Peer certificate cannot be authenticated with given CA certificates

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates
Message board moderation

To post messages, you must log in.

Previous · 1 · 2 · 3 · 4 · 5 · 6 . . . 7 · Next

AuthorMessage
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 734
United Kingdom
Message 98965 - Posted: 31 May 2020, 19:30:05 UTC - in response to Message 98944.  

I guess this also means the death of HTC Power to Give (based on BOINC 7.4.39). It was working so very well for me until this point (temperature limits are a bliss)...
Disabling the expired certificates in settings didn't fix the issue for me, editing the ca-bundle.crt also seems really difficult (I need to root my device for that, really?)


I thought Windows sucked until I used Android. Can't we bring back Windows phones?
.
ID: 98965 · Report as offensive
robertmiles

Send message
Joined: 17 Jun 11
Posts: 8
United States
Message 98966 - Posted: 31 May 2020, 20:39:20 UTC - in response to Message 98886.  
Last modified: 31 May 2020, 20:45:20 UTC

Got this error with Rosetta and LHC 11:01am UTC 30th May 2020. On all my (Windows 10) machines, while requesting work.
"Peer certificate cannot be authenticated with given CA certificates"
But Universe and Einstein and Milkyway are ok.

Any ideas what screwed up? My computer? Both Rosetta and LHC at once? Boinc in general?


BOINC's handling of an expired entry in the ca-bundle.crt file.

It affects all projects that use https, Windows or Android, and a certain entry in that file.

See the other threads with recent posts for more discussion of details, and a fix for Windows but not Android.
ID: 98966 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 734
United Kingdom
Message 98967 - Posted: 31 May 2020, 20:49:10 UTC - in response to Message 98966.  

Got this error with Rosetta and LHC 11:01am UTC 30th May 2020. On all my (Windows 10) machines, while requesting work.
"Peer certificate cannot be authenticated with given CA certificates"
But Universe and Einstein and Milkyway are ok.

Any ideas what screwed up? My computer? Both Rosetta and LHC at once? Boinc in general?


BOINC's handling of an expired entry in the ca-bundle.crt file.

It affects all projects that use https, Windows or Android, and a certain entry in that file.

See the other threads with recent posts for more discussion of details, and a fix for Windows but not Android.


Er yeah I kinda noticed, since I'm in all those threads.

There must be a fix for Android though.
.
ID: 98967 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 98968 - Posted: 31 May 2020, 21:11:42 UTC

I have just edited this certificate on Windows 10 64 bit.

I had to move the file to Desktop, after closing BOINC, before I was able to Save the file after editing.

When I tried to save in the original directory, I didn't have the correct permissions.

After saving, I moved the file back to C:\Prrogram Files\BOINC successfully. Restarted BOINC, Stuck tasks have now Reported successfully.
ID: 98968 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 734
United Kingdom
Message 98969 - Posted: 31 May 2020, 21:24:19 UTC - in response to Message 98968.  

I have just edited this certificate on Windows 10 64 bit.

I had to move the file to Desktop, after closing BOINC, before I was able to Save the file after editing.

When I tried to save in the original directory, I didn't have the correct permissions.

After saving, I moved the file back to C:\Prrogram Files\BOINC successfully. Restarted BOINC, Stuck tasks have now Reported successfully.


Microsoft are crazy. You have permission to take out and put back the file, but not to change it! At least not while that folder is watching you....
.
ID: 98969 · Report as offensive
Joel Gallegos

Send message
Joined: 1 Jun 20
Posts: 1
United States
Message 98977 - Posted: 1 Jun 2020, 3:20:06 UTC - in response to Message 98969.  

Am I reading correctly that there is no fix for my Android phone? This worked great on my windows machine.

Thanks
ID: 98977 · Report as offensive
Profile Dave

Send message
Joined: 28 Jun 10
Posts: 1054
United Kingdom
Message 98978 - Posted: 1 Jun 2020, 5:53:08 UTC - in response to Message 98977.  

Am I reading correctly that there is no fix for my Android phone? This worked great on my windows machine.

Thanks


No fix unless your phone is rooted which would enable you to edit the relevant file.
ID: 98978 · Report as offensive
TH1813254617

Send message
Joined: 31 May 20
Posts: 2
Message 98991 - Posted: 1 Jun 2020, 13:57:28 UTC - in response to Message 98965.  

I guess this also means the death of HTC Power to Give (based on BOINC 7.4.39). It was working so very well for me until this point (temperature limits are a bliss)...
Disabling the expired certificates in settings didn't fix the issue for me, editing the ca-bundle.crt also seems really difficult (I need to root my device for that, really?)


I thought Windows sucked until I used Android. Can't we bring back Windows phones?


Wait till you try IOS and iPadOS... You can't even run BOINC on those, despite the fact that Apple ARM chips are hilariously overpowered for what they are used for.
ID: 98991 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 734
United Kingdom
Message 98993 - Posted: 1 Jun 2020, 14:32:28 UTC - in response to Message 98991.  
Last modified: 1 Jun 2020, 14:34:21 UTC

I guess this also means the death of HTC Power to Give (based on BOINC 7.4.39). It was working so very well for me until this point (temperature limits are a bliss)...
Disabling the expired certificates in settings didn't fix the issue for me, editing the ca-bundle.crt also seems really difficult (I need to root my device for that, really?)


