Showing error that can not connect to internet for Einstein Project
13 May 2018 20:53:58 UTC
Topic 214959
(moderation:
I've got a Fedora 27 machine that has the boinc 7.9.2 client and manager running.
The other two projects have not problem connecting to the internet and downloading/uploading work.
I have 4 Einstein work units from 4/26 that are finished, but have not been able to upload, and no new work is downloading.
My Einstein work done is showing as 141,058,466. The Seti and Rosette projects are working fine. The even log just shows that the Einstein doesn't connect. Is there something else that needs to be done? I tried updating, and reinstalling both the manager and client, but it is the same version. Is there some other step that needs to be changed??
msetzerii wrote:I have 4
)
I checked on the website and your machine running Fedora last contacted the project on April 15. At present, all tasks that you still have on your host locally are already completed and removed from the online database so there is no prospect for returning and being credited for any of those. It might just be a coincidence but your last contact date was just before the certificate update described in project news. With your current BOINC version you shouldn't have been affected.
All you can really do is abort any tasks you still have from that time and then keep hitting 'update' until you get a "master file download". You might have to keep repeating for around 10-12 iterations if it just keeps backing off. Just wait a minute between each 'update'. If you can contact other projects you must be able to contact this one.
Do you have a low resource share for Einstein? That could cause BOINC not to contact the project. Try 'update' and then check it it's registering the current time as your last contact time on the website.
EDIT: One more point. If you still cannot make contact with the Einstein project, can you copy and paste from the event log, exactly the response that you do get? If there is very little information being given, you may have to set logging flags in a cc_config.xml file in order to increase the amount of information. This is documented here.
Cheers,
Gary.
Is there an update for
)
Is there an update for ca-certificates available for Fedora27? If so can you install it and see if that helps. Can you access the Einstein site using Firefox on the effected machine? If you can that confirms the certificates are working.
BOINC blog
System is fully updated,
)
System is fully updated, and is the same machine I am using right not to access forum.
Currently have 5 tasks that were completed, but no current work.
Two finished on the 26th, one on the 29th, and two on the 30th of April.
From the Event Long on checking.
Wed 16 May 2018 12:43:17 AM ChST | Einstein@Home | update requested by user
Wed 16 May 2018 12:43:21 AM ChST | Einstein@Home | Fetching scheduler list
Wed 16 May 2018 12:43:28 AM ChST | | Project communication failed: attempting access to reference site
Wed 16 May 2018 12:43:29 AM ChST | | BOINC can't access Internet - check network connection or proxy configuration.
Wed 16 May 2018 12:43:33 AM ChST | Rosetta@home | Finished download of NTF2chip_6830_data.zip
Wed 16 May 2018 12:43:33 AM ChST | Rosetta@home | Started download of f1_ems_ferrM_6541_data.zip
Wed 16 May 2018 12:43:36 AM ChST | Rosetta@home | Finished download of DRH_curve_X_h17_l3_h25_l2_10407_1_2_loop_85_0001_one_fragments_data.zip
Wed 16 May 2018 12:43:45 AM ChST | Rosetta@home | Finished download of f1_ems_ferrM_6541_data.zip
The update with Rosetta works fine, and it downloads tasks.
Still seeing some issue.
)
Still seeing some issue. Reports it can not contact, but Rosetta and Seti work just fine. No clear error message?
System fully updated.
Sat 19 May 2018 02:33:40 AM ChST | Einstein@Home | update requested by user
Sat 19 May 2018 02:33:41 AM ChST | Einstein@Home | Fetching scheduler list
Sat 19 May 2018 02:33:49 AM ChST | | Project communication failed: attempting access to reference site
Sat 19 May 2018 02:33:51 AM ChST | | BOINC can't access Internet - check network connection or proxy configuration.
Tired it with no proxy and with the local ISP proxy, and other projects work just fine.
Did a wireshark captures
)
Did a wireshark captures while trying to connect, and only strange thing I saw was a 301 error.
https://einsteinathome.org 301 moved permanently
einstein.phys.uwm.edu port 80
But in the browser, if I try to go to that link, it takes me to the one it says it was moved from??
msetzerii wrote:Did a
)
It's because our Web site URL (einsteinathome.org) and our 'master URL' (einstein.phys.uwm.edu) are not the same. The idea being that Web browsers will redirect einstein.phys.uwm.edu:80 to einsteinathome.org:443. And that BOINC client should be able to connect to the master URL for data transmission.
