Peer certificate cannot be authenticated with given CA certificates

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates
Message board moderation

To post messages, you must log in.

Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 · Next

AuthorMessage
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 326
Denmark
Message 99012 - Posted: 1 Jun 2020, 19:26:30 UTC - in response to Message 99010.  
Last modified: 1 Jun 2020, 19:30:47 UTC

The error log says "blah... transient http error".
That is exactly when you should activate http_debug logging - that's what it's there for.

It will give you details, including what sort of transient error it was.


01/06/2020 21:25:15 | | BOINC can't access Internet - check network connection or proxy configuration.

I, obviously, can.

<edit>
I have just had a TNGrid unit finish, and upload without issue. I keep seeing BOINC can't access the net.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 99012 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99013 - Posted: 1 Jun 2020, 19:30:17 UTC
Last modified: 1 Jun 2020, 19:32:14 UTC

I've managed to edit and save the BOINC APK, using APK Editor version 1.8.20, but when I try to install my modified APK, I get a warning that the app exists.

I still have a few WCG tasks in progress, and 1 other LHC, apart from the stuck reports.
I'm going to wait until these are finished before I try again.

I'm hoping that LHC can fix things on the server, or BOINC can release an official update for Android, before my LHC results expire.
ID: 99013 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 14288
Netherlands
Message 99014 - Posted: 1 Jun 2020, 19:40:32 UTC - in response to Message 99006.  

I'm currently looking into a way of editing the BOINC APK file. If I succeed, I will post a workaround on this forum.
As far as I can see from Github the developers there are in the process of releasing a new 7.4.53, perhaps with the adjusted certificates file. They run into different difficulties though.
Please do not private message me for tech support, these will be ignored!
ID: 99014 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99015 - Posted: 1 Jun 2020, 19:45:57 UTC - in response to Message 99014.  
Last modified: 1 Jun 2020, 19:49:46 UTC

Thanks Jord.
I have joined GitHub, but I haven't posted there yet.
I don't fully understand how GitHub works, is there a Welcome area for New Users ?
I've just found https://guides.github.com/activities/hello-world/
ID: 99015 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 14288
Netherlands
Message 99016 - Posted: 1 Jun 2020, 19:55:51 UTC - in response to Message 99015.  

Look in https://github.com/BOINC/boinc/issues though (for any and all Android issues)
Please do not private message me for tech support, these will be ignored!
ID: 99016 · Report as offensive
Richard Haselgrove
Volunteer tester
Help desk expert

Send message
Joined: 5 Oct 06
Posts: 4188
United Kingdom
Message 99017 - Posted: 1 Jun 2020, 20:28:28 UTC - in response to Message 99012.  

01/06/2020 21:25:15 | | BOINC can't access Internet - check network connection or proxy configuration.
That's not a debug message - we all see that from time to time.

Enable DEBUG logging to see WHY it failed.
ID: 99017 · Report as offensive
Bryn Mawr
Help desk expert

Send message
Joined: 31 Dec 18
Posts: 87
United Kingdom
Message 99018 - Posted: 1 Jun 2020, 20:38:27 UTC - in response to Message 99008.  

I noticed that credits from one of my affected projects hadn't been added to my account at BOINCstats. Willy has confirmed that the same certificate expiry had prevented him collecting the exported credit stats from the affected projects.

Willy's site is working again now (https://www.boincstats.com/forum/5/12516,1), and I've written to the stats mailing list, but please check your own stats totals on your own preferred stats aggregation site, and tell the operator if you find a problem.


BOINCstats did miss yesterday’s update from Rosetta but managed to pick it up today and update twice so we should be all square.
ID: 99018 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 99019 - Posted: 1 Jun 2020, 20:45:57 UTC - in response to Message 99013.  

I've managed to edit and save the BOINC APK, using APK Editor version 1.8.20, but when I try to install my modified APK, I get a warning that the app exists.

I still have a few WCG tasks in progress, and 1 other LHC, apart from the stuck reports.
I'm going to wait until these are finished before I try again.

I'm hoping that LHC can fix things on the server, or BOINC can release an official update for Android, before my LHC results expire.


My phone told me an APK was corrupt when it actually meant "you already have a newer version installed".
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 99019 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99020 - Posted: 1 Jun 2020, 20:54:10 UTC - in response to Message 99019.  
Last modified: 1 Jun 2020, 21:01:09 UTC

I've seen that Android error before when trying to install a 32bit APK over a newer 64bit version of the same app.

I think many APKs now contain both 32bit and 64bit code, but the 64bit version will be installed in preference to 32.

Google require that all new apps uploaded to Google Play store after 1 August 2019 must support 64bit.
ID: 99020 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 99021 - Posted: 1 Jun 2020, 21:02:33 UTC - in response to Message 99020.  

I've seen that Android error before when trying to install a 32bit APK over a newer 64bit version of the same app.

I think many APKs now contain both 32bit and 64bit code, but the 64bit version will be installed in preference to 32.

