{"action":"opened","issue":{"url":"https://api.github.com/repos/retspen/webvirtmgr/issues/557","labels_url":"https://api.github.com/repos/retspen/webvirtmgr/issues/557/labels{/name}","comments_url":"https://api.github.com/repos/retspen/webvirtmgr/issues/557/comments","events_url":"https://api.github.com/repos/retspen/webvirtmgr/issues/557/events","html_url":"https://github.com/retspen/webvirtmgr/issues/557","id":77936853,"number":557,"title":"https breaks vnc","user":{"login":"masau","id":543657,"avatar_url":"https://avatars.githubusercontent.com/u/543657?v=3","gravatar_id":"","url":"https://api.github.com/users/masau","html_url":"https://github.com/masau","followers_url":"https://api.github.com/users/masau/followers","following_url":"https://api.github.com/users/masau/following{/other_user}","gists_url":"https://api.github.com/users/masau/gists{/gist_id}","starred_url":"https://api.github.com/users/masau/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/masau/subscriptions","organizations_url":"https://api.github.com/users/masau/orgs","repos_url":"https://api.github.com/users/masau/repos","events_url":"https://api.github.com/users/masau/events{/privacy}","received_events_url":"https://api.github.com/users/masau/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-05-19T05:11:36Z","updated_at":"2015-05-19T05:11:36Z","closed_at":null,"body":"I can't get vnc over https working. Running on Arch Linux.\r\n\r\nMy nginx server config:\r\n```\r\nserver {\r\n#    listen 80 default_server;\r\n\r\n    listen 443 ssl;\r\n    server_name localhost;\r\n\r\n    ssl_certificate cert.crt;\r\n    ssl_certificate_key cert.key;\r\n\r\n    server_name $hostname;\r\n    #access_log /var/log/nginx/webvirtmgr_access_log; \r\n\r\n    location /static/ {\r\n        root /usr/lib/webvirtmgr/webvirtmgr; # or /srv instead of /var\r\n        expires max;\r\n    }\r\n\r\n    location / {\r\n        proxy_pass http://127.0.0.1:8000;\r\n        proxy_set_header X-Real-IP $remote_addr;\r\n        proxy_set_header X-Forwarded-for $proxy_add_x_forwarded_for;\r\n#        proxy_set_header Host $host:$server_port;\r\n        proxy_set_header X-Forwarded-Proto $remote_addr;\r\n        proxy_connect_timeout 600;\r\n        proxy_read_timeout 600;\r\n        proxy_send_timeout 600;\r\n        client_max_body_size 1024M; # Set higher depending on your needs \r\n    }\r\n}\r\n```\r\ncert.pem location\r\n```\r\nls /usr/lib/webvirtmgr/webvirtmgr/local/cert.pem \r\n/usr/lib/webvirtmgr/webvirtmgr/local/cert.pem\r\n```\r\nwebvirtmgr-console output\r\n```\r\npython2 ./webvirtmgr-console -d -c /usr/lib/webvirtmgr/webvirtmgr/local/cert.pem \r\n2015-05-19 04:52:26,676 - websocket.type - INFO : WebSocket server settings:\r\n2015-05-19 04:52:26,677 - websocket.type - INFO :   - Listen on 0.0.0.0:6080\r\n2015-05-19 04:52:26,677 - websocket.type - INFO :   - Flash security policy server\r\n2015-05-19 04:52:26,677 - websocket.type - INFO :   - SSL/TLS support\r\n2015-05-19 04:52:26,677 - websocket.type - INFO :   - proxying from 0.0.0.0:6080 to ignore:ignore\r\n2015-05-19 04:52:36,005 - websocket.type - DEBUG : 192.168.41.17: new handler Process\r\n2015-05-19 04:52:36,027 - websocket.type - INFO : handler exception: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1750)\r\n2015-05-19 04:52:36,028 - websocket.type - DEBUG : exception\r\nTraceback (most recent call last):\r\n  File \"/usr/lib/python2.7/site-packages/websockify/websocket.py\", line 874, in top_new_client\r\n    client = self.do_handshake(startsock, address)\r\n  File \"/usr/lib/python2.7/site-packages/websockify/websocket.py\", line 809, in do_handshake\r\n    self.RequestHandlerClass(retsock, address, self)\r\n  File \"/usr/lib/python2.7/site-packages/websockify/websocket.py\", line 112, in __init__\r\n    SimpleHTTPRequestHandler.__init__(self, req, addr, server)\r\n  File \"/usr/lib/python2.7/SocketServer.py\", line 655, in __init__\r\n    self.handle()\r\n  File \"/usr/lib/python2.7/site-packages/websockify/websocket.py\", line 540, in handle\r\n    SimpleHTTPRequestHandler.handle(self)\r\n  File \"/usr/lib/python2.7/BaseHTTPServer.py\", line 340, in handle\r\n    self.handle_one_request()\r\n  File \"/usr/lib/python2.7/BaseHTTPServer.py\", line 310, in handle_one_request\r\n    self.raw_requestline = self.rfile.readline(65537)\r\n  File \"/usr/lib/python2.7/socket.py\", line 476, in readline\r\n    data = self._sock.recv(self._rbufsize)\r\n  File \"/usr/lib/python2.7/ssl.py\", line 714, in recv\r\n    return self.read(buflen)\r\n  File \"/usr/lib/python2.7/ssl.py\", line 608, in read\r\n    v = self._sslobj.read(len or 1024)\r\nSSLError: [SSL: TLSV1_ALERT_UNKNOWN_CA] tlsv1 alert unknown ca (_ssl.c:1750)\r\n2015-05-19 04:52:36,032 - websocket.type - DEBUG : Reaing zombies, active child count is 0\r\n2015-05-19 04:52:36,033 - websocket.type - DEBUG : Ignoring interrupted syscall\r\n^C2015-05-19 04:52:50,065 - websocket.type - INFO : Got SIGINT, exiting\r\n2015-05-19 04:52:50,065 - websocket.type - INFO : In exit\r\n2015-05-19 04:52:50,066 - websocket.type - DEBUG : Closing socket listening at 0.0.0.0:6080\r\n```\r\nWhen I open a console in the browser, I just get \"Server disconnected (code: 1006)\"\r\n\r\nWhen I disable ssl in nginx vnc works fine."}}