Switch to using SSL (Secure Socket Layer)

Message boards : News : Switch to using SSL (Secure Socket Layer)

To post messages, you must log in.

Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 . . . 11 · Next

AuthorMessage
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 2141
Credit: 41,525,460
RAC: 10,413
Message 95851 - Posted: 2 May 2020, 20:35:38 UTC

For those so inclined, if you simply "Abort" all unstarted tasks rather than let them all start, run and complete, they'll all show as aborted rather than abandoned and, under the way the credit system has been changed recently, you get 10 credits for each of them without running for a second.

If anyone asks, it wasn't me that told you that...

<cough>
ID: 95851 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
AndyG

Send message
Joined: 1 May 20
Posts: 4
Credit: 401,121
RAC: 0
Message 95861 - Posted: 2 May 2020, 21:10:11 UTC - in response to Message 95835.  

there is a Pi4 thread, there are probably better hints in there for other Pi4 related stuff
https://boinc.bakerlab.org/rosetta/forum_thread.php?id=13732

I ran the Raspbian image from www.raspberrypi.org, i'm using that as i think there'd be more support of the Pi4 including some of the proprietary features of the Broadcom soc


Thank you. I'll have a look. Was thinking of going back to Rasparian. Cheers - Andy
ID: 95861 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95871 - Posted: 2 May 2020, 21:47:53 UTC - in response to Message 95824.  

I have just done the following steps in my 2 Linux Laptops managed by BAM.

Step 1 - Modify the file account_boinc.bakerlab.org_rosetta.xml
<master_url>https://boinc.bakerlab.org/rosetta/</master_url>

Step 2 - Modify the file all_projects_list.xml
<url>https://boinc.bakerlab.org/rosetta/</url>
<web_url>https://boinc.bakerlab.org/rosetta/</web_url>

Step 3 - Restart boinc manager
systemctl restart boinc-client.service

I didn't need to remove the projet and attach it again.


Have you thought about also changing the URL in the statistical file?

/var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml
<master_url>https://boinc.bakerlab.org/rosetta/</master_url>


Your solution actually looks very simple, however, I'm not sure you'll spend all your files settings in HTTPS with this method. What do you think?
ID: 95871 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Sid Celery

Send message
Joined: 11 Feb 08
Posts: 2141
Credit: 41,525,460
RAC: 10,413
Message 95875 - Posted: 2 May 2020, 21:55:39 UTC - in response to Message 95851.  

For those so inclined, if you simply "Abort" all unstarted tasks rather than let them all start, run and complete, they'll all show as aborted rather than abandoned and, under the way the credit system has been changed recently, you get 10 credits for each of them without running for a second.

Having done that and cleared my cache on both laptop and desktop, all seems to have gone well.
484Mb database came down quickly enough with 2x85Mb program files.
Only a few tasks came down - about 2 per core - mainly because the expected runtime on the new laptop tasks was 7h 49m and on the desktop tasks 6h 55m. Near enough is good enough.

My stats tab is looking a bit lonely, but to be expected.
ID: 95875 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
PaoloNasca

Send message
Joined: 13 Jul 19
Posts: 9
Credit: 642,829
RAC: 62
Message 95888 - Posted: 2 May 2020, 23:41:16 UTC - in response to Message 95871.  

Hi Boulybud
I don’t understand your suggestion “I'm not sure you'll spend all your files settings in HTTPS with this method”. Could you explain me better?

About modifying the statistics_boinc.bakerlab.org_rosetta.xml file, I think it’s a good idea to change it but I’d like to share my today experience.
I didn’t change the statistics xml file and, after the restart:
*) I lost the Rosetta historical graph in the Boinc Manager GUI Statistics Tab
*) I found “https” written in statistics xml file

I’d like to share also the following steps I did in my first experience:
STEP 0 – Reset Projet
STEP 4 – After downloading project files, execute a second restart
ID: 95888 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Jim Delaney
Avatar

Send message
Joined: 1 May 20
Posts: 1
Credit: 1,145,401
RAC: 0
Message 95889 - Posted: 3 May 2020, 0:17:00 UTC - in response to Message 95724.  

