Certificate error in Linux BOINC

Message boards : Number crunching : Certificate error in Linux BOINC

1 · 2 · Next

Author	Message
Paul Send message Joined: 17 Nov 15 Posts: 19 Credit: 152,712 RAC: 572	Message 9126 - Posted: 19 Sep 2025, 17:53:19 UTC I and others are getting certificate errors in Linux preventing access to upload/download. See Problems and bug reports thread SSH-Error - no updates possible. I have lots of units that will time out tonight/Saturday if not uploaded. Paul. ID: 9126 · Rating: 0 · rate: / Reply Quote

Parnikkapore Send message Joined: 27 Sep 16 Posts: 4 Credit: 197,242 RAC: 221	Message 9127 - Posted: 19 Sep 2025, 19:42:19 UTC Looks like the intermediate cert isn't being sent by the server ID: 9127 · Rating: 0 · rate: / Reply Quote

Kompakki Send message Joined: 1 Jan 25 Posts: 1 Credit: 214,957 RAC: 1,075	Message 9129 - Posted: 20 Sep 2025, 6:22:19 UTC Last modified: 20 Sep 2025, 6:23:14 UTC I think, on Ubuntu 24.04 host, I have something like 174 completed units waiting for upload due to this problem. ID: 9129 · Rating: 0 · rate: / Reply Quote

Paratima Send message Joined: 16 Apr 16 Posts: 8 Credit: 75,567,619 RAC: 8,717	Message 9133 - Posted: 20 Sep 2025, 23:54:18 UTC It also won't let us get new WU's. So like, total shutdown. Or Einstein@Home... ID: 9133 · Rating: 0 · rate: / Reply Quote

benhines Send message Joined: 26 Jan 17 Posts: 11 Credit: 63,287,045 RAC: 81,808	Message 9134 - Posted: 21 Sep 2025, 1:22:00 UTC - in response to Message 9133. It also won't let us get new WU's. So like, total shutdown. . There's no more work anyway, so don't lose any sleep over that ID: 9134 · Rating: 0 · rate: / Reply Quote

appu Send message Joined: 17 Sep 13 Posts: 6 Credit: 1,574,725 RAC: 3,513	Message 9135 - Posted: 21 Sep 2025, 14:36:12 UTC Last modified: 21 Sep 2025, 14:37:50 UTC You can download the interme. Certificate. I found it on a server of the university of Münster (Germany) https://www.uni-muenster.de/CA/de/cacerts.shtml Debian: 1. go to /usr/share/ca-certificates 2. create a subfolder: ex. 3rd-party 3. download cert: wget https://www.uni-muenster.de/CA/harica-rsa-server-2025.crt 4. dpkg-reconfigure ca-certificates -> Choose Ask, set a mark on 3rd-party/harica-rsa-server-2025.crt and press OK curl and boinc access are working again. Edit: Orginal Cert: https://repo.harica.gr/rep_dyn.php ID: 9135 · Rating: 0 · rate: / Reply Quote

