| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
 |
World Community Grid Forums
Category: Support
Forum: BOINC Agent Support
Thread: FreeBSD boinc_client failed to communicate with WCG server |
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 12
|
|
| Author |
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
For last several days, more and more machines under my account failed to communicate with project servers with the following error messages:
23:34:43 http://www.worldcommunitygrid.org/ Scheduler request failed: Peer certificate cannot be authenticated with known CA certificates 23:34:41 Internet access OK - project servers may be temporarily down. 23:34:40 Project communication failed: attempting access to reference site 23:34:38 http://www.worldcommunitygrid.org/ Sending scheduler request: Requested by user. Requesting 138242 seconds of work, reporting 0 completed tasks All of them are FreeBSD/i386, with linux emulation. Detaching and reattaching does not fix the problem. Any comments? Thanks in advance. |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Can you provide the complete messages, please? Have you updated BOINC recently?
|
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Can you provide the complete messages, please? Have you updated BOINC recently? These are complete messages (though in reverse order due to boinc_curses cut-n-paste); no, there is no client upgrade, I have boinc-client-6.4.5_2 from FreeBSD ports installed. Here is complete log which client generates if I restart it by hand: > boinc_client 29-Jan-2009 23:47:17 [---] Starting BOINC client version 6.4.5 for i386-pc-freebsd 29-Jan-2009 23:47:17 [---] log flags: task, file_xfer, sched_ops 29-Jan-2009 23:47:17 [---] Libraries: libcurl/7.19.2 OpenSSL/0.9.8e zlib/1.2.3 29-Jan-2009 23:47:17 [---] Data directory: /var/db/boinc 29-Jan-2009 23:47:17 [---] Processor: 2 i386 Intel(R) Core(TM)2 Duo CPU E7200 @ 2.53GHz [] [sse sse2 sse3 mmx] 29-Jan-2009 23:47:17 [---] Processor features: 29-Jan-2009 23:47:17 [---] OS: FreeBSD: 7.1-STABLE 29-Jan-2009 23:47:17 [---] Memory: 1.96 GB physical, 0 bytes virtual 29-Jan-2009 23:47:17 [---] Disk: 382.03 GB total, 382.00 GB free 29-Jan-2009 23:47:17 [---] Local time is UTC +3 hours 29-Jan-2009 23:47:17 [---] Not using a proxy 29-Jan-2009 23:47:17 [---] Can't load library libcudart 29-Jan-2009 23:47:17 [---] No coprocessors 29-Jan-2009 23:47:17 [http://www.worldcommunitygrid.org/] URL: http://www.worldcommunitygrid.org/; Computer ID: not assigned yet; location: (none); project prefs: default 29-Jan-2009 23:47:17 [---] General prefs: from http://www.gpugrid.net/ (last modified 18-Jan-2009 15:33:19) 29-Jan-2009 23:47:17 [---] Host location: none 29-Jan-2009 23:47:17 [---] General prefs: using your defaults 29-Jan-2009 23:47:17 [---] Preferences limit memory usage when active to 1002.70MB 29-Jan-2009 23:47:17 [---] Preferences limit memory usage when idle to 1804.87MB 29-Jan-2009 23:47:17 [---] Preferences limit disk usage to 20.00GB 29-Jan-2009 23:48:02 [http://www.worldcommunitygrid.org/] Sending scheduler request: Requested by user. Requesting 138242 seconds of work, reporting 0 completed tasks 29-Jan-2009 23:48:07 [---] Project communication failed: attempting access to reference site 29-Jan-2009 23:48:07 [http://www.worldcommunitygrid.org/] Scheduler request failed: Peer certificate cannot be authenticated with known CA certificates 29-Jan-2009 23:48:09 [---] Internet access OK - project servers may be temporarily down. |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Could it be that this problem started when you upgraded to BOINC 6.4.5? We don't recommend that version.
|
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Could it be that this problem started when you upgraded to BOINC 6.4.5? We don't recommend that version. It does not seem so; however, I'll contact FreeBSD BOINC port maintainer to clarify the issue. Thank you. |
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Pav is familiar with the CA certificate problem - it re-emerges with every BOINC release, like a <insert colourful metaphor>.
