Message boards :
Questions and problems :
Peer certificate cannot be authenticated with given CA certificates
Message board moderation
Previous · 1 . . . 3 · 4 · 5 · 6 · 7 · Next
Author | Message |
---|---|
Send message Joined: 9 Apr 06 Posts: 242 |
a few people have reported problems on Einstein as well. yep, seems Einstein is affected on this host too :( Well, I't try to extract new file from latest package then report. |
Send message Joined: 5 Oct 06 Posts: 4324 ![]() |
Or maybe properly updated ca-bundle.crt is available somewhere?The file already released in the hotfix v7.16.7 of BOINC is at https://raw.githubusercontent.com/computezrmle/boinc/patch-1/curl/ca-bundle.crt It's plaintext, so the easiest way of making it is to 'select all' on that RAW page, and paste it into an empty ca_bundle.crt (text) file. But watch out for outdated OpenSSL library files, too. Ask separately if you fall foul of those. |
![]() Send message Joined: 26 Feb 07 Posts: 71 ![]() |
a few people have reported problems on Einstein as well. Try here https://github.com/BOINC/boinc/blob/master/curl/ |
Send message Joined: 5 Oct 06 Posts: 4324 ![]() |
NO That's the two-year-old one that caused all the trouble in the first place. |
Send message Joined: 9 Apr 06 Posts: 242 |
a few people have reported problems on Einstein as well. Well, I'm not "expert helper", but dare to provide this link ;) : https://github.com/BOINC/boinc/blob/master/curl/ca-bundle.crt to updated certificate's bundle. Replace old with new, and connection will be restored. Thanks Keith for initial hint. |
Send message Joined: 9 Apr 06 Posts: 242 |
a few people have reported problems on Einstein as well. Thanks! I was busy with extraction from exe but realised that taking from sources will be much easier (so came to same link :) ) |
Send message Joined: 9 Apr 06 Posts: 242 |
NO Richard, maybe it's updated already? At least I experimentally confirmed - connection restored.... EDIT: though, actually I did it in little different way: 1) downloaded zipped source tree 2) extracted 3) found required file 4) came back to web-sources and found link to the same place as in ZIP. |
Send message Joined: 5 Oct 06 Posts: 4324 ![]() |
Well, I't try to extract new file from latest package then report.I'll save you the trouble: it'll fail. Master has not yet been updated. There are two contenders for the honour: https://github.com/BOINC/boinc/pull/3791 (good) https://github.com/BOINC/boinc/pull/3802 (bad) |
Send message Joined: 9 Apr 06 Posts: 242 |
Well, I't try to extract new file from latest package then report.I'll save you the trouble: it'll fail. Hm... at least Rosetta uploaded, downloaded and running again on this host. I'm happy and can go back to my ignorance will feelings of completed job, LoL :) (EDIT E@h project is happy too) |
Send message Joined: 5 Oct 06 Posts: 4324 ![]() |
Richard, maybe it's updated already? Check the dates, and read the comments I've put on #3802 this morning. |
![]() Send message Joined: 26 Feb 07 Posts: 71 ![]() |
NO Sorry, if that one is a problem, can it be removed as a download ? Or replaced with the latest correct version ? |
Send message Joined: 5 Oct 06 Posts: 4324 ![]() |
Hm... at least Rosetta uploaded, downloaded and running again on this host.Rosetta and LHC have done server-side updates. NumberFields, I suspect, is still broken and has lost a lot of computing power because of this foul-up. I seem to be doing mostly other people's cast-offs at the moment. |
Send message Joined: 9 Apr 06 Posts: 242 |
This issue stopped few my old Android hosts with NativeBOINC and w/o root rights :/ Still no progress there (and BOINC from Google Play doesn't support those devices either). |
Send message Joined: 9 Apr 06 Posts: 242 |
Hm... at least Rosetta uploaded, downloaded and running again on this host.Rosetta and LHC have done server-side updates. NumberFields, I suspect, is still broken and has lost a lot of computing power because of this foul-up. I seem to be doing mostly other people's cast-offs at the moment. I don't understand then... Before local file change host didn't able to connect to (updated?) Rosetta server. After I put 2years-old file in place - it can.... The single explanation I have - 2-years-old-files missed some junk that was added later... |
Send message Joined: 5 Oct 06 Posts: 4324 ![]() |
Sorry, if that one is a problem, can it be removed as a download ? Or replaced with the latest correct version ?To explain how GitHub works: Normally, 'master' has the latest and greatest version. Access to master is controlled, peer-reviewed, and automatically tested - so usually, it's good. But in this case, because of the urgency of the situation, the priority was to get out a quick'n'dirty fix. So, the best copy (currently) is actually in https://github.com/BOINC/boinc/tree/client_release/7/7.16/curl (note the date and comment) But it's slightly difficult to download a single file, so it's easier to make your own file from https://raw.githubusercontent.com/BOINC/boinc/client_release/7/7.16/curl/ca-bundle.crt |
Send message Joined: 5 Oct 06 Posts: 4324 ![]() |
The single explanation I have - 2-years-old-files missed some junk that was added later...Yes, you were probably using a 6-years-old file... ;-) |
Send message Joined: 9 Apr 06 Posts: 242 |
The single explanation I have - 2-years-old-files missed some junk that was added later...Yes, you were probably using a 6-years-old file... ;-) :D :D :D very probably :) |
![]() Send message Joined: 26 Feb 07 Posts: 71 ![]() |
Sorry, if that one is a problem, can it be removed as a download ? Or replaced with the latest correct version ?To explain how GitHub works: Thanks again Richard ! You are correct that I am a complete newbie at GitHub. I think my mistake was in assuming that something called Master would be the authoritative version ! |
![]() Send message Joined: 10 Mar 20 Posts: 24 |
I see it solved itself in the end, but can we please post with a certain level of respect to each other? The attacks, if you feel you need to do them, do so in private message, not in these threads. Thank you. |
![]() Send message Joined: 6 Oct 06 Posts: 875 ![]() |
And yet didn't sort it before that date. Utter incompetance. Somebody should have written the expiry date on a calendar for goodness sake. If Boinc was a private company, somebody would now be fired. You forget that each and every one of us is also a volunteer, spending a lot of time and money on computers and electricity. This problem, which could have been avoided by someone remembering to update the certificate before it expired, would have saved 100s of 1000s of people a wasted afternoon, and saved the stopping of many important science projects. Perhaps the programmers could pay more attention in future. |
Copyright © 2021 University of California. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.