I don't have a good solution for you. Did you try turning on http_debug? You can try to find where the Client configuration file exists on your system. Then add/edit it to include the http_debug flag. Here is a simple example:
<cc_config> <log_flags> <http_debug>1</http_debug> </log_flags> <options> </options> </cc_config>I don't know where Fedora stores the cc_config.xml file. On my Debian systems it is located in /var/lib/boinc. But you may have to find where the client directory exists. This wiki page may help.
Then you must restart the boinc-client daemon for this new file to take effect. Not just restarting BOINC manager- the front-end GUI.
This will dump a lot of output to the event log, which may be helpful is identifying the problem.
Einstein@Home Project
Here is what is shows after
)
Here is what is shows after the change in the event log
Sun 27 May 2018 03:33:19 PM ChST | Einstein@Home | update requested by user
Sun 27 May 2018 03:33:19 PM ChST | | [http] HTTP_OP::init_get(): https://einsteinathome.org/rss_main.php
Sun 27 May 2018 03:33:19 PM ChST | | [http] [ID#0] Info: Connection 9 seems to be dead!
Sun 27 May 2018 03:33:19 PM ChST | | [http] [ID#0] Info: Closing connection 9
Sun 27 May 2018 03:33:20 PM ChST | | [http] [ID#0] Info: Trying 129.89.61.70...
Sun 27 May 2018 03:33:20 PM ChST | | [http] [ID#0] Info: TCP_NODELAY set
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: Connected to einsteinathome.org (129.89.61.70) port 443 (#11)
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: ALPN, offering http/1.1
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: Cipher selection: PROFILE=SYSTEM
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: successfully set certificate verify locations:
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: CAfile: ca-bundle.crt
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: CApath: none
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS alert, Server hello (2):
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: SSL certificate problem: self signed certificate in certificate chain
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: stopped the pause stream!
Sun 27 May 2018 03:33:21 PM ChST | | [http] [ID#0] Info: Closing connection 11
Sun 27 May 2018 03:33:21 PM ChST | | [http] HTTP error: Peer certificate cannot be authenticated with given CA certificates
Sun 27 May 2018 03:33:22 PM ChST | Einstein@Home | [http] HTTP_OP::init_get(): http://einstein.phys.uwm.edu/
Sun 27 May 2018 03:33:22 PM ChST | Einstein@Home | Fetching scheduler list
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Trying 129.89.61.70...
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: TCP_NODELAY set
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Connected to einstein.phys.uwm.edu (129.89.61.70) port 80 (#12)
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server: GET / HTTP/1.1
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server: Host: einstein.phys.uwm.edu
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server: User-Agent: BOINC client (x86_64-pc-linux-gnu 7.9.2)
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server: Accept: */*
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server: Accept-Encoding: deflate, gzip
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server: Content-Type: application/x-www-form-urlencoded
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server: Accept-Language: en_US
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Sent header to server:
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: HTTP/1.1 301 Moved Permanently
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: Date: Sun, 27 May 2018 05:33:23 GMT
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: Server: Apache/2.4.10 (Debian)
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: Location: https://einsteinathome.org/
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: Content-Length: 322
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: Content-Type: text/html; charset=iso-8859-1
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server:
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: <html><head>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: <title>301 Moved Permanently</title>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: </head><body>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: <h1>Moved Permanently</h1>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: <p>The document has moved <a href="https://einsteinathome.org/">here</a>.</p>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: <hr>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: <address>Apache/2.4.10 (Debian) Server at einstein.phys.uwm.edu Port 80</address>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Received header from server: </body></html>
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Ignoring the response-body
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Connection #12 to host einstein.phys.uwm.edu left intact
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Issue another request to this URL: 'https://einsteinathome.org/'
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Hostname einsteinathome.org was found in DNS cache
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Trying 129.89.61.70...
