = 1

   -# spice_tls_x509_cert_dir = "/etc/pki/libvirt-spice"
   + spice_tls_x509_cert_dir = "/etc/pki/libvirt-spice"

4.#touch spice-script.sh
  #chmod +x spice-script.sh
  Add following content to the sh file:

#!/bin/bash

SERVER_KEY=server-key.pem

# creating a key for our ca
if [ ! -e ca-key.pem ]; then
    openssl genrsa -des3 -out ca-key.pem 1024
fi
# creating a ca
if [ ! -e ca-cert.pem ]; then
    openssl req -new -x509 -days 1095 -key ca-key.pem -out ca-cert.pem  -subj "/C=IL/L=Raanana/O=Red Hat/CN=my CA"
fi
# create server key
if [ ! -e $SERVER_KEY ]; then
    openssl genrsa -out $SERVER_KEY 1024
fi
# create a certificate signing request (csr)
if [ ! -e server-key.csr ]; then
    openssl req -new -key $SERVER_KEY -out server-key.csr -subj "/C=IL/L=Raanana/O=Red Hat/CN=my server"
fi
# signing our server certificate with this ca
if [ ! -e server-cert.pem ]; then
    openssl x509 -req -days 1095 -in server-key.csr -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 -out server-cert.pem
fi

# now create a key that doesn't require a passphrase
openssl rsa -in $SERVER_KEY -out $SERVER_KEY.insecure
mv $SERVER_KEY $SERVER_KEY.secure
mv $SERVER_KEY.insecure $SERVER_KEY

# show the results (no other effect)
openssl rsa -noout -text -in $SERVER_KEY
openssl rsa -noout -text -in ca-key.pem
openssl req -noout -text -in server-key.csr
openssl x509 -noout -text -in server-cert.pem
openssl x509 -noout -text -in ca-cert.pem

# copy *.pem file to /etc/pki/libvirt-spice
if [[ -d "/etc/pki/libvirt-spice" ]]
then
    cp ./*.pem /etc/pki/libvirt-spice
else
    mkdir /etc/pki/libvirt-spice
        cp ./*.pem /etc/pki/libvirt-spice
fi

# echo --host-subject
echo "your --host-subject is" \" `openssl x509 -noout -text -in server-cert.pem | grep Subject: | cut -f 10- -d " "` \"


5.# ./spice-script.sh

6.# scp /etc/pki/libvirt-spice/* $destination_IP:/etc/pki/libvirt-spice/

7. restart libvirtd in both two machines to rescan the configuration
   # service libvirtd restart

8. define and start the guest
   # virsh define guest.xml
   # virsh start guest 

9. access the spice interface with ssl connection on source machine , and keep the spice session connected
   # spicec -h 10.66.4.232 -p 5900 -s 5901 --host-subject "C=IL,L=Raanana,O=Red Hat,CN=my server" --ca-file /etc/pki/libvirt-spice/ca-cert.pem --secure-channels main --enable-channels all -w redhat

10. wait until spice passwdValidTo get expired , don't close the spice session on source machine, migrate guest on source machine 
   # date -u
   Thu Apr 26 06:35:00 UTC 2012 

   # virsh migrate --live guest qemu+ssh://$destination_IP/system

   Note:
   10.66.4.232 --- your source host IP
   5900 --- the port you defined in xml graphic section
   5901 --- the tlsPort you defined in xml graphic section
   redhat --- the passwd you set in the xml graphic section
   "C=IL,L=Raanana,O=Red Hat,CN=my server" --- is got from command #openssl x509 -noout -text -in server-cert.pem | grep Subject: | cut -f 10- -d " "

Actual results:
the spice session will disconnect after migration

Expected results:
still connecting

Additional info:
Before spice passwdValidTo get expired, after the migration operation spice session is still connecting