Peer certificate cannot be authenticated with given CA certificates

Message boards : Number crunching : Peer certificate cannot be authenticated with given CA certificates

To post messages, you must log in.

Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 . . . 9 · Next

AuthorMessage
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97087 - Posted: 31 May 2020, 23:30:13 UTC - in response to Message 97086.  

Did we talk about this before?
7.16.5 appears to be a beta but it's not available in the Play Store ttbomk - no idea where to find it, nor whether it'll fix this particular issue


I talked about it with somebody. But I have no idea how I got it. All I did was 6 months ago when I bought the phone, I went to the Google Play store and downloaded Boinc. Maybe there was a beta on offer at the time that has since been withdrawn from the store? It doesn't say beta in the program. I have Google Play set to update everything once a day, so it could have done that too. But if I go there now, the latest version is older than what I have!

It does not fix the problem, it's the same version number as PCs have. And I have stuck finished tasks for Rosetta and LHC on it.

I can in the system settings switch off individual certificates, so that should fix it. I don't know which ones to turn off, but I turned off the ones somebody else mentioned with no effect. Maybe I should have rebooted? If you can tell me the names of the certificate(s) to disable, I'll give it another go, reboot, and see what happens.
ID: 97087 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Jon Melusky

Send message
Joined: 4 Mar 16
Posts: 5
Credit: 899,275
RAC: 0
Message 97089 - Posted: 1 Jun 2020, 0:40:30 UTC

After a few days of rosetta not uploading completed tasks, I finally clicked "Update" on the project tab in BOINC and I got all 10 rosetta tasks to upload. I didn't use the workaround file. But the tasks wouldn't automatically upload like they should have. Yesterday "Update" manually wouldn't do the job. None of my other 10 projects were affected except Rosetta.
ID: 97089 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97092 - Posted: 1 Jun 2020, 1:03:24 UTC - in response to Message 97089.  

After a few days of rosetta not uploading completed tasks, I finally clicked "Update" on the project tab in BOINC and I got all 10 rosetta tasks to upload. I didn't use the workaround file. But the tasks wouldn't automatically upload like they should have. Yesterday "Update" manually wouldn't do the job. None of my other 10 projects were affected except Rosetta.


That's odd. A successfull manual update suggests they've fixed the problem at their end. But why did the automatic update not work? Is it now working automatically after you gave it a shove? It may just have been only retrying every several hours, as it will when it gets fed up.
ID: 97092 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile [VENETO] boboviz

Send message
Joined: 1 Dec 05
Posts: 1994
Credit: 9,613,944
RAC: 9,062
Message 97102 - Posted: 1 Jun 2020, 8:07:41 UTC

It's not possible to modify the certification file in Android (or you need to root the device).
We are waiting for a new Android client.
In meantime, i hope that Rosetta will postpone the deadline for our wus.
ID: 97102 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Gylling

Send message
Joined: 26 Mar 20
Posts: 9
Credit: 360,665
RAC: 0
Message 97103 - Posted: 1 Jun 2020, 8:33:19 UTC

I downloaded the new BOINC version 7.16.7 from boinc.berkeley.edu
Tested on Windows 7 64-bit and Windows 10 64-bit, Works perfect on both.
My previous instructions on how to remove the expired AddTrust External Root certificate from ca-bundle.crt should not be needed anymore.
ID: 97103 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 2124
Credit: 41,221,328
RAC: 10,883
Message 97111 - Posted: 1 Jun 2020, 12:03:43 UTC - in response to Message 97087.  

Did we talk about this before?
7.16.5 appears to be a beta but it's not available in the Play Store ttbomk - no idea where to find it, nor whether it'll fix this particular issue

I talked about it with somebody. But I have no idea how I got it. All I did was 6 months ago when I bought the phone, I went to the Google Play store and downloaded Boinc. Maybe there was a beta on offer at the time that has since been withdrawn from the store? It doesn't say beta in the program. I have Google Play set to update everything once a day, so it could have done that too. But if I go there now, the latest version is older than what I have!

It does not fix the problem, it's the same version number as PCs have. And I have stuck finished tasks for Rosetta and LHC on it.

I can in the system settings switch off individual certificates, so that should fix it. I don't know which ones to turn off, but I turned off the ones somebody else mentioned with no effect. Maybe I should have rebooted? If you can tell me the names of the certificate(s) to disable, I'll give it another go, reboot, and see what happens.

