Peer certificate cannot be authenticated with given CA certificates

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates
Message board moderation

To post messages, you must log in.

Previous · 1 · 2 · 3 · 4 · 5 · 6 . . . 7 · Next

AuthorMessage
robertmiles

Send message
Joined: 17 Jun 11
Posts: 8
United States
Message 98966 - Posted: 31 May 2020, 20:39:20 UTC - in response to Message 98886.  
Last modified: 31 May 2020, 20:45:20 UTC

Got this error with Rosetta and LHC 11:01am UTC 30th May 2020. On all my (Windows 10) machines, while requesting work.
"Peer certificate cannot be authenticated with given CA certificates"
But Universe and Einstein and Milkyway are ok.

Any ideas what screwed up? My computer? Both Rosetta and LHC at once? Boinc in general?


BOINC's handling of an expired entry in the ca-bundle.crt file.

It affects all projects that use https, Windows or Android, and a certain entry in that file.

See the other threads with recent posts for more discussion of details, and a fix for Windows but not Android.
ID: 98966 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 98968 - Posted: 31 May 2020, 21:11:42 UTC

I have just edited this certificate on Windows 10 64 bit.

I had to move the file to Desktop, after closing BOINC, before I was able to Save the file after editing.

When I tried to save in the original directory, I didn't have the correct permissions.

After saving, I moved the file back to C:\Prrogram Files\BOINC successfully. Restarted BOINC, Stuck tasks have now Reported successfully.
ID: 98968 · Report as offensive
Joel Gallegos

Send message
Joined: 1 Jun 20
Posts: 1
United States
Message 98977 - Posted: 1 Jun 2020, 3:20:06 UTC - in response to Message 98969.  

Am I reading correctly that there is no fix for my Android phone? This worked great on my windows machine.

Thanks
ID: 98977 · Report as offensive
Profile Dave
Help desk expert

Send message
Joined: 28 Jun 10
Posts: 2515
United Kingdom
Message 98978 - Posted: 1 Jun 2020, 5:53:08 UTC - in response to Message 98977.  

Am I reading correctly that there is no fix for my Android phone? This worked great on my windows machine.

Thanks


No fix unless your phone is rooted which would enable you to edit the relevant file.
ID: 98978 · Report as offensive
TH1813254617

Send message
Joined: 31 May 20
Posts: 2
Message 98991 - Posted: 1 Jun 2020, 13:57:28 UTC - in response to Message 98965.  

I guess this also means the death of HTC Power to Give (based on BOINC 7.4.39). It was working so very well for me until this point (temperature limits are a bliss)...
Disabling the expired certificates in settings didn't fix the issue for me, editing the ca-bundle.crt also seems really difficult (I need to root my device for that, really?)


I thought Windows sucked until I used Android. Can't we bring back Windows phones?


Wait till you try IOS and iPadOS... You can't even run BOINC on those, despite the fact that Apple ARM chips are hilariously overpowered for what they are used for.
ID: 98991 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 98998 - Posted: 1 Jun 2020, 16:07:46 UTC - in response to Message 98994.  

I can't "Report" Einstein and can't upload Rosetta and World Community Grid. Are these symptoms of this problem? I run Windows 8.1.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 98998 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 99004 - Posted: 1 Jun 2020, 17:32:15 UTC - in response to Message 98998.  

I can't "Report" Einstein and can't upload Rosetta and World Community Grid. Are these symptoms of this problem? I run Windows 8.1.
What version of BOINC are you using? What OS?

Einstein have their own (different) reason for not being able to communicate with very old versions. WCG aren't affected by the new problem.
ID: 99004 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 99005 - Posted: 1 Jun 2020, 18:17:13 UTC

Windows 8.1, BOINC 7.16.5x64. Einstein has perhaps a dozen "Ready to report" on this machine, I just tried again, same. there are others, WCG and Rosetta cannot upload.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 99005 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99006 - Posted: 1 Jun 2020, 18:18:47 UTC - in response to Message 98978.  
Last modified: 1 Jun 2020, 18:51:49 UTC

Am I reading correctly that there is no fix for my Android phone? This worked great on my windows machine.

Thanks


No fix unless your phone is rooted which would enable you to edit the relevant file.


I'm currently looking into a way of editing the BOINC APK file. If I succeed, I will post a workaround on this forum.

[Edit]
I have managed to open the APK file using a free editor, but it can't save changes, only view the file.
Looks like you need to pay for an editor if you want to modify the file.

Rosetta have fixed the issue on the server side, LHC still have the problem, I'm not sure about any other affected projects.
ID: 99006 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 99007 - Posted: 1 Jun 2020, 18:35:01 UTC - in response to Message 99005.  

Windows 8.1, BOINC 7.16.5x64. Einstein has perhaps a dozen "Ready to report" on this machine, I just tried again, same. there are others, WCG and Rosetta cannot upload.
That's obviously a problem, but it's a different problem from the one which sparked this thread.

My advice would be to enable the <http_debug> Event Log flag (you can do that from BOINC Manager with a mouse click these days), and retry just one report or upload to each of the affected projects. We should be able to help you diagnose the problem from the resulting mess in the log.
ID: 99007 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 99008 - Posted: 1 Jun 2020, 18:40:08 UTC

I noticed that credits from one of my affected projects hadn't been added to my account at BOINCstats. Willy has confirmed that the same certificate expiry had prevented him collecting the exported credit stats from the affected projects.

Willy's site is working again now (https://www.boincstats.com/forum/5/12516,1), and I've written to the stats mailing list, but please check your own stats totals on your own preferred stats aggregation site, and tell the operator if you find a problem.
ID: 99008 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 400
Denmark
Message 99009 - Posted: 1 Jun 2020, 18:44:01 UTC
Last modified: 1 Jun 2020, 18:59:18 UTC

I should perhaps mention other projects do not seem to be having any problems. The error log says "blah... transient http error". I am seeing the same issue from two of my systems now.

I'm seeing BOINC can't access the net, but I can.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 99009 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 5077
United Kingdom
Message 99010 - Posted: 1 Jun 2020, 19:01:50 UTC - in response to Message 99009.  

The error log says "blah... transient http error".
That is exactly when you should activate http_debug logging - that's what it's there for.

It will give you details, including what sort of transient error it was.
ID: 99010 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99011 - Posted: 1 Jun 2020, 19:19:30 UTC - in response to Message 99005.  

Try updating to 7.16.7 for Windows 64bit.
ID: 99011 · Report as offensive
Previous · 1 · 2 · 3 · 4 · 5 · 6 . . . 7 · Next

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates

Copyright © 2024 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.