Thanks from my wife and I. Think I did it but notices still says this project is using old URL. Will that go away eventually?
ID: 95889 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile yoerik
Avatar

Send message
Joined: 24 Mar 20
Posts: 128
Credit: 169,525
RAC: 0
Message 95890 - Posted: 3 May 2020, 1:11:30 UTC - in response to Message 95889.  

Thanks from my wife and I. Think I did it but notices still says this project is using old URL. Will that go away eventually?

If you look at the Project's properties, you can see what the URL is. Although, they went away the second I switched URLs - so you probably didn't. Check the project properties, and if it's not https://, try again.
ID: 95890 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95903 - Posted: 3 May 2020, 6:50:52 UTC - in response to Message 95888.  
Last modified: 3 May 2020, 6:51:40 UTC

Hi Boulybud
I don’t understand your suggestion “I'm not sure you'll spend all your files settings in HTTPS with this method”. Could you explain me better?

About modifying the statistics_boinc.bakerlab.org_rosetta.xml file, I think it’s a good idea to change it but I’d like to share my today experience.
I didn’t change the statistics xml file and, after the restart:
*) I lost the Rosetta historical graph in the Boinc Manager GUI Statistics Tab
*) I found “https” written in statistics xml file

I’d like to share also the following steps I did in my first experience:
STEP 0 – Reset Projet
STEP 4 – After downloading project files, execute a second restart


Sorry, I use a translator :(

In doing so, I thought that with your method, it was not going to change the other rosetta files with the right URL in HTTPS

But obviously, in your case, he spotted that the URL contained in the file "statistics_boinc.bakerlab.org_rosetta.xml" was not the right one so he rewrote the file with the right URL in HTTPS (which probably explains why you lost your graphics)

My question was rather, isn't it safer to delete/add the project after changing the master URL in "all_projects_list.xml" so that they change the entire associated rosetta files by recreating them?
ID: 95903 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
plz_delete

Send message
Joined: 24 Mar 20
Posts: 4
Credit: 370,303
RAC: 0
Message 95904 - Posted: 3 May 2020, 6:52:41 UTC

I did what was recommended in the thread, requested no new tasks, aborted those that hadn't started yet and decided to wait on those that weren't finished yet. All tasks failed when I checked just now and show as abandoned in my profile. I decided to switch because the damage was done and when I tried to remove the BOINC client, it crashed.

After manually starting the download and update for the new project, the tasks do come in now.

I feel like I used a sledgehammer to make a ceramic bowl, would have appreciated a step by step guide with best practice. Or maybe the http tasks were cancelled from Rosetta's end?
ID: 95904 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
sgaboinc

Send message
Joined: 2 Apr 14
Posts: 282
Credit: 208,966
RAC: 0
Message 95905 - Posted: 3 May 2020, 7:22:13 UTC
Last modified: 3 May 2020, 7:25:53 UTC

well, i'd guess this won't happen too often chill, i think a small mistake to try to make the switch without cleanup would leave the jobs abandoned lol

but backup the statistics file it is
/var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml
on Pi4
not sure where it is on Windows and others.
the statistics backup can be restored after the switch over
ID: 95905 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95906 - Posted: 3 May 2020, 7:25:49 UTC - in response to Message 95903.  
Last modified: 3 May 2020, 7:40:03 UTC

