implementing SSL on the server

Message boards : News : implementing SSL on the server

To post messages, you must log in.

AuthorMessage
Profile Eric Driver
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 8 Jul 11
Posts: 683
Credit: 45,259,921
RAC: 38,451
Message 1761 - Posted: 20 Aug 2016, 0:52:22 UTC

I enabled SSL on the server, but it seems most browsers don't like the current certificate, so we are still working on getting that resolved.

As a result, you may experience issues trying to access your account. In my case, I got an obnoxious warning, but was able to proceed to the accounts page. It seems that the site still has full functionality; but please let me know if this is not the case.

Thanks!
ID: 1761 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
loranger

Send message
Joined: 11 Jan 16
Posts: 3
Credit: 265,690
RAC: 0
Message 1762 - Posted: 27 Aug 2016, 12:59:25 UTC

Hi,
Two days ago i change my graphic card. After rebooting my computer i can't connect to project on boinc manager. Always the same message : try later.
And Firefox browser (47.0.1 on windows 7) don't like the current certificate when i try to connect to my account on your site.
Have a nice day.
ID: 1762 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Eric Driver
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 8 Jul 11
Posts: 683
Credit: 45,259,921
RAC: 38,451
Message 1763 - Posted: 27 Aug 2016, 17:34:15 UTC - in response to Message 1762.  

Hi,
Two days ago i change my graphic card. After rebooting my computer i can't connect to project on boinc manager. Always the same message : try later.
And Firefox browser (47.0.1 on windows 7) don't like the current certificate when i try to connect to my account on your site.
Have a nice day.


I'm not sure why you can't connect via the BOINC manager; I've tried from multiple platforms and it works for me.

Regarding the certificate, the first time I tried to log in using firefox I got the "Your connection is not secure" error. On the error page you should have an Advanced button. If you click that and then click "Add exception", you should be able to get to the login screen (other browsers will be a little different, but should allow you to bypass the invalid certificate).

I'm still waiting on the IT department to fix this. Sorry for the inconvenience!
ID: 1763 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
loranger

Send message
Joined: 11 Jan 16
Posts: 3
Credit: 265,690
RAC: 0
Message 1764 - Posted: 27 Aug 2016, 18:13:16 UTC

Hi Eric,

Problem solved for the certificate but always impossible to connect to project on manager. Maybe later !!!

Thanks for your answer and your job.
ID: 1764 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Eric Driver
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 8 Jul 11
Posts: 683
Credit: 45,259,921
RAC: 38,451
Message 1765 - Posted: 27 Aug 2016, 23:24:22 UTC - in response to Message 1764.  

Hi Eric,

Problem solved for the certificate but always impossible to connect to project on manager. Maybe later !!!

Thanks for your answer and your job.


I have a virtual machine running an older version of the manager (version 6.10.58). I tried connecting to the project on that platform and nothing happens when I click either the "Home Page" or the "Your Account" buttons. Is this what you mean when you say you can't connect, that nothing happens? If so, maybe it's a problem with the version of the manager. Are you using an older manager?
ID: 1765 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
loranger

Send message
Joined: 11 Jan 16
Posts: 3
Credit: 265,690
RAC: 0
Message 1767 - Posted: 28 Aug 2016, 9:55:41 UTC

Eric,

Boinc Manager 7.6.22 with virtual machine : uninstall all + reinstall only Boinc Manager (same version and last) for Windows 7 64-bit.

I choose on Manager new project, existing user yes, mail and password, project response : adding the project failed - please retry later.
ID: 1767 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Eric Driver
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 8 Jul 11
Posts: 683
Credit: 45,259,921
RAC: 38,451
Message 1769 - Posted: 30 Aug 2016, 16:21:27 UTC - in response to Message 1761.  

All the SSL issues should now be fixed. Please let me know if anyone still has problems. Note that you might need to restart your browser to see the changes - in chrome I was still seeing the https with a red line through it until I rebooted my computer.
ID: 1769 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Vitaly

Send message
Joined: 5 Jan 13
Posts: 16
Credit: 3,432,154
RAC: 1,711
Message 1775 - Posted: 11 Oct 2016, 14:08:16 UTC - in response to Message 1769.  
Last modified: 11 Oct 2016, 14:14:18 UTC

Hi Eric,

I have Ubuntu 14.04 and tried to add NumberFields project to my Boinc. But I can't. It is depicted that "Failed to add project. Try again later". I tried to connect many times.

Also I tried to add the project about a month ago and had the same error.

Thanks.
ID: 1775 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Eric Driver
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 8 Jul 11
Posts: 683
Credit: 45,259,921
RAC: 38,451
Message 1776 - Posted: 11 Oct 2016, 16:04:52 UTC - in response to Message 1775.  

Hi Eric,

I have Ubuntu 14.04 and tried to add NumberFields project to my Boinc. But I can't. It is depicted that "Failed to add project. Try again later". I tried to connect many times.

