BOINC can't access internet

Message boards : Questions and problems : BOINC can't access internet
Message board moderation

To post messages, you must log in.

AuthorMessage
Don

Send message
Joined: 8 Sep 17
Posts: 28
United States
Message 80921 - Posted: 8 Sep 2017, 5:00:56 UTC

I have what I think is a strange problem. I have BOINC running on three Windows computers (2 x Win 10, 1 x Win 2012 R2). They are all running fine. I can use the manager on any of the computers to connect to the other 2 and add projects and manage them just fine.

I have 2 QNAP NAS units running that sit idle most of the time so I contacted one of the developers of QNAP packages (QPKG) and asked if he would create a BIONC package. He did and I installed it with no issues. After setting up the password and remote hosts files I connected from a Windows 10 PC to one of the NAS devices with no issues. I attempted to add a project and I received the following error.

9/7/2017 11:30:39 PM |  | BOINC can't access Internet - check network connection or proxy configuration.


I tried with the other NAS device and received the same error. Doesn't matter what project I tried to add. Both NAS devices can reach the internet with no issues. I opened an SSH session to the NAS and using the BOINC command line I was able to attach to projects. The attached projects appeared in the manager and I was able to control them from the manager. It appears the only thing I can't do is add projects for the NAS devices from the manager.

BOINC manager version is 7.8.2 (x64)

Startup log messages from the NAS

9/7/2017 11:29:12 PM |  | cc_config.xml not found - using defaults
9/7/2017 11:29:12 PM |  | Starting BOINC client version 7.7.0 for x86_64-pc-linux-gnu
9/7/2017 11:29:12 PM |  | This a development version of BOINC and may not function properly
9/7/2017 11:29:12 PM |  | log flags: file_xfer, sched_ops, task
9/7/2017 11:29:12 PM |  | Libraries: libcurl/7.50.3 OpenSSL/1.0.1f zlib/1.2.11 libidn/1.28 librtmp/2.3
9/7/2017 11:29:12 PM |  | Running as a daemon
9/7/2017 11:29:12 PM |  | Data directory: /share/CACHEDEV1_DATA/.qpkg/Boinc
9/7/2017 11:29:12 PM |  | No usable GPUs found
9/7/2017 11:29:12 PM |  | Host name: TVS663
9/7/2017 11:29:12 PM |  | Processor: 4 AuthenticAMD AMD GX-424CC SOC with Radeon(TM) R5E Graphics [Family 22 Model 48 Stepping 1]
9/7/2017 11:29:12 PM |  | Processor features: fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush mmx fxsr sse sse2 ht syscall nx mmxext fxsr_opt pdpe1gb rdtscp lm constant_tsc rep_good nopl nonstop_tsc extd_apicid aperfmperf eagerfpu pni pclmulqdq monitor ssse3 cx16 sse4_1 sse4_2 movbe popcnt aes xsave avx f16c rdrand lahf_lm cmp_legacy svm extapic cr8_legacy abm sse4a misalignsse 3dnowprefetch osvw ibs skinit wdt topoext perfctr_nb bpext perfctr_l2 arat hw_pstate npt lbrv svm_lock nrip_save tsc_scale flushbyasid decodeassists pausefilter pfthreshold vmmcall bmi1 xsaveopt
9/7/2017 11:29:12 PM |  | OS: Linux: 4.2.8
9/7/2017 11:29:12 PM |  | Memory: 14.67 GB physical, 24.41 GB virtual
9/7/2017 11:29:12 PM |  | Disk: 3.58 TB total, 2.91 TB free
9/7/2017 11:29:12 PM |  | Local time is UTC -4 hours
9/7/2017 11:29:12 PM |  | Config: GUI RPCs allowed from:
9/7/2017 11:29:12 PM |  | djmfs1
9/7/2017 11:29:12 PM |  | djmfs1.djmuller.com
9/7/2017 11:29:12 PM |  | dons-surface-4
9/7/2017 11:29:12 PM |  | dons-surface-4.djmuller.com
9/7/2017 11:29:12 PM |  | dons-surface
9/7/2017 11:29:12 PM |  | dons-surface.djmuller.com
9/7/2017 11:29:12 PM |  | Last benchmark was 17417 days 03:29:12 ago
9/7/2017 11:29:12 PM |  | No general preferences found - using defaults
9/7/2017 11:29:12 PM |  | Preferences:
9/7/2017 11:29:12 PM |  | max memory usage when active: 7509.66 MB
9/7/2017 11:29:12 PM |  | max memory usage when idle: 13517.39 MB
9/7/2017 11:29:12 PM |  | max disk usage: 2983.10 GB
9/7/2017 11:29:12 PM |  | don't use GPU while active
9/7/2017 11:29:12 PM |  | suspend work if non-BOINC CPU load exceeds 25%
9/7/2017 11:29:12 PM |  | (to change preferences, visit a project web site or select Preferences in the Manager)
9/7/2017 11:29:12 PM |  | Setting up project and slot directories
9/7/2017 11:29:12 PM |  | Checking active tasks
9/7/2017 11:29:12 PM |  | Setting up GUI RPC socket