Paul Send message Joined: 17 Nov 15 Posts: 19 Credit: 152,712 RAC: 572	Message 9138 - Posted: 21 Sep 2025, 17:04:04 UTC - in response to Message 9135. Last modified: 21 Sep 2025, 17:11:32 UTC Thanks for that, needed re-boot to work. Would BOINC re-start be enough? 2nd PC has long tasks with no checkpoint so harder to schedule. I did: paul@8NUC:/usr/share/ca-certificates/3rd$ sudo wget https://www.uni-muenster.de/CA/harica-rsa-server-2025.crt --2025-09-21 17:50:21-- https://www.uni-muenster.de/CA/harica-rsa-server-2025.crt Resolving www.uni-muenster.de (www.uni-muenster.de)... 128.176.6.250, 2001:4cf0:2:20::80b0:6fa Connecting to www.uni-muenster.de (www.uni-muenster.de)\|128.176.6.250\|:443... connected. HTTP request sent, awaiting response... 200 OK Length: 2147 (2.1K) Saving to: ‘harica-rsa-server-2025.crt’ harica-rsa-server-2025.crt 100%[=====================================================================================================================>] 2.10K --.-KB/s in 0s 2025-09-21 17:50:21 (190 MB/s) - ‘harica-rsa-server-2025.crt’ saved [2147/2147] paul@8NUC:/usr/share/ca-certificates/3rd$ sudo dpkg-reconfigure ca-certificates Updating certificates in /etc/ssl/certs... rehash: warning: skipping ca-certificates.crt,it does not contain exactly one certificate or CRL rehash: warning: skipping duplicate certificate in Go_Daddy_Class_2_CA.pem 1 added, 0 removed; done. Processing triggers for ca-certificates (20240203~20.04.1) ... Updating certificates in /etc/ssl/certs... 0 added, 0 removed; done. Running hooks in /etc/ca-certificates/update.d... done. paul@8NUC:/usr/share/ca-certificates/3rd$ openssl s_client -showcerts -connect asteroidsathome.net:443 CONNECTED(00000003) depth=2 C = GR, O = Hellenic Academic and Research Institutions CA, CN = HARICA TLS RSA Root CA 2021 verify return:1 depth=1 C = GR, O = Hellenic Academic and Research Institutions CA, CN = GEANT TLS RSA 1 verify return:1 depth=0 C = CZ, ST = Hlavn\C3\AD m\C4\9Bsto Praha, L = Praha 1, O = Univerzita Karlova, CN = www.asteroidsathome.net verify return:1 --- Certificate chain 0 s:C = CZ, ST = Hlavn\C3\AD m\C4\9Bsto Praha, L = Praha 1, O = Univerzita Karlova, CN = www.asteroidsathome.net i:C = GR, O = Hellenic Academic and Research Institutions CA, CN = GEANT TLS RSA 1 Paul. ID: 9138 · Rating: 0 · rate: / Reply Quote

appu Send message Joined: 17 Sep 13 Posts: 6 Credit: 1,574,725 RAC: 3,513	Message 9139 - Posted: 21 Sep 2025, 17:53:30 UTC You're welcome. Normaly no reboot needed. Only mark the certificate as trusted and you good to go. ID: 9139 · Rating: 0 · rate: / Reply Quote

Paul Send message Joined: 17 Nov 15 Posts: 19 Credit: 152,712 RAC: 572	Message 9140 - Posted: 21 Sep 2025, 18:26:23 UTC - in response to Message 9139. Confirmed no restart required, may have needed a moment or 2 to pick up change. Paul. ID: 9140 · Rating: 0 · rate: / Reply Quote

Paratima Send message Joined: 16 Apr 16 Posts: 8 Credit: 75,567,619 RAC: 8,717	Message 9142 - Posted: 22 Sep 2025, 0:52:43 UTC Tried it on Ubuntu - all responses positive. Thanks. Just have to wait for some new WUs ID: 9142 · Rating: 0 · rate: / Reply Quote

Brummig Send message Joined: 30 Jan 18 Posts: 14 Credit: 1,451,618 RAC: 88	Message 9145 - Posted: 22 Sep 2025, 10:27:41 UTC - in response to Message 9135. When I tried to follow this advice I got a long list of other certificates that were also selected. I assume these are in /usr/share/ca-certificates/mozilla. Should these be deselected or left selected in order to just add the new certificate from www.uni-muenster.de? What is the correct way to remove the new certificate? ID: 9145 · Rating: 0 · rate: / Reply Quote

Paul Send message Joined: 17 Nov 15 Posts: 19 Credit: 152,712 RAC: 572	Message 9146 - Posted: 22 Sep 2025, 11:53:41 UTC - in response to Message 9145. I just left them, they were there already so no harm re-doing. Paul. ID: 9146 · Rating: 0 · rate: / Reply Quote

Paul Send message Joined: 17 Nov 15 Posts: 19 Credit: 152,712 RAC: 572	Message 9147 - Posted: 22 Sep 2025, 14:05:41 UTC - in response to Message 9146. Will there be on official fix? Not everyone is comfortable making this sort of change. Paul. ID: 9147 · Rating: 0 · rate: / Reply Quote

Yavanius Send message Joined: 11 Jan 15 Posts: 19 Credit: 1,148,888 RAC: 577	Message 9148 - Posted: 22 Sep 2025, 14:08:40 UTC - in response to Message 9126. Last modified: 22 Sep 2025, 14:12:40 UTC This is affecting Android too being a derivative of a linux. Not sure if rooting would be needed even if I got into the subsystem. ID: 9148 · Rating: 0 · rate: / Reply Quote

appu Send message Joined: 17 Sep 13 Posts: 6 Credit: 1,574,725 RAC: 3,513	Message 9149 - Posted: 22 Sep 2025, 14:39:03 UTC - in response to Message 9147. Will there be on official fix? Not everyone is comfortable making this sort of change. It's just a work-around. The server operator need to handle out the interm. certifcate via webserver. When it's done it's a transparent process with no additonal "tweaks". ID: 9149 · Rating: 0 · rate: / Reply Quote

