client should support SNI over TLS
Currently it seems that spice isn't supporting TLS-SNI so if spice is running behind a LoadBalancer (eg. traefik with LetsEncrypt) it's not able to connect.
Please support proper SNI support for TLS as it offers the possibility to use the same ip/port for multiple VMs in a secure way.