ca-bundle.crt - how to update

Message boards : Questions and problems : ca-bundle.crt - how to update
Message board moderation

To post messages, you must log in.

AuthorMessage
Les Bayliss
Help desk expert

Send message
Joined: 25 Nov 05
Posts: 1654
Australia
Message 92119 - Posted: 9 Jul 2019, 20:52:55 UTC

A participant in cpdn is getting the message: Peer Certificate cannot be authenticated with given CA certificates
There's nothing wrong at the project side, so if it's an outdated crt, how does one update it / get a new bundle?
ID: 92119 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15483
Netherlands
Message 92120 - Posted: 9 Jul 2019, 21:39:40 UTC - in response to Message 92119.  

Which BOINC version do they use? The most updated certificates are in 7.10 and above.

They can download a fresh version from the source code at https://github.com/BOINC/boinc/blob/master/curl/ca-bundle.crt, save directly over the previous version, yes to overwrite. Exit and restart BOINC afterwards.
ID: 92120 · Report as offensive
Profile Dave
Help desk expert

Send message
Joined: 28 Jun 10
Posts: 2540
United Kingdom
Message 92121 - Posted: 10 Jul 2019, 5:38:32 UTC - in response to Message 92120.  

Which BOINC version do they use? The most updated certificates are in 7.10 and above.

They can download a fresh version from the source code at https://github.com/BOINC/boinc/blob/master/curl/ca-bundle.crt, save directly over the previous version, yes to overwrite. Exit and restart BOINC afterwards.


In theory, the user on CPDN boards should have the most up to date list as on 7.14.2 on the machine running the task in question. I still think it worth trying your remedy though.
ID: 92121 · Report as offensive
Les Bayliss
Help desk expert

Send message
Joined: 25 Nov 05
Posts: 1654
Australia
Message 92122 - Posted: 10 Jul 2019, 7:21:45 UTC - in response to Message 92120.  

Haven't heard back from the O.P. yet.
The cure isn't as bad as I thought it might be, involving reloading BOINC or something.
ID: 92122 · Report as offensive
Dave Roberts

Send message
Joined: 11 Aug 13
Posts: 3
United Kingdom
Message 92123 - Posted: 10 Jul 2019, 7:56:31 UTC
Last modified: 10 Jul 2019, 8:01:18 UTC

I'm on 7.14.2 so that wasn't the problem.

Well, The problem vanished this morning and the trickle uploaded.

The problem has been there for a few weeks but I hadn't noticed it as all zips were going up OK so hadn't bothered to look at the log file.

A strange one because I initially thought it was my internet connection but obviously not since zips were OK at the same time that I was getting the message.

I'll reply on the Messages board as well.
Thanks for the help.
ID: 92123 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15483
Netherlands
Message 92124 - Posted: 10 Jul 2019, 8:25:22 UTC - in response to Message 92123.  

When you see it happening again, try setting the http_debug flag from event log options. It may give more information.
ID: 92124 · Report as offensive

Message boards : Questions and problems : ca-bundle.crt - how to update

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.