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: TCP_NODELAY set
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Connected to einsteinathome.org (129.89.61.70) port 443 (#13)
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: ALPN, offering http/1.1
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: Cipher selection: PROFILE=SYSTEM
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: successfully set certificate verify locations:
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: CAfile: ca-bundle.crt
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: CApath: none
Sun 27 May 2018 03:33:23 PM ChST | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
Sun 27 May 2018 03:33:24 PM ChST | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
Sun 27 May 2018 03:33:24 PM ChST | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
Sun 27 May 2018 03:33:24 PM ChST | Einstein@Home | [http] [ID#1] Info: TLSv1.2 (OUT), TLS alert, Server hello (2):
Sun 27 May 2018 03:33:24 PM ChST | Einstein@Home | [http] [ID#1] Info: SSL certificate problem: self signed certificate in certificate chain
Sun 27 May 2018 03:33:24 PM ChST | Einstein@Home | [http] [ID#1] Info: stopped the pause stream!
Sun 27 May 2018 03:33:24 PM ChST | Einstein@Home | [http] [ID#1] Info: Closing connection 13
Sun 27 May 2018 03:33:24 PM ChST | Einstein@Home | [http] HTTP error: Peer certificate cannot be authenticated with given CA certificates
msetzerii wrote:Here is what
)
I think the problem is quoted above. Your BOINC client is saying there is an SSL problem. The way I read this error, BOINC client is complaining that the certificate we are using is not trusted because it (BOINC) does not have the root certificate in it's ca-bundle.
Frankly, this is a mystery. Now we recently (mid-April) changed our Web SSL/TLS certificate. And you have a recent BOINC client (7.9). A user also (correctly) suggested making sure the root ca-certificates are up-to-date. Thus everything you said indicates that you should have an up-to-date set of certificates with which to compare against our certificate. And the BOINC client should be able to connect.
If you want to try and diagnose things further, read on, but this gets complicated quickly. (You seem like a user who is sophisticated enough to follow along.)
In the directory you placed the cc_config.xml, there may be a file ca-bundle.crt. On my computer this is a symlink to another file
(shell-prompt$) ls -l /var/lib/boinc/ca-bundle.crtlrwxrwxrwx 1 boinc boinc 34 Feb 14 09:20 /var/lib/boinc/ca-bundle.crt -> /etc/ssl/certs/ca-certificates.crtPlease check to see if this file is a symlink to a file that is installed by Fedora or a stand-along file from BOINC. Then you can look in this file and see if one of the certificates matched our root certificate. This 'magic' command assumes you have 'awk' and 'openssl' installed
(shell-prompt$) awk -v cmd='openssl x509 -noout -subject -fingerprint -sha256' '/BEGIN/{close(cmd)};{print | cmd}' < (Your CA file) | less -iIn my case I used '/etc/ssl/certs/ca-certificates.crt' as my CA file that I input into the awk command. Piping the above command into 'less' helps read it. Then I looked for the following strings:
common name (CN) : DigiCert Global Root CAFingerprint SHA256: 43:48:a0:e9:44:4c:78:cb:26:5e:05:8d:5e:89:44:b4:d8:4f:96:62:bd:26:db:25:7f:89:34:a4:43:c7:01:61Basically this will verify that BOINC's ca file contains, or does not contain, the root certificate we use from Digicert.
Einstein@Home Project
Shawn Kwang schrieb:
)
I installed Boinc version 7.10.2 after some hardware replacements. Since then I'm kicked out of Einstein whereas my fallback project is still connected.
In the project directory I find ca-bundle.crt from February 15, 2018. If that is a reason why Boinc manager can't connect to Einstein project any more, is there a download link to the April version?
solling2 wrote:... In the
)
It shouldn't be in the project directory. Perhaps that's just a typo and you really meant BOINC directory??
The latest version I know about is mid-April and virtually all my hosts are using that but I know of around 3 hosts using older versions that are not having problems communicating. I don't think there should be a problem with your Feb version that could be fixed by an April version. I suspect there must be something else. When you say "kicked out", what messages do you see? If for some reason, your file is in the project dir, stick it in the BOINC dir and try again :-).
Cheers,
Gary.