Also I tried to add the project about a month ago and had the same error.

Thanks.


Are you using an older manager?

I ask because I could never get my VM with an older manager to work after enabling SSL. I tried everything including disabling SElinux and the firewall, but nothing seemed to work. I checked the messages as well as the server logs, httpd logs, etc; but there were no clues as to why the connection failed. The only thing that worked for me was upgrading the linux kernel to a more recent version and then reinstalling BOINC.

I'd be interested to hear if someone found a simpler way to connect using an older machine/manager.
ID: 1776 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Vitaly

Send message
Joined: 5 Jan 13
Posts: 16
Credit: 3,432,154
RAC: 1,711
Message 1777 - Posted: 11 Oct 2016, 16:46:00 UTC - in response to Message 1776.  

The fact is that BOINC under Ubuntu is very restricted in its options. In particular, it has only "Simplified View" and has no option to view the version of BOINC. But it seems to me the version is old.

I used installation instructions depicted in official Berkley site:

http://boinc.berkeley.edu/wiki/Installing_BOINC_on_Ubuntu

I used "Non-graphics installation":
sudo aptitude install boinc-client

Also I want to note that I was successfully added PrimeGrid project.
ID: 1777 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Richard Haselgrove

Send message
Joined: 28 Oct 11
Posts: 98
Credit: 74,051,148
RAC: 59,385
Message 1778 - Posted: 11 Oct 2016, 17:24:11 UTC - in response to Message 1776.  

I'd be interested to hear if someone found a simpler way to connect using an older machine/manager.

I see that Vitaly also has a Windows 7 machine attached to the project.

If he finds the file 'account_numberfields.asu.edu_NumberFields.xml' in the root of the BOINC data directory on that machine, and copies it to the equivalent location in the data directory of the Ubuntu machine, it *may* attach that machine to the project. You may need to restart the BOINC client/service.

I've used that method to attach a new Windows machine in the past, but I can't be sure that Linux will accept the Windows file format (CRLF line endings, instead of *nix LF only). Also, I did it before SSL came into widespread use: in fact, my own account file still has the http:// master url, and I keep getting nagged to detach and re-attach 'when convenient'. But since it's currently still working, I haven't bothered.
ID: 1778 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Profile Vitaly

Send message
Joined: 5 Jan 13
Posts: 16
Credit: 3,432,154
RAC: 1,711
Message 1779 - Posted: 24 Oct 2016, 8:11:10 UTC - in response to Message 1778.  

Unfortunately, Richard's approach didn't help.

The project is added in BOINC Client but it still cannot connect to the site and retrieve the tasks. Also it didn't add new computer in my account (it seems to me this procedure is performed when adding the project in normal way via BOINC).

Thanks.
ID: 1779 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
M0CZY
Avatar

Send message
Joined: 19 Mar 12
Posts: 5
Credit: 560,349
RAC: 0
Message 1783 - Posted: 16 Nov 2016, 11:00:32 UTC

I tried out version 5.10.45, as it can be used portable on my USB drive, and received the message:
16-Nov-2016 08:51:21 [NumberFields@home] Scheduler request failed: Peer certificate cannot be authenticated with known CA certificates

I suppose that means no more portable operating for me.
The biggest threat to public safety and security is not terrorism, it is Government abuse of authority.

Bitcoin Donations: 1Le52kWoLz42fjfappoBmyg73oyvejKBR3
ID: 1783 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
Richard Haselgrove

Send message
Joined: 28 Oct 11
Posts: 98
Credit: 74,051,148
RAC: 59,385
Message 1784 - Posted: 16 Nov 2016, 14:44:51 UTC - in response to Message 1783.  

I tried out version 5.10.45, as it can be used portable on my USB drive, and received the message:
16-Nov-2016 08:51:21 [NumberFields@home] Scheduler request failed: Peer certificate cannot be authenticated with known CA certificates

I suppose that means no more portable operating for me.

You could try extracting the file 'ca-bundle.crt' from a newer BOINC download and replacing your old one with that. No promise that it will work, though.
ID: 1784 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote
M0CZY
Avatar

Send message
Joined: 19 Mar 12
Posts: 5
Credit: 560,349
RAC: 0
Message 1788 - Posted: 27 Nov 2016, 10:25:07 UTC

No promise that it will work, though.

I tried using the 'ca-bundle.crt' from 7.6.22 in my 5.10.45 installation, and that didn't work.
27-Nov-2016 09:21:08 [NumberFields@home] Scheduler request failed: SSL connect error

The biggest threat to public safety and security is not terrorism, it is Government abuse of authority.

Bitcoin Donations: 1Le52kWoLz42fjfappoBmyg73oyvejKBR3
ID: 1788 · Rating: 0 · rate: Rate + / Rate - Report as offensive    Reply Quote

Message boards : News : implementing SSL on the server


Main page · Your account · Message boards


Copyright © 2017 Arizona State University