Peer certificate cannot be authenticated with given CA certificates

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates
Message board moderation

To post messages, you must log in.

Previous · 1 · 2 · 3 · 4 · 5 . . . 7 · Next

AuthorMessage
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4188
United Kingdom
Message 98916 - Posted: 30 May 2020, 18:03:50 UTC

I did the full update/reboot, and the files uploaded. But this time I lost both CUDA and OpenCL. Faffed around for a while trying to reinstall them - no go. Eventually, simply stopped the client and started it again - GPU was back (I think there's an issue somewhere about needing a delay for the drivers to load, before starting the service). Then had to find a full-feature Manager, because the update had sent me a Debian one with half the menus missing. I think all that's left is to re-enable my backup OpenCL project. And do the other machine...
ID: 98916 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 98917 - Posted: 30 May 2020, 18:06:56 UTC - in response to Message 98916.  
Last modified: 30 May 2020, 18:07:13 UTC

I did the full update/reboot, and the files uploaded. But this time I lost both CUDA and OpenCL. Faffed around for a while trying to reinstall them - no go. Eventually, simply stopped the client and started it again - GPU was back (I think there's an issue somewhere about needing a delay for the drivers to load, before starting the service). Then had to find a full-feature Manager, because the update had sent me a Debian one with half the menus missing. I think all that's left is to re-enable my backup OpenCL project. And do the other machine...


Uh oh. This does not bode well for when I eventually get round to testing Linux (which I've never used before) to see if it really is 3 times (!) faster at processing than Windows.
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 98917 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4188
United Kingdom
Message 98918 - Posted: 30 May 2020, 18:08:32 UTC - in response to Message 98917.  

Uh oh. This does not bode well for when I eventually get round to testing Linux (which I've never used before) to see if it really is 3 times (!) faster at processing than Windows.
Not in general - just the late-lamented special sauce at SETI.
ID: 98918 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 98919 - Posted: 30 May 2020, 18:13:23 UTC - in response to Message 98918.  

Uh oh. This does not bode well for when I eventually get round to testing Linux (which I've never used before) to see if it really is 3 times (!) faster at processing than Windows.
Not in general - just the late-lamented special sauce at SETI.


I was told that things like CPU tasks from Universe and LHC are much faster. I shall have a go using a USB stick to boot xubuntu.

I do find it hard to believe it's a factor of 3, but I was told it was to do with superior memory management. If it is true, what are Microsoft doing?!
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 98919 · Report as offensive
Grumpy Swede
Avatar

Send message
Joined: 30 Mar 20
Posts: 55
Sweden
Message 98920 - Posted: 30 May 2020, 18:15:23 UTC
Last modified: 30 May 2020, 18:16:12 UTC

Eh, could someone explain what you're talking about really? My ca-bundle.crt in the Boinc directory (Windows 8.1, BOINC 7.6,.22), is from 2015-04-30, valid from 1998-08-13 and expired 2018-08-14.
It's issued to, and by gte cybertrust global root, and in the certification path tab, it simply say that the cert has either expired, or isn't valid yet.

I have never had any problems at all with any error messages. So, what's this all about really??
ID: 98920 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 98921 - Posted: 30 May 2020, 18:23:37 UTC - in response to Message 98920.  

Eh, could someone explain what you're talking about really? My ca-bundle.crt in the Boinc directory (Windows 8.1, BOINC 7.6,.22), is from 2015-04-30, valid from 1998-08-13 and expired 2018-08-14.
It's issued to, and by gte cybertrust global root, and in the certification path tab, it simply say that the cert has either expired, or isn't valid yet.

I have never had any problems at all with any error messages. So, what's this all about really??


If you're not running any projects that use a secure connection, you won't see the problem.
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 98921 · Report as offensive
JohnDK

Send message
Joined: 19 Dec 14
Posts: 13
Denmark
Message 98922 - Posted: 30 May 2020, 18:23:48 UTC

Some projects, like Rosetta, started complaining about expired certificates today.
ID: 98922 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4188
United Kingdom
Message 98923 - Posted: 30 May 2020, 18:27:14 UTC - in response to Message 98920.  

The ca-bundle.crt file is, as the name suggests, a bundle of many different certificates. Microsoft only shows you the details for the one on the top of the pile.

Some projects rely on certificates buried further down in the pile. One of those other certificates expired today, and the projects that rely on it got cut off. We know of LHC, NumberFields, and Rosetta so far - there may be others.

If you are running one of those projects you're in trouble - completed work can't be uploaded, new work can't be issued. But if you're not running one of the affected projects, nothing has changed - their certificates are still in the pile, and still valid.
ID: 98923 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4188
United Kingdom
Message 98924 - Posted: 30 May 2020, 18:38:05 UTC

The second Linux machine is always easier than the first - whichever one you start with. All done, all running. Now for those emails. And is it beer o'clock yet?
ID: 98924 · Report as offensive
Grumpy Swede
Avatar

Send message
Joined: 30 Mar 20
Posts: 55
Sweden
Message 98925 - Posted: 30 May 2020, 18:38:24 UTC - in response to Message 98923.  
Last modified: 30 May 2020, 18:41:36 UTC

The ca-bundle.crt file is, as the name suggests, a bundle of many different certificates. Microsoft only shows you the details for the one on the top of the pile.