I thought Windows sucked until I used Android. Can't we bring back Windows phones?


Wait till you try IOS and iPadOS... You can't even run BOINC on those, despite the fact that Apple ARM chips are hilariously overpowered for what they are used for.


It's ok, I wouldn't touch an Apple product with a bargepole. Their continual insistance on reinventing the wheel and making things incompatible means I wouldn't buy them even if they were competitively priced. But since I can get an Android phone for a quarter of the price of an Iphone with the same specs, I don't know why they're still in business.
.
ID: 98993 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 734
United Kingdom
Message 98994 - Posted: 1 Jun 2020, 14:36:26 UTC - in response to Message 98978.  
Last modified: 1 Jun 2020, 14:36:57 UTC

Am I reading correctly that there is no fix for my Android phone? This worked great on my windows machine.

Thanks


No fix unless your phone is rooted which would enable you to edit the relevant file.


I just got the new beta Android Boinc from https://boinc.berkeley.edu/download_all.php

It works on Rosetta, although Rosetta have done a server side fix so everyone works anyway. It does not connect to LHC. But my desktops with the workaround, and now with the new version, do work with LHC.
.
ID: 98994 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 330
Denmark
Message 98998 - Posted: 1 Jun 2020, 16:07:46 UTC - in response to Message 98994.  

I can't "Report" Einstein and can't upload Rosetta and World Community Grid. Are these symptoms of this problem? I run Windows 8.1.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 98998 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 734
United Kingdom
Message 99001 - Posted: 1 Jun 2020, 16:17:31 UTC - in response to Message 98998.  

I can't "Report" Einstein and can't upload Rosetta and World Community Grid. Are these symptoms of this problem? I run Windows 8.1.


No, Einstein should not have been affected at all.

What do you see in the event log?
.
ID: 99001 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4239
United Kingdom
Message 99004 - Posted: 1 Jun 2020, 17:32:15 UTC - in response to Message 98998.  

I can't "Report" Einstein and can't upload Rosetta and World Community Grid. Are these symptoms of this problem? I run Windows 8.1.
What version of BOINC are you using? What OS?

Einstein have their own (different) reason for not being able to communicate with very old versions. WCG aren't affected by the new problem.
ID: 99004 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 330
Denmark
Message 99005 - Posted: 1 Jun 2020, 18:17:13 UTC

Windows 8.1, BOINC 7.16.5x64. Einstein has perhaps a dozen "Ready to report" on this machine, I just tried again, same. there are others, WCG and Rosetta cannot upload.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 99005 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99006 - Posted: 1 Jun 2020, 18:18:47 UTC - in response to Message 98978.  
Last modified: 1 Jun 2020, 18:51:49 UTC

Am I reading correctly that there is no fix for my Android phone? This worked great on my windows machine.

Thanks


No fix unless your phone is rooted which would enable you to edit the relevant file.


I'm currently looking into a way of editing the BOINC APK file. If I succeed, I will post a workaround on this forum.

[Edit]
I have managed to open the APK file using a free editor, but it can't save changes, only view the file.
Looks like you need to pay for an editor if you want to modify the file.

Rosetta have fixed the issue on the server side, LHC still have the problem, I'm not sure about any other affected projects.
ID: 99006 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4239
United Kingdom
Message 99007 - Posted: 1 Jun 2020, 18:35:01 UTC - in response to Message 99005.  

Windows 8.1, BOINC 7.16.5x64. Einstein has perhaps a dozen "Ready to report" on this machine, I just tried again, same. there are others, WCG and Rosetta cannot upload.
That's obviously a problem, but it's a different problem from the one which sparked this thread.

My advice would be to enable the <http_debug> Event Log flag (you can do that from BOINC Manager with a mouse click these days), and retry just one report or upload to each of the affected projects. We should be able to help you diagnose the problem from the resulting mess in the log.
ID: 99007 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4239
United Kingdom
Message 99008 - Posted: 1 Jun 2020, 18:40:08 UTC

I noticed that credits from one of my affected projects hadn't been added to my account at BOINCstats. Willy has confirmed that the same certificate expiry had prevented him collecting the exported credit stats from the affected projects.

Willy's site is working again now (https://www.boincstats.com/forum/5/12516,1), and I've written to the stats mailing list, but please check your own stats totals on your own preferred stats aggregation site, and tell the operator if you find a problem.
ID: 99008 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 330
Denmark
Message 99009 - Posted: 1 Jun 2020, 18:44:01 UTC
Last modified: 1 Jun 2020, 18:59:18 UTC

I should perhaps mention other projects do not seem to be having any problems. The error log says "blah... transient http error". I am seeing the same issue from two of my systems now.

I'm seeing BOINC can't access the net, but I can.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 99009 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4239
United Kingdom
Message 99010 - Posted: 1 Jun 2020, 19:01:50 UTC - in response to Message 99009.  

The error log says "blah... transient http error".
That is exactly when you should activate http_debug logging - that's what it's there for.

It will give you details, including what sort of transient error it was.
ID: 99010 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99011 - Posted: 1 Jun 2020, 19:19:30 UTC - in response to Message 99005.  

Try updating to 7.16.7 for Windows 64bit.
ID: 99011 · Report as offensive
Previous · 1 · 2 · 3 · 4 · 5 · 6 . . . 7 · Next

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates

Copyright © 2020 University of California. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.