Any one have any ideas what the problem is? Is it because a Linux development version of BOINC was used to build the QPKG?

Thanks
Don[/code]
ID: 80921 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5081
United Kingdom
Message 80924 - Posted: 8 Sep 2017, 6:29:56 UTC - in response to Message 80921.  

You need to sort out which bit of internet access is failing. Set the <http_debug> message log flag, and look to see which server it is trying to reach at the time: is DNS resolution working, is the app and port allowed through any firewall the QNAP might be running - that sort of thing. Development versions on their own shouldn't make a difference, though unless you know exactly when the source code was pulled, you can't track down exactly what its status might be.
ID: 80924 · Report as offensive
Don

Send message
Joined: 8 Sep 17
Posts: 28
United States
Message 80949 - Posted: 8 Sep 2017, 15:12:54 UTC - in response to Message 80924.  

Turned on the flag and tried to add a new project. Here are the results.

9/8/2017 11:08:47 AM | | log flags: file_xfer, sched_ops, task, http_debug
9/8/2017 11:08:50 AM | | Re-reading cc_config.xml
9/8/2017 11:08:50 AM | | Config: GUI RPCs allowed from:
9/8/2017 11:08:50 AM | | djmfs1
9/8/2017 11:08:50 AM | | djmfs1.djmuller.com
9/8/2017 11:08:50 AM | | dons-surface-4
9/8/2017 11:08:50 AM | | dons-surface-4.djmuller.com
9/8/2017 11:08:50 AM | | dons-surface
9/8/2017 11:08:50 AM | | dons-surface.djmuller.com
9/8/2017 11:08:50 AM | | log flags: file_xfer, sched_ops, task, http_debug
9/8/2017 11:09:10 AM | | Fetching configuration file from http://www.rnaworld.de/rnaworld/get_project_config.php
9/8/2017 11:09:10 AM | | [http] HTTP_OP::init_get(): http://www.rnaworld.de/rnaworld/get_project_config.php
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Connection 7 seems to be dead!
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Closing connection 7
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Connection 8 seems to be dead!
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Closing connection 8
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Trying 137.248.197.16...
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: TCP_NODELAY set
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Connected to www.rnaworld.de (137.248.197.16) port 80 (#9)
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server: GET /rnaworld/get_project_config.php HTTP/1.1
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server: Host: www.rnaworld.de
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server: User-Agent: BOINC client (x86_64-pc-linux-gnu 7.7.0)
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server: Accept: */*
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server: Accept-Encoding: deflate, gzip
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server: Content-Type: application/x-www-form-urlencoded
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server: Accept-Language: en_US
9/8/2017 11:09:10 AM | | [http] [ID#2] Sent header to server:
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: HTTP/1.1 200 OK
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: Date: Fri, 08 Sep 2017 15:09:08 GMT
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: Server: Apache/2.2.15 (CentOS)
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: X-Powered-By: PHP/5.3.3
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: Vary: Accept-Encoding
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: Content-Encoding: gzip
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: Content-Length: 475
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: Connection: close
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server: Content-Type: text/xml
9/8/2017 11:09:10 AM | | [http] [ID#2] Received header from server:
9/8/2017 11:09:10 AM | |
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Curl_http_done: called premature == 0
9/8/2017 11:09:10 AM | | [http] [ID#2] Info: Closing connection 9
9/8/2017 11:09:23 AM | | [http] HTTP_OP::init_get(): https://www.rnaworld.de/rnaworld/create_account.php?email_addr=donmuller22%40outlook%2Ecom&passwd_hash=a511a35d5ddde2763238c5415d23872c&user_name=Donald
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: Trying 137.248.197.16...
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: TCP_NODELAY set
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: Connected to www.rnaworld.de (137.248.197.16) port 443 (#10)
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: error setting certificate verify locations:
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: CAfile: /etc/ssl/certs/ca-certificates.crt
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: CApath: none
9/8/2017 11:09:23 AM | | [http] HTTP error: Problem with the SSL CA cert (path? access rights?)
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: Curl_http_done: called premature == 0
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: Closing connection 10
9/8/2017 11:09:24 AM | | Project communication failed: attempting access to reference site
9/8/2017 11:09:24 AM | | [http] HTTP_OP::init_get(): https://www.google.com/
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Trying 172.217.9.68...
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: TCP_NODELAY set
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Connected to www.google.com (172.217.9.68) port 443 (#11)
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: error setting certificate verify locations:
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: CAfile: /etc/ssl/certs/ca-certificates.crt
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: CApath: none
9/8/2017 11:09:24 AM | | [http] HTTP error: Problem with the SSL CA cert (path? access rights?)
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Curl_http_done: called premature == 0
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Closing connection 11
9/8/2017 11:09:25 AM | | BOINC can't access Internet - check network connection or proxy configuration.