|
||
|
|
Former Member
Cruncher Joined: May 22, 2018 Post Count: 0 Status: Offline |
Pav is familiar with the CA certificate problem - it re-emerges with every BOINC release, like a <insert colourful metaphor>. Here is the result of our (Pav and me) investigation: ==== > PL> > As a sidenote: I can confirm that on a server with non-updated curl 7.18.0 WCG > PL> > is still updating correctly. > PL> Yes the certificate bundle from new curl does not work correctly. > PL> I don't understand why, so far. Still looking. > Thank you, will wait for your comments/decisions. I would say something is slightly wrong with the server. GnuTLS completely rejects communicating with it: $ gnutls-cli -p 443 grid.worldcommunitygrid.org Resolving 'grid.worldcommunitygrid.org'... Connecting to '198.20.8.241:443'... *** Fatal error: A TLS packet with unexpected length was received. *** Handshake has failed GNUTLS ERROR: A TLS packet with unexpected length was received. $ openssl s_client -host grid.worldcommunitygrid.org -port 443 -CAfile /usr/local/share/certs/ca-root-nss.crt CONNECTED(00000003) depth=0 /C=US/ST=GEORGIA/L=Jasper/O=Sea Blue, Inc./OU=Sea Blue, Inc./CN=grid.worldcommunitygrid.org verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 /C=US/ST=GEORGIA/L=Jasper/O=Sea Blue, Inc./OU=Sea Blue, Inc./CN=grid.worldcommunitygrid.org verify error:num=27:certificate not trusted verify return:1 depth=0 /C=US/ST=GEORGIA/L=Jasper/O=Sea Blue, Inc./OU=Sea Blue, Inc./CN=grid.worldcommunitygrid.org verify error:num=21:unable to verify the first certificate verify return:1 --- But if I edit only the Entrust cert from the bundle, it suddenly works: $ openssl s_client -host grid.worldcommunitygrid.org -port 443 -CAfile te CONNECTED(00000003) depth=1 /C=US/O=Entrust.net/OU=www.entrust.net/CPS incorp. by ref. (limits liab.)/OU=(c) 1999 Entrust.net Limited/CN=Entrust.net Secure Server Certification Authority verify return:1 depth=0 /C=US/ST=GEORGIA/L=Jasper/O=Sea Blue, Inc./OU=Sea Blue, Inc./CN=grid.worldcommunitygrid.org verify return:1 For a workaround, go to /usr/ports/net/boinc-client, make patch, edit work/boinc-client-6.4.5/client/http_curl.cpp, look for curlErr = curl_easy_setopt(curlEasy, CURLOPT_SSL_VERIFYPEER, 1L); and change it to curlErr = curl_easy_setopt(curlEasy, CURLOPT_SSL_VERIFYPEER, 0L); recompile, install. Sorry I cannot help you better. This SSL thing is way over my head. ==== [Edit 1 times, last edit by Former Member at Jan 30, 2009 11:37:36 AM] |
||
|
|
Nick-MMX
Advanced Cruncher Joined: Dec 24, 2006 Post Count: 108 Status: Offline |
I has this same problem when I ran boinc on a ubuntu server 6.04 this year. It was caused by the router blocking ssl connections to my specific computer on specific ports.
You might try hard resetting your router and setting it up again. |
||
|
|
oroszgyozo
Cruncher Joined: Feb 16, 2009 Post Count: 7 Status: Offline Project Badges: 
|
Thank you, but I still have a problem: i don't know where i should put the gui_rpc_auth.cfg file. I tried in /usr/home/my_user/boinc/ and run the following command: boinc_client --dir /usr/home/my_user/boinc/ --allow_remote_gui_rpc --daemon but I can't connect.
It worked when I installed from ports ( the file were located in /var/db/boinc-cline I think ) |
||
|
|
JmBoullier
Former Community Advisor Normandy - France Joined: Jan 26, 2007 Post Count: 3716 Status: Offline Project Badges: 
|
This file must be placed in BOINC's Data directory.
----------------------------------------Look at the Data Directory line at the start of your message log to know the exact location in your setup. |
||
|
|
|