It must've been me. Yes, could've been released then withdrawn again. Having a setting like you describe is certainly new, but it sounds exactly like what I've tried on my PC (disabling a particular cert) and that didn't work either, even after a reboot. The idea's good, but we're in the hands of others.
ID: 97111 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 2124
Credit: 41,221,328
RAC: 10,883
Message 97112 - Posted: 1 Jun 2020, 12:06:58 UTC - in response to Message 97089.  

After a few days of rosetta not uploading completed tasks, I finally clicked "Update" on the project tab in BOINC and I got all 10 rosetta tasks to upload.
I didn't use the workaround file. But the tasks wouldn't automatically upload like they should have. Yesterday "Update" manually wouldn't do the job.
None of my other 10 projects were affected except Rosetta.

Weird as that sounds, yesterday the figure on the front page for successes in the last 24hrs was around 260k and now it's over 600k, so it does seem it worked for some/many.
ID: 97112 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 2124
Credit: 41,221,328
RAC: 10,883
Message 97113 - Posted: 1 Jun 2020, 12:36:35 UTC - in response to Message 97103.  

I downloaded the new BOINC version 7.16.7 from boinc.berkeley.edu
Tested on Windows 7 64-bit and Windows 10 64-bit, Works perfect on both.
My previous instructions on how to remove the expired AddTrust External Root certificate from ca-bundle.crt should not be needed anymore.

Excellent and grabbed.
My first manual update has timed out, but I imagine there are loads of task uploads and downloads trying to go through all at the same time, so a little patience required
ID: 97113 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97118 - Posted: 1 Jun 2020, 14:38:40 UTC - in response to Message 97111.  
Last modified: 1 Jun 2020, 14:42:54 UTC

Having a setting like you describe is certainly new, but it sounds exactly like what I've tried on my PC (disabling a particular cert) and that didn't work either, even after a reboot. The idea's good, but we're in the hands of others.


The setting I refer to is not in Boinc, it's in the system settings. Android 7.0. I just don't know which ones to try removing. Although Rosetta is working, the new Boinc on my phones is not talking to LHC, so I'd still like to fiddle.
ID: 97118 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97119 - Posted: 1 Jun 2020, 14:40:10 UTC - in response to Message 97112.  

Weird as that sounds, yesterday the figure on the front page for successes in the last 24hrs was around 260k and now it's over 600k, so it does seem it worked for some/many.


Presumably the server changed to a different certificate we all already had? Not that I know anything about SSL, but since there are hundreds in our certificate file, it seems reasonable they could use a different one.
ID: 97119 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97120 - Posted: 1 Jun 2020, 14:42:10 UTC - in response to Message 97113.  

Excellent and grabbed.
My first manual update has timed out, but I imagine there are loads of task uploads and downloads trying to go through all at the same time, so a little patience required


All my 62 CPU cores are communicating smoothly with Rosetta (which is the only project they're running just now).
ID: 97120 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
sgaboinc

Send message
Joined: 2 Apr 14
Posts: 282
Credit: 208,966
RAC: 0
Message 97125 - Posted: 1 Jun 2020, 15:43:19 UTC
Last modified: 1 Jun 2020, 15:44:07 UTC

it seemed a large number of boinc-clients are taken offline related to this, there has been a dip in wu done just last few days and it seem to be recovering now
ID: 97125 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Keith T.
Avatar

Send message
Joined: 1 Mar 07
Posts: 58
Credit: 34,135
RAC: 0
Message 97128 - Posted: 1 Jun 2020, 15:57:30 UTC - in response to Message 97086.  

BOINC 7.16.5 for Android is still available from some APK sites including APKpure.

It Doesn't fix the certificate problem.

I have been using it for about a week, it still has other bugs, but it does fix one of the bugs in 7.16.3
ID: 97128 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97129 - Posted: 1 Jun 2020, 16:07:33 UTC - in response to Message 97128.  

BOINC 7.16.5 for Android is still available from some APK sites including APKpure.

It Doesn't fix the certificate problem.

I have been using it for about a week, it still has other bugs, but it does fix one of the bugs in 7.16.3


7.16.3 doesn't fix the bug either. Nothing makes Android connect to LHC. Rosetta works with everything now, presumably due to a server side change.
ID: 97129 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Keith T.
Avatar

Send message
Joined: 1 Mar 07
Posts: 58
Credit: 34,135
RAC: 0
Message 97130 - Posted: 1 Jun 2020, 16:19:07 UTC - in response to Message 97129.  