BTW, both the NAS and PC can access the internet with no problems.

Thanks
[/quote]
ID: 80949 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15480
Netherlands
Message 80953 - Posted: 8 Sep 2017, 16:16:54 UTC - in response to Message 80949.  

What I see so quickly:
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: Connected to www.rnaworld.de (137.248.197.16) port 443 (#10)
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: error setting certificate verify locations:
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: CAfile: /etc/ssl/certs/ca-certificates.crt
9/8/2017 11:09:23 AM | | [http] [ID#2] Info: CApath: none
9/8/2017 11:09:23 AM | | [http] HTTP error: Problem with the SSL CA cert (path? access rights?)

9/8/2017 11:09:24 AM | | Project communication failed: attempting access to reference site
9/8/2017 11:09:24 AM | | [http] HTTP_OP::init_get(): https://www.google.com/
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Trying 172.217.9.68...
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: TCP_NODELAY set
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Connected to www.google.com (172.217.9.68) port 443 (#11)
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: error setting certificate verify locations:
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: CAfile: /etc/ssl/certs/ca-certificates.crt
9/8/2017 11:09:24 AM | | [http] [ID#0] Info: CApath: none
9/8/2017 11:09:24 AM | | [http] HTTP error: Problem with the SSL CA cert (path? access rights?)

9/8/2017 11:09:25 AM | | BOINC can't access Internet - check network connection or proxy configuration.

Does the OS have any certificates for HTTPS connections installed?
See How to Use SSL Certificates to Increase the Connection Security to your QNAP NAS for how to do that.
ID: 80953 · Report as offensive
Don

Send message
Joined: 8 Sep 17
Posts: 28
United States
Message 80958 - Posted: 8 Sep 2017, 18:12:10 UTC - in response to Message 80953.  
Last modified: 8 Sep 2017, 18:26:03 UTC

I have not installed any certificates.

If this is the issue then why can I connect to projects via the NAS command line boinccmd --project_attach ..... ? I can attach from the command line just not from the manager. What are they doing differently?
ID: 80958 · Report as offensive
Juha
Volunteer developer
Volunteer tester
Help desk expert

Send message
Joined: 20 Nov 12
Posts: 801
Finland
Message 80960 - Posted: 8 Sep 2017, 18:36:10 UTC - in response to Message 80958.  