Google require that all new apps uploaded to Google Play store after 1 August 2019 must support 64bit.


Well unless Boinc released a 32 bit only version at https://boinc.berkeley.edu/dl/boinc_7.16.3.apk then that can't be what happened to me.
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 99021 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99022 - Posted: 1 Jun 2020, 21:07:13 UTC - in response to Message 99021.  

ID: 99022 · Report as offensive
boboviz
Help desk expert

Send message
Joined: 12 Feb 11
Posts: 360
Italy
Message 99034 - Posted: 2 Jun 2020, 6:41:44 UTC

I don't want to use beta versions or versions from other source than Play Store.
Please, update the official apk (it's 4 years old)
ID: 99034 · Report as offensive
Profile adrianxw
Avatar

Send message
Joined: 2 Oct 05
Posts: 326
Denmark
Message 99035 - Posted: 2 Jun 2020, 7:07:44 UTC
Last modified: 2 Jun 2020, 7:09:10 UTC

Update to 7.16.7 seems to have worked. My transfer list is cleared. I don't think I've ever seem it that big before! I'll role the update out on my other systems as I come to them.
Wave upon wave of demented avengers march cheerfully out of obscurity into the dream.
ID: 99035 · Report as offensive
LUKiO
Avatar

Send message
Joined: 2 Jun 20
Posts: 2
Message 99039 - Posted: 2 Jun 2020, 22:57:03 UTC
Last modified: 2 Jun 2020, 22:58:48 UTC

Hi, domain berkeley.edu is using expired intermediate certificate (root). You can check it here:
https://www.ssllabs.com/ssltest/analyze.html?d=berkeley.edu&hideResults=on
Expired 30 May 2020.
Update the expired certificate on the server.
ID: 99039 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 14288
Netherlands
Message 99040 - Posted: 2 Jun 2020, 23:41:21 UTC - in response to Message 99039.  

ID: 99040 · Report as offensive
LUKiO
Avatar

Send message
Joined: 2 Jun 20
Posts: 2
Message 99042 - Posted: 3 Jun 2020, 4:58:30 UTC - in response to Message 99040.  
Last modified: 3 Jun 2020, 5:15:50 UTC

It doesn't look like that much, considering that they have old certificates on the server for berkeley.edu/berkeley.org. But OK :-)
ID: 99042 · Report as offensive
Raistmer

Send message
Joined: 9 Apr 06
Posts: 242
Message 99047 - Posted: 3 Jun 2020, 9:17:10 UTC
Last modified: 3 Jun 2020, 9:33:13 UTC

No connections to projects because of this issue.
Well, seems BOINC doesn't need my computing power anymore, ok.

EDIT: BTW, why nothing in BOINC notices about this issue?
They so verbose with different junk, but when REALLY user attention required they are silent! WTF!
ID: 99047 · Report as offensive
Profile Jord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 14288
Netherlands
Message 99048 - Posted: 3 Jun 2020, 10:58:17 UTC - in response to Message 99047.  

Notices are not for user attention, or things the user needs to change or adjust. They're for news and other non-intrusive messages. No action needed things.
Please do not private message me for tech support, these will be ignored!
ID: 99048 · Report as offensive
Keith T
Avatar

Send message
Joined: 26 Feb 07
Posts: 71
United Kingdom
Message 99049 - Posted: 3 Jun 2020, 11:00:32 UTC - in response to Message 99047.  

No connections to projects because of this issue.
Well, seems BOINC doesn't need my computing power anymore, ok.

EDIT: BTW, why nothing in BOINC notices about this issue?
They so verbose with different junk, but when REALLY user attention required they are silent! WTF!


Are you still having problems with this on any projects ?

LHC has updated the server https://lhcathome.cern.ch/lhcathome/forum_thread.php?id=5441&postid=42767#42767
Rosetta has also fixed the issue https://boinc.bakerlab.org/rosetta/forum_thread.php?id=14006
I'm only aware of one other affected project. https://numberfields.asu.edu/NumberFields/forum_thread.php?id=460

Are there still any projects that are having problems ?
ID: 99049 · Report as offensive
Peter Hucker
Avatar

Send message
Joined: 6 Oct 06
Posts: 680
United Kingdom
Message 99050 - Posted: 3 Jun 2020, 12:23:11 UTC - in response to Message 99040.  
Last modified: 3 Jun 2020, 12:23:57 UTC

They know: https://calnetweb.berkeley.edu/calnet-technologists/incommon-sectigo-certificate-service/addtrust-external-root-expiration-may-2020


And yet didn't sort it before that date. Utter incompetance. Somebody should have written the expiry date on a calendar for goodness sake. If Boinc was a private company, somebody would now be fired.
Only people with OCD will care that this is a signature. Look up what the D means, it means you're broken.
ID: 99050 · Report as offensive
Previous · 1 · 2 · 3 · 4 · 5 · 6 · 7 · Next

Message boards : Questions and problems : Peer certificate cannot be authenticated with given CA certificates

Copyright © 2020 University of California. Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.