Index  | Recent Threads  | Unanswered Threads  | Who's Active  | Guidelines  | Search
 

Quick Go »
No member browsing this thread
Thread Status: Active
Total posts in this thread: 72
Posts: 72   Pages: 8   [ Previous Page | 1 2 3 4 5 6 7 8 | Next Page ]
[ Jump to Last Post ]
Post new Thread
Author
Previous Thread This topic has been viewed 7098 times and has 71 replies Next Thread
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

Alright.

What is the most up to date version I should be using?

I can modify the files in PE builder and make a disk with the current version to see if it helps.

I am currently using 5.10.30
Also, I copied the current ca certificate.
I do not know if you have looked at a BOINCPE build or not but it does not use a lot of the xml files that a standard client uses. Could that be the problem? I notice when I boot up and it loads boinc manager, it pops a wizard up asking if I want to look for local override which seems against the purpose of an unattended-headless disk.

I can send you any of the files that I have involved in this process if you would like me to. If you can think of any changes to the config files I'd be happy to experiment with those as well.
Thank You
----------------------------------------
[Edit 1 times, last edit by Former Member at Mar 27, 2008 9:47:00 PM]
[Mar 27, 2008 9:42:02 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

5.10.45 is current.

As I understand it, BOINC PE relies on account managers to control what projects are attached. For anyone just running World Community Grid, I advise simply including the account file in the disk image, so that BOINC remains permanently attached.

I don't understand your mention of a wizard. BOINC contains no such wizard normally. Can you describe it more fully?
[Mar 27, 2008 10:05:32 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates


This is the first thing that pops up after the BOINC manager comes up.

I can hit cancel ,tell it to sync with my bam account and it will begin crunching . Also, it appears to replace my head unit's bam id. I'm not sure why it does this.

For being refuted as being the most simple solution for headless farms, its a bit confusing; a lot pieces to keep track of.
[Mar 28, 2008 3:33:58 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

As to which is most simple - that depends if you want to change your configuration or not. If all your computers compute for a single project under a single username, then a custom configuration is much simpler than using an account manager.

You still need to supply a custom configuration for BOINC PE to automatically attach to the account manager, so there's no more work involved.

I'm fairly sure all this is explained on the BOINC PE site - please review it and make sure your setup is complete.
[Mar 28, 2008 3:38:29 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
biggrin Re: Peer certificate cannot be authenticated with known CA certificates

ALRIGHT EVERYONE! ARE YOU READY FOR THE SOLUTION TO THE CA CERTIFICATE PROBLEM?

When you are building your PE Disk, you place xml config files in the Driveletter:\ BOINC-PE\plugin\BOINC_client\data

This is also where you should copy your ca-bundle.crt file as well.

I tried it and it worked just fine using 5.10.30.

Good Luck to all
biggrin
[Apr 1, 2008 6:16:33 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Sekerob
Ace Cruncher
Joined: Jul 24, 2005
Post Count: 20043
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

Great, that confirms Ageless observation. I manually split my set up and put the cert.file into the C:\ProgramData\BOINC\ dir and took it out of the C:\Program Files\BOINC dir, on Vista and things continued properly.

Also found the remote_hosts.cfg file wanted to be in the Data Dir. The FAQ of Jord makes no mention of that file. That's with 5.10.45.
----------------------------------------
WCG Global & Research > Make Proposal Help: Start Here!
Please help to make the Forums an enjoyable experience for All!
[Apr 1, 2008 6:31:54 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

The instructions are incomplete for setting up the BAM.
In the acct_mgr_login.xml file, it states that you should zero out the previous_host_cpid tag and the next_rpc_time tag. You should also zero out the host_authenticator or all the machines will connect to BAM as the machine you copied the xml file from. I have to believe that it is not a good thing. I zero'd out that tag and it gave my machines a unique BAM ID even when the host name was the same.
----------------------------------------
[Edit 1 times, last edit by Former Member at Apr 1, 2008 7:06:33 PM]
[Apr 1, 2008 7:04:58 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

So now I have a new problem.
I updated my BOINC client to 5.10.45.
The batch file that kicks BOINC off bombs.

Here is the line it bombs on.
start /D%BOINCclient% /low %BOINCclient%\boinc.exe -return_results_immediately -dir %BOINCdata%


I cannot gather any error data on it because it is in a new shell window and the window closes after it is finished.

It worked just fine with 5.10.30. Anyone have any insight as to why the difference and should I be concerned with upgrading the clients from .30 to .45?
[Apr 2, 2008 6:55:13 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Sekerob
Ace Cruncher
Joined: Jul 24, 2005
Post Count: 20043
Status: Offline
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

Have u used WCG customized version or the original Berkeley release?
----------------------------------------
WCG Global & Research > Make Proposal Help: Start Here!
Please help to make the Forums an enjoyable experience for All!
[Apr 2, 2008 7:03:44 PM]   Link   Report threatening or abusive post: please login first  Go to top 
knreed
Former World Community Grid Tech
Joined: Nov 8, 2004
Post Count: 4504
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: Peer certificate cannot be authenticated with known CA certificates

I believe that Berkeley removed the -return_results_immediately command line option from the core client.

Ah yes - here is the checkin note from Rom:

* client: removed -return_results_immediately cmdline option

(wasn't implemented anyway)

* client: added <report_results_immediately> configuration flag;

causes results to be reported as soon as done.
Needed for some WCG machines that are reformatted often.
Should NOT be used in general, since it increases server load.



http://boinc.ssl.berkeley.edu/trac/browser/br...0/checkin_notes?rev=14666
----------------------------------------
[Edit 1 times, last edit by knreed at Apr 2, 2008 7:48:32 PM]
[Apr 2, 2008 7:47:40 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Posts: 72   Pages: 8   [ Previous Page | 1 2 3 4 5 6 7 8 | Next Page ]
[ Jump to Last Post ]
Post new Thread