Thanks, I wasn't aware of that, as I currently have 3 LHC, and 6 WCG tasks on my 8 core tablet.
I currently have 2 of the LHC tasks waiting to Report, they Uploaded ok.
ID: 97130 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97131 - Posted: 1 Jun 2020, 16:21:52 UTC - in response to Message 97130.  

Thanks, I wasn't aware of that, as I currently have 3 LHC, and 6 WCG tasks on my 8 core tablet.
I currently have 2 of the LHC tasks waiting to Report, they Uploaded ok.


Same happened to me. For some reason the uploading worked with LHC but not the reporting. With Rosetta I couldn't even upload before the fix. Different projects do different things - e.g. Milkyway doesn't do any uploading at all, it just gives the results in the report session. I guess it depends what needs to be sent back.
ID: 97131 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Siran d'Vel'nahr
Avatar

Send message
Joined: 15 Nov 06
Posts: 72
Credit: 2,674,678
RAC: 0
Message 97134 - Posted: 1 Jun 2020, 19:24:39 UTC

Greetings,

How funny is this? I just got an update for "ca-certificates".

Have a great day! :)

Siran
CAPT Siran d'Vel'nahr XO
USS Vre'kasht NCC-33187

"Logic is the cement of our civilization with which we ascend from chaos using reason as our guide." - T'Plana-hath
ID: 97134 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 2124
Credit: 41,221,328
RAC: 10,883
Message 97136 - Posted: 1 Jun 2020, 21:27:07 UTC - in response to Message 97118.  
Last modified: 1 Jun 2020, 21:36:03 UTC

Having a setting like you describe is certainly new, but it sounds exactly like what I've tried on my PC (disabling a particular cert) and that didn't work either, even after a reboot. The idea's good, but we're in the hands of others.

The setting I refer to is not in Boinc, it's in the system settings. Android 7.0. I just don't know which ones to try removing. Although Rosetta is working, the new Boinc on my phones is not talking to LHC, so I'd still like to fiddle.

Yes. In Android 9 it's in the Settings App, chose Biometrics & Security/Other Security Settings/View security certificates and then unselect "AddTrust AB". But it didn't work for me, as I said

[Edit]This reply redundant now[/Edit]
ID: 97136 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 2124
Credit: 41,221,328
RAC: 10,883
Message 97137 - Posted: 1 Jun 2020, 21:34:20 UTC - in response to Message 97129.  

BOINC 7.16.5 for Android is still available from some APK sites including APKpure.

It Doesn't fix the certificate problem.

I have been using it for about a week, it still has other bugs, but it does fix one of the bugs in 7.16.3


7.16.3 doesn't fix the bug either. Nothing makes Android connect to LHC. Rosetta works with everything now, presumably due to a server side change.

I wondered what you were on about, so I checked and 1 task had already reported and the other left my system just as I was looking at it. Success!
That's with 7.16.3. Does it also work for 7.14.53 (or whatever that version was). Are we all done now?
ID: 97137 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 11,834,414
RAC: 13,110
Message 97138 - Posted: 1 Jun 2020, 21:48:34 UTC - in response to Message 97137.  
Last modified: 1 Jun 2020, 21:51:31 UTC

BOINC 7.16.5 for Android is still available from some APK sites including APKpure.

It Doesn't fix the certificate problem.

I have been using it for about a week, it still has other bugs, but it does fix one of the bugs in 7.16.3


7.16.3 doesn't fix the bug either. Nothing makes Android connect to LHC. Rosetta works with everything now, presumably due to a server side change.

I wondered what you were on about, so I checked and 1 task had already reported and the other left my system just as I was looking at it. Success!
That's with 7.16.3. Does it also work for 7.14.53 (or whatever that version was). Are we all done now?


I had to uninstall my Boinc on my Android phone and reinstall since it was an earlier version I was installing with 7.16.3 (I had 7.16.5ish). so I had to reattach to all projects. Every one worked except LHC. I just tried again, and I get the following in the event log:

Fetching configuration file from https://lhcathome.cern.ch/lhcathome/get_project_config.php
Project communication failed: attempting to access reference site
Internet access ok - project servers may be temporarily down

turned on http debug logging and got:

SSL certificate problem: certificate has expired

Along with many many other things and I don't know how to copy and paste between there and here.
ID: 97138 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 · 8 . . . 9 · Next

Message boards : Number crunching : Peer certificate cannot be authenticated with given CA certificates



©2024 University of Washington
https://www.bakerlab.org