| Index | Recent Threads | Unanswered Threads | Who's Active | Guidelines | Search |
| World Community Grid Forums
|
| No member browsing this thread |
|
Thread Status: Active Total posts in this thread: 11
|
|
| Author |
|
|
GavP
Cruncher Joined: Apr 20, 2005 Post Count: 19 Status: Offline Project Badges:
|
Hi Guys,
This last week I have had an issue where my results won't upload and new tasks won't download. On the "Notices" Tab it says that it can't connect to the internet but I do have a working connection. In the Event log I get a message saying "Scheduler request failed: Peer certificate cannot be authenticated with given CA certificates" This is the first time in 17 years of using the software over many different versions that I have had this problem. Can anyone advise please? Gav ![]() |
||
|
|
PMH_UK
Veteran Cruncher UK Joined: Apr 26, 2007 Post Count: 786 Status: Offline Project Badges:
|
See below link, similar issues reported for many projects.
----------------------------------------https://www.sidock.si/sidock/forum_thread.php?id=152#1235 Paul.
Paul.
|
||
|
|
Bryn Mawr
Senior Cruncher Joined: Dec 26, 2018 Post Count: 384 Status: Offline Project Badges:
|
Hi Guys, This last week I have had an issue where my results won't upload and new tasks won't download. On the "Notices" Tab it says that it can't connect to the internet but I do have a working connection. In the Event log I get a message saying "Scheduler request failed: Peer certificate cannot be authenticated with given CA certificates" This is the first time in 17 years of using the software over many different versions that I have had this problem. Can anyone advise please? Gav ![]() Which project(s) does this affect? What os are you running? |
||
|
|
GavP
Cruncher Joined: Apr 20, 2005 Post Count: 19 Status: Offline Project Badges:
|
Hiya,
Thanks for the replies guys. I'm using the BOINC client running World Community Grid. I've installed the latest client, rebooted, uninstalled and re-installed, Checked the ca-bundle cert and there is no mention of DST Root CA. I've downloaded the recommended ca-bundle.crt file and put it in the following locations: C:\Program Files\BOINC C:\Program Files (x86)\BOINC Gav. |
||
|
|
GavP
Cruncher Joined: Apr 20, 2005 Post Count: 19 Status: Offline Project Badges:
|
OK I've uninstalled again, deleted all BOINC folders (Program files, program files (x86) and Program data, re installed V7.16.20 and now when I try to connect to WCG I get "Failed to add project".
I can't really afford to spend much more time on this as I have already spent way more than I should have. It's would be a shame after 17 years of running this on multiple devices 24/7 without issue if it should end now. :( Gav. |
||
|
|
Falconet
Master Cruncher Portugal Joined: Mar 9, 2009 Post Count: 3315 Status: Offline Project Badges:
|
GavP,
----------------------------------------The failure to add the project is being caused by the same "Scheduler request failed: Peer certificate cannot be authenticated with given CA certificates" error. Is this happening on just the one device? Any new Firewall software or something like that? Can you do a search for the ca_bundle.crt file on your PC? Assuming there is an issue with that, I've heard of some people who had that file in more places than just the BOINC install folder. If you do find any (likely in folders with BOINC in the name, IIRC), delete them, uninstall BOINC and install again. ![]() - AMD Ryzen 5 1600AF 6C/12T 3.2 GHz - 85W - AMD Ryzen 5 2500U 4C/8T 2.0 GHz - 28W - AMD Ryzen 7 7730U 8C/16T 3.0 GHz [Edit 1 times, last edit by Falconet at Nov 29, 2021 11:24:17 AM] |
||
|
|
Grumpy Swede
Master Cruncher Svíþjóð Joined: Apr 10, 2020 Post Count: 2501 Status: Offline Project Badges:
|
That is very strange. WCG is not affected by this ca-bundle.crt issue, at least not yet.
----------------------------------------I'm running on one of my computers (Vista) an old BOINC client, (version 7.6.22), from 2015, with a ca-bundle.crt file also from 2015. I have no problems connecting with WCG. And why you have BOINC in both C:\Program Files\BOINC and C:\Program Files (x86)\BOINC is another question. AFAIK the 32-bit version installs to C:\Program Files (x86)\BOINC, and the 64-bit version to C:\Program Files\BOINC They shouldn't be in both locations. At least I have never seen that on any of my computers. [Edit 2 times, last edit by Grumpy Swede at Nov 29, 2021 2:59:43 PM] |
||
|
|
knreed
Former World Community Grid Tech Joined: Nov 8, 2004 Post Count: 4504 Status: Offline Project Badges:
|
Please download and install https://boinc.berkeley.edu/dl/boinc_7.16.20_windows_x86_64.exe to make sure that it isn't an issue with the version of OpenSSL or the certificate bundle. I'm 98% sure that this isn't the issue, but it is good to make sure you have this version installed to be certain.
Next, on that specific computer, can you open microsoft edge, and go to World Community Grid. Then click on the padlock icon next the domain name and view the information about the certificate (on Chrome this means click the padlock, click on "connection is secure" then click on "Certificate is valid" but the path might be different on edge). There should then be a section that looks like: Issued to Common Name (CN) *.worldcommunitygrid.org Organization (O) International Business Machines Corporation Organizational Unit (OU) <Not Part Of Certificate> Issued by Common Name (CN) Thawte RSA CA 2018 Organization (O) DigiCert Inc Organizational Unit (OU) www.digicert.com Please share what you see for that. |
||
|
|
GavP
Cruncher Joined: Apr 20, 2005 Post Count: 19 Status: Offline Project Badges:
|
Hi,
Thanks for the troubleshooting guys. I Installed again from the link provided (it was the same one I already had but did it anyway) and this still says it failed to add project. It won't let me paste the certificate screenshot for some reason? Issued to: Cloud Security Gateway Issued by: (long hex string).srv.ma Valid from: 29/11/2021 to 30/11/2021 Gav. |
||
|
|
PMH_UK
Veteran Cruncher UK Joined: Apr 26, 2007 Post Count: 786 Status: Offline Project Badges:
|
The issuer and dates make me think of 3rd party security appliance between you and the internet using it's own certificate. This is done in corporate systems to allow the security system to see traffic that otherwise would be hidden be encryption.
----------------------------------------I suspect a change to whoever supplies your internet link. Paul.
Paul.
|
||
|
|
|