STEP 1 :REQUESTED no new tasks and WAITING all Tasks are finished

STEP 2 OPTIONAL [FOR SAVE STATISTICS FILES 1/4] :
backup /var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml
e.g. copy that to home directory

cp /var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml ~

STEP 3 : DELETE Rosetta project in Boinc Manager

STEP 4 : STOP boinc-client service

$ sudo systemctl stop boinc-client.service

STEP 5 : UPDATE url- and web_url-lines under Rosetta@home section in all_projects_list.xml

edit /var/lib/boinc/all_projects_list.xml

STEP 6 : START boinc client service
$ sudo systemctl start boinc-client.service


STEP 7: ADD Rosetta project in Boinc Manager

STEP 8 OPTIONAL ; [FOR SAVE STATISTICS FILES 2/4] : REPLACE the statistics file with your backup
sudo cp -i ~/statistics_boinc.bakerlab.org_rosetta.xml /var/lib/boinc/ 

STEP 9 OPTIONAL : [FOR SAVE STATISTICS FILES 3/4] : but EDIT your statistics file
/var/lib/boinc/statistics_boinc.bakerlab.org_rosetta.xml

<master_url>https://boinc.bakerlab.org/rosetta/</master_url>

STEP 10 OPTIONAL : [FOR SAVE STATISTICS FILES 4/4] : RESTART Boinc service
$ sudo systemctl restart boinc-client.service



Don't you think this method is the safest way for all of the Rosetta project files to be changed with the HTTPS URL ?
ID: 95906 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
PaoloNasca

Send message
Joined: 13 Jul 19
Posts: 9
Credit: 642,829
RAC: 62
Message 95909 - Posted: 3 May 2020, 9:02:57 UTC
Last modified: 3 May 2020, 9:04:49 UTC

To all Boincstats Account Manager (BAM!) users.

The BAM! admin has made the change. We have just to wait 48 hours (2 polling cycles).
In the first cycle the Rosetta project will be removed.
In the second one it will be attached again.

The https will be present in all the files and in the right place with no human intervention.

The Rosetta request to enable https has a side effect: all the running WUs will be aborted.
ID: 95909 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
PaoloNasca

Send message
Joined: 13 Jul 19
Posts: 9
Credit: 642,829
RAC: 62
Message 95910 - Posted: 3 May 2020, 9:20:25 UTC - in response to Message 95908.  

About the need to modify the /var/lib/boinc/all_projects_list.xml file, I share what happened to me yesterday.

Without the changing, the Boinc Manager GUI Notices tabs was empty. Maybe I had to wait the exchanging of ssl keys or maybe not.

With the changing, the Notices tabs worked fine again.

You are very right.
If the all_progect_list,xml file will be distributed again by Boinc patch/release, we lose the modification.
ID: 95910 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Millenium

Send message
Joined: 20 Sep 05
Posts: 68
Credit: 184,283
RAC: 0
Message 95927 - Posted: 3 May 2020, 14:36:10 UTC - in response to Message 95904.  

I did what was recommended in the thread, requested no new tasks, aborted those that hadn't started yet and decided to wait on those that weren't finished yet. All tasks failed when I checked just now and show as abandoned in my profile. I decided to switch because the damage was done and when I tried to remove the BOINC client, it crashed.

After manually starting the download and update for the new project, the tasks do come in now.

I feel like I used a sledgehammer to make a ceramic bowl, would have appreciated a step by step guide with best practice. Or maybe the http tasks were cancelled from Rosetta's end?

Remove the BOINC client? There is no need to uninstall BOINC. Also were the completed tasks updated to the server before removing the project? I have no failures nor abandoned tasks in my profile.

Seriously, it's very easy:
Remove the project
Reattach to it with the new address
ID: 95927 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 12,116,986
RAC: 9,863
Message 95940 - Posted: 3 May 2020, 18:19:54 UTC

This needs to be automatic. 90% of users will never see this thread. They will never know anything has to be done. Eventually when the old address stops working, they'll assume there's no work available and go to another project. Boinc needs to change the address itself with no user intervention.
ID: 95940 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95947 - Posted: 3 May 2020, 20:09:34 UTC - in response to Message 95911.  

Seriously, it's very easy:
Remove the project
Reattach to it with the new address


I agree with you. It's the simplest method.

