Can't contact EAH Servers - Peer Certificate Cannot be Authenticated...

Dr Who Fan
Dr Who Fan
Joined: 25 Feb 05
Posts: 86
Credit: 2,646,144
RAC: 764

Can not report completed

Can not report completed tasks - appears to be an error with the VALIDITY of the SECURITY CERTIFICATE on one or more of the project server(s)...

This stick outs the most from BOINC log below: 

11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Expires: Sun, 19 Nov 1978 05:00:00 GMT

Times noted below are UTC -6 hours from BOINC message log:

11/19/2019 20:45:38 | Einstein@Home | Sending scheduler request: Requested by user.
11/19/2019 20:45:38 | Einstein@Home | Reporting 1 completed tasks
11/19/2019 20:45:38 | Einstein@Home | Not requesting tasks: "no new tasks" requested via Manager
11/19/2019 20:45:38 | Einstein@Home | [http] HTTP_OP::init_post(): https://scheduler.einsteinathome.org/EinsteinAtHome_cgi/cgi
11/19/2019 20:45:38 | Einstein@Home | [http] HTTP_OP::libcurl_exec(): ca-bundle set
11/19/2019 20:45:39 | | [http] [ID#0] Info: Trying 129.89.61.70...
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: Trying 130.75.116.40...
11/19/2019 20:45:39 | | [http] [ID#0] Info: Connected to einsteinathome.org (129.89.61.70) port 443 (#2819)
11/19/2019 20:45:39 | | [http] [ID#0] Info: ALPN, offering http/1.1
11/19/2019 20:45:39 | | [http] [ID#0] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
11/19/2019 20:45:39 | | [http] [ID#0] Info: successfully set certificate verify locations:
11/19/2019 20:45:39 | | [http] [ID#0] Info: CAfile: C:\BOINC\ca-bundle.crt
11/19/2019 20:45:39 | | [http] [ID#0] Info: CApath: none
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS header, Certificate Status (22):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Server key exchange (12):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Server finished (14):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS change cipher, Client hello (1):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS handshake, Finished (20):
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: Connected to scheduler.einsteinathome.org (130.75.116.40) port 443 (#2820)
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: ALPN, offering http/1.1
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: successfully set certificate verify locations:
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: CAfile: C:\BOINC\ca-bundle.crt
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: CApath: none
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (OUT), TLS header, Certificate Status (22):
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (IN), TLS change cipher, Client hello (1):
11/19/2019 20:45:39 | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Finished (20):
11/19/2019 20:45:39 | | [http] [ID#0] Info: SSL connection using TLSv1.2 / ECDHE-RSA-AES128-GCM-SHA256
11/19/2019 20:45:39 | | [http] [ID#0] Info: ALPN, server accepted to use http/1.1
11/19/2019 20:45:39 | | [http] [ID#0] Info: Server certificate:
11/19/2019 20:45:39 | | [http] [ID#0] Info: subject: C=US; postalCode=53201; ST=Wisconsin; L=Milwaukee; street=P.O. Box 413; street=2200 E. Kenwood Blvd.; O=University of Wisconsin-Milwaukee; OU=Physics; CN=einsteinathome.org
11/19/2019 20:45:39 | | [http] [ID#0] Info: start date: Nov 4 00:00:00 2019 GMT
11/19/2019 20:45:39 | | [http] [ID#0] Info: expire date: Nov 3 23:59:59 2021 GMT
11/19/2019 20:45:39 | | [http] [ID#0] Info: subjectAltName: einsteinathome.org matched
11/19/2019 20:45:39 | | [http] [ID#0] Info: issuer: C=US; ST=MI; L=Ann Arbor; O=Internet2; OU=InCommon; CN=InCommon RSA Server CA
11/19/2019 20:45:39 | | [http] [ID#0] Info: SSL certificate verify ok.
11/19/2019 20:45:39 | | [http] [ID#0] Sent header to server: GET /rss_main.php HTTP/1.1
11/19/2019 20:45:39 | | [http] [ID#0] Sent header to server: Host: einsteinathome.org
11/19/2019 20:45:39 | | [http] [ID#0] Sent header to server: User-Agent: BOINC client (windows_x86_64 7.16.3)
11/19/2019 20:45:39 | | [http] [ID#0] Sent header to server: Accept: */*
11/19/2019 20:45:39 | | [http] [ID#0] Sent header to server: Accept-Encoding: deflate, gzip
11/19/2019 20:45:39 | | [http] [ID#0] Sent header to server: Accept-Language: en_US
11/19/2019 20:45:39 | | [http] [ID#0] Sent header to server:
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (OUT), TLS alert, Server hello (2):
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: SSL certificate problem: certificate has expired
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: Closing connection 2820
11/19/2019 20:45:39 | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (OUT), TLS alert, Client hello (1):
11/19/2019 20:45:39 | Einstein@Home | [http] HTTP error: Peer certificate cannot be authenticated with given CA certificates
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: HTTP/1.1 200 OK
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Date: Wed, 20 Nov 2019 02:45:39 GMT
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Server: Apache
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Last-Modified: Wed, 20 Nov 2019 02:37:46 GMT
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: ETag: "b15596c1fc35444eef99639e68c84d56-gunzip-gzip"
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Expires: Sun, 19 Nov 1978 05:00:00 GMT
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Cache-Control: must-revalidate
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: X-Content-Type-Options: nosniff
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: X-Frame-Options: sameorigin
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Content-Type: application/rss+xml; charset=utf-8
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Set-Cookie: SESS3e782c8988cf3721b1565654f7f6d21b=5ri9hp61i70rne827ej0mu47f5; expires=Fri, 13-Dec-2019 06:18:59 GMT; Max-Age=2000000; path=/; domain=einsteinathome.org; secure
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Vary: Accept-Encoding
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Content-Encoding: gzip
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server: Content-Length: 226
11/19/2019 20:45:40 | | [http] [ID#0] Received header from server:
11/19/2019 20:45:40 | |
11/19/2019 20:45:40 | | [http] [ID#0] Info: Connection #2819 to host einsteinathome.org left intact
11/19/2019 20:45:40 | Einstein@Home | Scheduler request failed: Peer certificate cannot be authenticated with given CA certificates

 

 

>> EDIT   -- sent PM to PROJECT ADMIN BERND MACHENSCHALK.

 


 


Gordon Lack
Gordon Lack
Joined: 19 Jun 13
Posts: 6
Credit: 1,160,659
RAC: 1,260

Yes. If you go to

Yes.

If you go to https://scheduler.einsteinathome.org in a browser you'll get the certificate error.

Richie
Richie
Joined: 7 Mar 14
Posts: 656
Credit: 1,702,989,778
RAC: 0

And it's fixed now. Thanks

And it's fixed now. Thanks

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.