Posts by rippi
|
1)
(Message 7785)
Posted 11 Mar 2023 by rippi Post: Certificate is renewed. Happy crunching :) |
|
2)
(Message 7778)
Posted 11 Mar 2023 by rippi Post: [deleted as duplicate] |
|
3)
(Message 7777)
Posted 11 Mar 2023 by rippi Post: I'd like an explanation of how a website can become dangerous in literally one second. How can it be safe now, then not safe one second later? What's magical about these certificates? How can they prove a site is safe for the whole sometimes 10 years the certificate is issued for? It's like me getting a driving license which expires in 50 years, then saying I must therefore be a safe driver in 50 years, but in 51 years, I'm dangerous. Nonsensical. It is not the website becoming dangerous once the certificate expires. It is more about trust I guess. The certificate gets issued by a trusted third party for a given time frame. If the certificate expires/is not renewed you can no longer be sure, that the website was not taken over by someone else. Your driving license example might not be fitting in this case. Maybe a passport would be more accurate. If your passport is stolen it can only be used by a bad actor until it expires. A 10 year validity is really unusual by the way. Usually it is only one or two years (or even shorter). I can understand that this is annoying, but this is something the project administrators need to get a grip on. Especially as things like https://letsencrypt.org exist. I don't follow guidelines on safety. I'm sick of this happening every couple of months to one project or another. I want it turned off. What do I need to sign in blood to make this happen? This is a really bad idea, especially, as you are executing code on your machines, that is downloaded from the internet. If you really want to, I am sure, you will find guides online, but I won't provide instructions. |
|
4)
(Message 7775)
Posted 11 Mar 2023 by rippi Post: I just ignore that utter nonsense. How is it going to become unsafe because the certificate is a couple of days out of date, but it was ok a week ago? Well, this is basic web security. Yes, it is not less secure, as the connection is still encrypted. That being said you should never trust a connection with expired certificates. There is a reason why those have an expiration date. How do I tell Boinc to just go ahead? I guess you could try some trickery to get this working. Maybe there are some settings you can change in client configuration or you need to set up a custom proxy. But again I would advice against that and simply wait till the certificate is renewed. |
|
5)
(Message 7770)
Posted 10 Mar 2023 by rippi Post: As already posted here https://asteroidsathome.net/boinc/forum_thread.php?id=943 and here https://asteroidsathome.net/boinc/forum_thread.php?id=944 the SSL certificates expired. Until they are renewed a connection to the servers can not be established. |
|
6)
(Message 7765)
Posted 10 Mar 2023 by rippi Post: The certificate for www.asteroidsathome.net seems to be expired: Expires On Friday, 10 March 2023 at 00:59:59 |