In the log BOINC is trying to create (or look up) an account over HTTPS. When you attached to projects with boinccmd had you created the account on another host or did you use HTTP address or do the other projects use HTTP only?
ID: 80960 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5081
United Kingdom
Message 80963 - Posted: 8 Sep 2017, 20:14:13 UTC

For other operating systems, BOINC doesn't rely on the certificates installed globally by the operating system: instead it uses certificates supplied by BOINC in a file called 'ca-bundle.crt'. You could ask your QNAP developer if he included that file: it's normally placed in the same folder as the boinc client binary. If he didn't include the file, it can be downloaded from https://github.com/BOINC/boinc/tree/master/curl

The QNAP NAS link that Jord posted seems to be mostly about allowing authorised users to access your QNAP device securely from outside the building: that's going in the wrong direction. You're inside the building, and want to reach out to BOINC projects outside it. The instructions for how to create your own certificates may still be useful in another context, but I don't think they'll help with the initial problem.
ID: 80963 · Report as offensive
Don

Send message
Joined: 8 Sep 17
Posts: 28
United States
Message 80966 - Posted: 8 Sep 2017, 22:05:19 UTC - in response to Message 80960.  

In the log BOINC is trying to create (or look up) an account over HTTPS. When you attached to projects with boinccmd had you created the account on another host or did you use HTTP address or do the other projects use HTTP only?
When using the boinccmd the accounts I attached to were created using the manager on a Windows system. Using the manager on a Windows system but connected to the NAS I was not able to attach to the projects. I also tried connecting to a new project from the manager and received the same results which I already posted.

For other operating systems, BOINC doesn't rely on the certificates installed globally by the operating system: instead it uses certificates supplied by BOINC in a file called 'ca-bundle.crt'. You could ask your QNAP developer if he included that file: it's normally placed in the same folder as the boinc client binary. If he didn't include the file, it can be downloaded from https://github.com/BOINC/boinc/tree/master/curl
Looking at the NAS the file was not included. I downloaded the file by right clicking on it but it saved it as an htm file which I don't think is correct.

I'm still not understanding why from the NAS command line I can attach to a project using boinccmd but trying to add the same project using the manager on a Windows system connected to the NAS doesn't work. Isn't the manager just passing on commands to the client on the NAS the same as boinccmd would?

Thanks, appreciate all the assistance so far.
ID: 80966 · Report as offensive
Juha
Volunteer developer
Volunteer tester
Help desk expert

Send message
Joined: 20 Nov 12
Posts: 801
Finland
Message 80989 - Posted: 9 Sep 2017, 12:50:48 UTC - in response to Message 80966.  
Last modified: 9 Sep 2017, 12:56:06 UTC

When you added a project with boinccmd you used HTTP address of the project and used authenticator you looked up on another host.

When you used Manager first it told client to fetch project's configuration and then it told the client to either create or look up an account depending on whether you are new or old volunteer. RNAworld's configuration instructs BOINC to use HTTPS to create or look up account.

Once the project has been added rest of the communications are often over HTTP but depends on the project.

edit:

I downloaded the file by right clicking on it but it saved it as an htm file which I don't think is correct.


You want the raw file: https://raw.githubusercontent.com/BOINC/boinc/master/curl/ca-bundle.crt
ID: 80989 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5081
United Kingdom
Message 81007 - Posted: 9 Sep 2017, 17:19:27 UTC - in response to Message 80989.  

You want the raw file: https://raw.githubusercontent.com/BOINC/boinc/master/curl/ca-bundle.crt
Apologies. I did test the right-click thing before posting, and got the actual file. Browsers differ.
ID: 81007 · Report as offensive
Don

Send message
Joined: 8 Sep 17
Posts: 28
United States
Message 81010 - Posted: 9 Sep 2017, 21:00:01 UTC
Last modified: 9 Sep 2017, 21:06:41 UTC

Thanks Richard. I used my little Linux knowledge and did a wget on the file. I moved it to the boinc directory and it worked!! I was able to attach to an existing project and also attached to new projects. I'll let the developer know he needs to include that file in his distribution package.

Thanks to all that assisted.

Doin
ID: 81010 · Report as offensive

Message boards : Questions and problems : BOINC can't access internet

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.