Message boards : Sixtrack Application : my experience with "peer certificate cannot be authenticated with known ca certificates"
Message board moderation

To post messages, you must log in.

AuthorMessage
Ano

Send message
Joined: 29 Nov 09
Posts: 42
Credit: 229,229
RAC: 0
Message 34293 - Posted: 5 Feb 2018, 17:36:27 UTC

Hi,

For a while, due to my computer getting in higher temperatures than usual, I stopped using BOINC.
Then today, after fixing that, I decided to come back, but when trying to connect to LHC@home, I got
the error in the message log "peer certificate cannot be authenticated with known ca certificates"
I'm under windows XP and using an old version of boinc, and that may have made my situation worst,
but maybe the fix I used could work independently from os and boinc version, which is why I'm sharing it.

I first backed up my old "ca-bundle.crt" file in the BOINC folder (though I doubt I will either use this backup)
then got a new one from https://github.com/BOINC/boinc/blob/master/curl/ca-bundle.crt (I don't know how
"officiel" it is, but I don't think it could cause harm).
Then restarted boinc, but I got a new message telling me to reattach to the project with https (the true message
actually give the exact url).
After detaching and reattaching, it seems to work again (can't be sure until I get work, but there's no more errors).

I hope that my experience can be useful to others (though I wish people would just not run into any problem instead :p)
ID: 34293 · Report as offensive     Reply Quote
Alessio Mereghetti
Volunteer moderator
Project administrator
Project developer
Project tester
Project scientist

Send message
Joined: 29 Feb 16
Posts: 117
Credit: 1,408,570
RAC: 3,716
Message 34297 - Posted: 6 Feb 2018, 7:47:15 UTC - in response to Message 34293.  

Thanks a lot for your post, Ano. I think it will for sure help other people having your same experience!
ID: 34297 · Report as offensive     Reply Quote
Profile Nils Høimyr
Volunteer moderator
Project administrator
Project developer
Project tester

Send message
Joined: 15 Jul 05
Posts: 198
Credit: 4,085,487
RAC: 8,294
Message 34298 - Posted: 6 Feb 2018, 8:09:42 UTC - in response to Message 34293.  

If you install a later version of BOINC, 7.2 or later, the updated certificate bundle comes with the client.
ID: 34298 · Report as offensive     Reply Quote

Message boards : Sixtrack Application : my experience with "peer certificate cannot be authenticated with known ca certificates"


©2019 CERN