Some projects rely on certificates buried further down in the pile. One of those other certificates expired today, and the projects that rely on it got cut off. We know of LHC, NumberFields, and Rosetta so far - there may be others.

If you are running one of those projects you're in trouble - completed work can't be uploaded, new work can't be issued. But if you're not running one of the affected projects, nothing has changed - their certificates are still in the pile, and still valid.

Ah, I see. Now that I look at it in notepad, I can see the other certs. Thanks for explaining Richard. Since I have no problems, I'll leave it as it is.
ID: 98925 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 14288
Netherlands
Message 98926 - Posted: 30 May 2020, 18:44:16 UTC
Last modified: 30 May 2020, 18:49:58 UTC

I've checked my Android devices. Einstein may be one. I have work to report but the servers are down or unreachable.
Rosetta uploads stop with transient errors.
But no trouble with Universe or Asteroids.
ID: 98926 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4188
United Kingdom
Message 98927 - Posted: 30 May 2020, 18:49:07 UTC - in response to Message 98926.  
Last modified: 30 May 2020, 18:54:15 UTC

Einstein is OK on my Linux and Windows machines.

Edit - my Android tablet @ Einstein has been OK while all this has been going on. Phew.
ID: 98927 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 14288
Netherlands
Message 98928 - Posted: 30 May 2020, 18:54:27 UTC

Now, it's slightly impossible to update the ca-bundle.crt under Android, unless one has rooted their device. So it's very much possible this completely breaks 7.4.53
(And yes, my non connect @Einstein is that other certificate expiration.)
ID: 98928 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 98931 - Posted: 30 May 2020, 19:13:37 UTC - in response to Message 98924.  

The second Linux machine is always easier than the first - whichever one you start with. All done, all running. Now for those emails. And is it beer o'clock yet?


I brew my own, it's always beer o'clock. 20 times cheaper! (No tax)
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 98931 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 98932 - Posted: 30 May 2020, 19:16:08 UTC - in response to Message 98928.  

Now, it's slightly impossible to update the ca-bundle.crt under Android, unless one has rooted their device. So it's very much possible this completely breaks 7.4.53
(And yes, my non connect @Einstein is that other certificate expiration.)


Oh well, my antique Android 4.5 phone will only get the non-SSL projects then. But my Android 7 phone is on version 7.16.5, so I assume it can get a newer one too.
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 98932 · Report as offensive
TH1813254617

Send message
Joined: 31 May 20
Posts: 2
Message 98944 - Posted: 31 May 2020, 5:13:48 UTC
Last modified: 31 May 2020, 5:15:53 UTC

I guess this also means the death of HTC Power to Give (based on BOINC 7.4.39). It was working so very well for me until this point (temperature limits are a bliss)...
Disabling the expired certificates in settings didn't fix the issue for me, editing the ca-bundle.crt also seems really difficult (I need to root my device for that, really?)
ID: 98944 · Report as offensive
Profile Magic Quantum Mechanic
Avatar

Send message
Joined: 14 Aug 09
Posts: 4
United States
Message 98947 - Posted: 31 May 2020, 7:48:38 UTC - in response to Message 98903.  
Last modified: 31 May 2020, 8:23:07 UTC

I trust Toby most of the time but he might want to add all of our cores to his fleet and rule the world
It was said over there that it was just Win 10 but it is everything (no problem at Einstein)
And over at -dev we have the same thing and can't reload......but funny thing is one of my hosts did get new work when I just left it running to get more work for a while
This is always something that happens on a saturday night usually just VB and this time Sixtrack too.

OK back to watching The Invaders on the 75in 4K UHD
ID: 98947 · Report as offensive
Profile Dave

Send message
Joined: 28 Jun 10
Posts: 981
United Kingdom
Message 98949 - Posted: 31 May 2020, 8:16:56 UTC

No problems on my two Linux machines on CPDN which uses https. No reports of this problem on the CPDN boards from users though uploading zips to Oz is proving a problem for Windows users at the moment but that is a server in Tasmania that needs size 10 therapy.
ID: 98949 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4188
United Kingdom
Message 98950 - Posted: 31 May 2020, 8:21:45 UTC - in response to Message 98949.  

No problems on my two Linux machines on CPDN which uses https. No reports of this problem on the CPDN boards from users though uploading zips to Oz is proving a problem for Windows users at the moment but that is a server in Tasmania that needs size 10 therapy.
I've just asked CPDN users to use extra logging detail on that Oz server to decode the "transient HTTP error" - we need to be certain exactly what's going on. The new report yesterday (that you asked for a log for) is within the time bracket for the certificate expiry.
ID: 98950 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 14288
Netherlands
Message 98959 - Posted: 31 May 2020, 14:32:41 UTC - in response to Message 98944.  

I guess this also means the death of HTC Power to Give (based on BOINC 7.4.39). It was working so very well for me until this point (temperature limits are a bliss)...
Disabling the expired certificates in settings didn't fix the issue for me, editing the ca-bundle.crt also seems really difficult (I need to root my device for that, really?)
The BOINC programs and data directories are under the root data directory, at ./data/data/edu.berkeley.boinc and cannot be looked at or edited without having rooted the device. Total Commander will give an error even when you try to look at ./data, let alone anything deeper.
ID: 98959 · Report as offensive
Previous · 1 · 2 · 3 · 4 · 5 . . . 7 · Next

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates

Copyright © 2020 University of California. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.