There is still the statistics file, which is not specified. As far as I was concerned, having no interest for statistics I made the simplest method and obviously he kept me the statistics on BoincTasks


This needs to be automatic. 90% of users will never see this thread. They will never know anything has to be done. Eventually when the old address stops working, they'll assume there's no work available and go to another project. Boinc needs to change the address itself with no user intervention.


I also agree with you, this kind of manipulation can scare away some numbers of average users who are just there to participate it is absolutely necessary that Boinc try as far as possible to bring updates in a transparent way for the user even if it is true that this manipulation is not very complicated either.

In any case, I really enjoy participating in Rosetta, that allowed me to start Linux with Raspbian and design a case with a 3D printer to cool my Raspberry Pi 4 as best as possible.

This is a real project to do in a school for a class in order to learn how to design a useful project in computer science.

PS: Sorry for my english, y use a translator
ID: 95947 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Mr P Hucker
Avatar

Send message
Joined: 12 Aug 06
Posts: 1600
Credit: 12,116,986
RAC: 9,863
Message 95948 - Posted: 3 May 2020, 20:24:05 UTC - in response to Message 95947.  

There is still the statistics file, which is not specified. As far as I was concerned, having no interest for statistics I made the simplest method and obviously he kept me the statistics on BoincTasks


I didn't know there was a statistics file, I use Boincstats for statistics. It's nice to know how much work I'm doing and how I compare to other people. It encourages competitiveness and makes me buy more hardware.

I'm now building TWO 24 core Xeon machines - it should have been one, but some of the parts I acquired from useless Ebay sellers were for the wrong model (an R410 and an R510 Dell server only share some of the parts), so I decided to keep them all and build two.


I also agree with you, this kind of manipulation can scare away some numbers of average users who are just there to participate it is absolutely necessary that Boinc try as far as possible to bring updates in a transparent way for the user even if it is true that this manipulation is not very complicated either.


Yip, in this century we expect updates to everything to be automatic. Just as long as reboots don't occur when I'm not looking! [Glares at Microsoft]
ID: 95948 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Admin
Project administrator

Send message
Joined: 1 Jul 05
Posts: 5144
Credit: 0
RAC: 0
Message 95961 - Posted: 3 May 2020, 23:00:53 UTC
Last modified: 4 May 2020, 0:34:57 UTC

This switch is optional and can be done at your convenience. It is not required to detach and reattach. The project will still serve via http. If you want to use SSL, you can switch. If you don't care, you can skip it and just ignore the client message, "This project is using an old URL..."

I've contacted BOINC and hopefully they will update the project url from the list of projects shown on the client for new users so for new users, this will be transparent since they will attach using the https url.
ID: 95961 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Boulybud

Send message
Joined: 3 Apr 20
Posts: 11
Credit: 351,250
RAC: 0
Message 95969 - Posted: 4 May 2020, 0:21:31 UTC - in response to Message 95961.  

This switch is optional and can be done at your convenience. It is not required to detach and reattach. The project will still serve via http. If you want to use SSL, you can switch. If you don't care, you can skip it and just ignore the client message, "This project is using an old URL..."

I've contacted BOINC and hopefully they will update the project url from the list of projects show on the client for new users so for new users, this will be transparent since they will attach using the https url.


That's good news! It is best to use an SSL connection even if the data that is passing is not necessarily at risk (may be the login credentials to the Rosetta account)
ID: 95969 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
sgaboinc

Send message
Joined: 2 Apr 14
Posts: 282
Credit: 208,966
RAC: 0
Message 96006 - Posted: 4 May 2020, 12:10:41 UTC
Last modified: 4 May 2020, 12:13:07 UTC

hi, i'm just curious, if the switch is optional, we'd reword that as you can change your url to https://boinc.bakerlab.org/rosetta if you prefer to connect via https (i.e. SSL)?
ID: 96006 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 . . . 11 · Next

Message boards : News : Switch to using SSL (Secure Socket Layer)



©2024 University of Washington
https://www.bakerlab.org