Index  | Recent Threads  | Unanswered Threads  | Who's Active  | Guidelines  | Search
 

Quick Go ยป
No member browsing this thread
Thread Status: Active
Total posts in this thread: 16
Posts: 16   Pages: 2   [ Previous Page | 1 2 ]
[ Jump to Last Post ]
Post new Thread
Author
Previous Thread This topic has been viewed 2820 times and has 15 replies Next Thread
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC Client Certificate Issues Again

Which certificate shows when you click on the lock in your web browser address bar may be the flavor of the day and the browser of choice. When I do it says

Cert Issued to: *.worldcommunitygrid.org
Issued by: Thawte RSA CA 2018
Valid from: 6/10/2020 to 9/8/2022

The issuer seems very familiar to me, as in used since the ages. The Valid from seems to be close to the date v.v. what the tech wrote about the recent renewal.

Vaguely remember some 'security' software will try unpacking transmissions for signatures etc, and in the course mangles what goes to the destination, here wcg. Certainly would try to ditch the 3rd party FW/AV, and try to run Windows Defender instead. The line

8/12/2020 4:25:47 PM | | [http] [ID#0] Info: SSL certificate problem: unable to get local issuer certificate

Is deeply ominous. Is there a path being blocked to the program folder, not the data folder? In my case it being 64 bit: C:\Program Files\boinc where ca-bundle.crt is. Windows qualifies this file as 'Crypto Shell Extentions' and type 'Security Certificate(crt).' with some 7 entries of groups and users allowed to read/read execute.

Is BOINC btw installed as service or at user level i.e. you have to log in before it runs (log suggests as service)? As for virtual box, another layer. Uninstall if not already done and use the standard kit (think you already did). 9 out of 10 you dont need vb, but Berkeley keeps pushing it through showing as first install entry. WCG only has the straight vanilla, security audited.
[Aug 16, 2020 9:09:59 AM]   Link   Report threatening or abusive post: please login first  Go to top 
eagle_eyes
Cruncher
Joined: Mar 27, 2007
Post Count: 17
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: BOINC Client Certificate Issues Again

I already tried disabling ZoneAlarm and then use Windows Defender. No change. I then disabled Windows Defender. No change.

Yes, I already tried going back to WCG's software, but that didn't solve the problem.

I checked the digital certificate in Google Chrome, and it matched what I said earlier: Digital Reflection CA.

I just tried to look up certificates for Google and WCG, but I couldn't find any useful information on what it should be.
[Aug 16, 2020 7:19:49 PM]   Link   Report threatening or abusive post: please login first  Go to top 
eagle_eyes
Cruncher
Joined: Mar 27, 2007
Post Count: 17
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: BOINC Client Certificate Issues Again

I think found the cause of the problem. As part of membership with Digital Reflection Center, I installed a certificate that allows them to collect data in ways I can't describe, and it's not scary. I've been doing it for a couple of years. I'm going to try to talk to them about the problem. While I'm waiting, I'm going to find ways to remove it and see if that solves the problem. If anybody knows of a way, let me know. Note that I tried deleting it through a Microsoft program dealing with certificates, and I didn't delete everything.

Edit: rewrite
----------------------------------------
[Edit 1 times, last edit by eagle_eyes at Aug 16, 2020 8:12:36 PM]
[Aug 16, 2020 7:29:49 PM]   Link   Report threatening or abusive post: please login first  Go to top 
katoda
Senior Cruncher
Poland
Joined: Apr 28, 2007
Post Count: 171
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: BOINC Client Certificate Issues Again

I did a project reset before being able to report completed data, and now, I lost the project files. I'm going to try to get them back through undelete, but I'm not counting on it. It didn't work.
That's why I explicitly wrote "finish your tasks". Resetting project always deletes tasks in progress and there is no way to get them back.

I'm wondering if this problem goes to another area in Windows that deals with certificates.
It could be linked, but only if WCG uses Windows certificate store for its purposes.

Oops: I dechecked the option to install it to run as a separate process. I hope that's what you meant by not running it as a service.
Yes, that's exactly what I meant, so this part is OK.

Hi Katoda,
you wrote that the certificates are OK, although eagle_eyes mentioned: Digital Reflection CA for WCG.
I verified on my side and I can confirm that it should be DigiCert Inc. for WCG.
Are you really sure that the both CA are equivalent resp. acceptable for WCG?
Yes, I'm sure. The differences are caused by usage of different browsers and how they present details of SSL certificates. Mine was Firefox, eagle_eyes's is Chrome. But these are the same certificates, I switched to Chrome and got the same results.

I think found the cause of the problem. As part of membership with Digital Reflection Center, I installed a certificate that allows them to collect data in ways I can't describe, and it's not scary
Yes, this can be the root cause. Was it only a certificate installed on your PC or maybe you get something (a box) from them to be plugged into your home network?
----------------------------------------

----------------------------------------
[Edit 2 times, last edit by katoda at Aug 17, 2020 9:21:55 AM]
[Aug 17, 2020 6:59:49 AM]   Link   Report threatening or abusive post: please login first  Go to top 
Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline
Reply to this Post  Reply with Quote 
Re: BOINC Client Certificate Issues Again

Who gives what certificate response:

Vivaldi: Thawte
Firefox: DigiCert BUT if drilled through to cert.detail, the underlying is Thawte
Chrome: Thawte
Edge(Chrome based now): Thawte
Internet Explorer: DigiCert BUT if drilled through to cert.detail, the underlying is Thawte

So much for the "should be". All are working with the common name Thawte RSA CA 2018 certificate.

Notable: Done zero to certificates, use standard W10 Defender Firewall and AV.
[Aug 17, 2020 8:09:35 AM]   Link   Report threatening or abusive post: please login first  Go to top 
eagle_eyes
Cruncher
Joined: Mar 27, 2007
Post Count: 17
Status: Offline
Project Badges:
Reply to this Post  Reply with Quote 
Re: BOINC Client Certificate Issues Again [fixed]

Yes, you did write "finish your tasks." That's not your fault.

Yes, Digital Reflection Center sent me a modem that I plug in.

In fact, that modem is the reason for this post. They got back to me and told me that they're working on those certificates. In the meantime, I was to unplug the modem to let the programs run and then to plug it back in.

Thank you, all, for the help.
[Aug 17, 2020 8:21:59 PM]   Link   Report threatening or abusive post: please login first  Go to top 
Posts: 16   Pages: 2   [ Previous Page | 1 2 ]
[ Jump to Last Post ]
Post new Thread