MacStevins Send message Joined: 2 Sep 25 Posts: 1 Credit: 17,282 RAC: 493	Message 9152 - Posted: 22 Sep 2025, 21:49:52 UTC - in response to Message 9148. I followed this tutorial for installing certs on android https://www.ssl2buy.com/wiki/how-to-install-ssl-certificate-on-android but the cert that was used on desktop using curl didnt work ID: 9152 · Rating: 0 · rate: / Reply Quote

Paratima Send message Joined: 16 Apr 16 Posts: 8 Credit: 75,567,619 RAC: 8,717	Message 9153 - Posted: 23 Sep 2025, 1:10:35 UTC - in response to Message 9149. Will there be on official fix? Not everyone is comfortable making this sort of change. It's just a work-around. The server operator need to handle out the interm. certifcate via webserver. When it's done it's a transparent process with no additonal "tweaks". I think the question was more specific. Is there anything we can do to call the sysadmin's attention to this problem. Obviously, it isn't on someone's radar. ID: 9153 · Rating: 0 · rate: / Reply Quote

Paul Send message Joined: 17 Nov 15 Posts: 19 Credit: 152,712 RAC: 572	Message 9154 - Posted: 23 Sep 2025, 9:33:24 UTC - in response to Message 9153. I have sent a PM asking if they are aware. Paul. ID: 9154 · Rating: 0 · rate: / Reply Quote

TLD Send message Joined: 13 Dec 12 Posts: 1 Credit: 3,171,727 RAC: 6,084	Message 9161 - Posted: 24 Sep 2025, 16:39:00 UTC Last modified: 24 Sep 2025, 16:41:06 UTC 9166 Asteroids@home 9/24/2025 9:30:27 AM Sending scheduler request: Requested by user. 9167 Asteroids@home 9/24/2025 9:30:27 AM Not requesting tasks: too many uploads in progress 9168 9/24/2025 9:30:28 AM Project communication failed: attempting access to reference site 9169 Asteroids@home 9/24/2025 9:30:28 AM Scheduler request to http://asteroidsathome.net/boinc_cgi/cgi failed: SSL peer certificate or SSH remote key was not OK 9170 9/24/2025 9:30:29 AM Internet access OK - project servers may be temporarily down. 9171 Asteroids@home 9/24/2025 9:31:44 AM Fetching scheduler list 9172 9/24/2025 9:31:46 AM Project communication failed: attempting access to reference site 9173 Asteroids@home 9/24/2025 9:31:46 AM Scheduler list fetch from https://asteroidsathome.net/boinc/ failed: transient HTTP error 9174 9/24/2025 9:31:47 AM Internet access OK - project servers may be temporarily down. Is someone going to fix this or should we just abort all the results and consider this project defunct. ID: 9161 · Rating: 0 · rate: / Reply Quote

Garrulus glandarius Send message Joined: 18 Apr 25 Posts: 3 Credit: 355,264 RAC: 4,605	Message 9168 - Posted: 26 Sep 2025, 6:07:41 UTC - in response to Message 9135. You can download the interme. Certificate. I found it on a server of the university of Münster (Germany) https://www.uni-muenster.de/CA/de/cacerts.shtml Debian: 1. go to /usr/share/ca-certificates 2. create a subfolder: ex. 3rd-party 3. download cert: wget https://www.uni-muenster.de/CA/harica-rsa-server-2025.crt 4. dpkg-reconfigure ca-certificates -> Choose Ask, set a mark on 3rd-party/harica-rsa-server-2025.crt and press OK curl and boinc access are working again. Edit: Orginal Cert: https://repo.harica.gr/rep_dyn.php I'm a bit late to the party but can also confirm it works on Mint 22.1 Initially I tried removing and adding the project, which obviously failed. Managed to add it a few seconds after finishing the above steps. Thanks! ID: 9168 · Rating: 0 · rate: / Reply Quote

1 · 2 · Next

Message boards : Number crunching : Certificate error in Linux BOINC