Thread 'SSL cert'

Message boards : BOINC client : SSL cert
Message board moderation

To post messages, you must log in.

AuthorMessage
ProfileKSMarksPsych
Avatar

Send message
Joined: 30 Oct 05
Posts: 1239
United States
Message 17313 - Posted: 13 May 2008, 12:20:16 UTC

I went to attach to WCG this morning and was greeted with the following message...

Tue 13 May 2008 11:42:23 AM KST|World Community Grid|Sending scheduler request: Project initialization. Requesting 1 seconds of work, reporting 0 completed tasks
Tue 13 May 2008 11:42:25 AM KST||Project communication failed: attempting access to reference site
Tue 13 May 2008 11:42:27 AM KST||Access to reference site succeeded - project servers may be temporarily down.
Tue 13 May 2008 11:42:28 AM KST|World Community Grid|Scheduler request failed: Problem with the SSL CA cert (path? access rights?)


Sure :-)

Here's where the cert bundles is/are

[kathryn@Galaxy ~]$ locate *.crt
/etc/pki/tls/certs/ca-bundle.crt
/usr/share/apps/kssl/ca-bundle.crt


Which one is the right one? Where would BOINC like it to be? Do I need to copy it over there or will a soft link do?

Anyone who can solve this issue for me will be my new hero.

Some details:

Fedora 7 32 bit
BOINC 5.10.45
BOINC is manually installed as a system daemon to it's own account. Everything is in /var/lib/boinc except for the executables which are in /usr/local/bin.
Kathryn :o)
ID: 17313 · Report as offensive
ProfileJord
Volunteer tester
Help desk expert
Avatar

Send message
Joined: 29 Aug 05
Posts: 15585
Netherlands
Message 17316 - Posted: 13 May 2008, 13:39:41 UTC - in response to Message 17314.  

But, is that logic only for Windows?

For now it is.

I'll adapt it once I know where Linux and Mac put their data dirs.
ID: 17316 · Report as offensive
Chris Sutton

Send message
Joined: 29 Aug 05
Posts: 117
Message 17317 - Posted: 13 May 2008, 14:00:07 UTC - in response to Message 17316.  
Last modified: 13 May 2008, 14:26:21 UTC

But, is that logic only for Windows?

For now it is.

I'll adapt it once I know where Linux and Mac put their data dirs.

I expect that the logic holds true that it should be in the BOINC data dir, wherever it may be.

FWIW, on my install (Ubuntu 7.10 - boinc from the repo's) my data dir is: /var/lib/boinc-client
ca-bundle.crt is in there as a symbolic link: ca-bundle.crt -> /etc/ssl/certs/ca-certificates.crt

@Kathryn:
I guess either the file should be in your data dir, or a symlink to it, as in my case.

As to which one is the one, it depends on the distro. /etc/ssl/certs/ca-certificates.crt is the one for Debian.
As a quick hit, try "man update-ca-certificates" and review the FILES section, otherwise you'll probably have to search the SSL related docs for Fedora.

[edit]
If I had to guess, I would go for: /etc/pki/tls/certs/ca-bundle.crt
[/edit]
ID: 17317 · Report as offensive
ProfileKSMarksPsych
Avatar

Send message
Joined: 30 Oct 05
Posts: 1239
United States
Message 17338 - Posted: 14 May 2008, 21:31:43 UTC

Got it worked out!

I made a sym link to /etc/pki/tls/certs/ca-bundle.crt in BOINC's home directory (basically where all the data is).

In a shell, change to the root account.

cd /var/lib/boinc (will vary depending on how you installed)
ln -s /etc/pki/tls/certs/ca-bundle.crt

Done ;-)

Thanks all!
Kathryn :o)
ID: 17338 · Report as offensive

Message boards : BOINC client : SSL cert

Copyright © 2025 University of California.
Permission is granted to copy, distribute and/or modify this document under the terms of the GNU Free Documentation License, Version 1.2 or any later version published by the Free Software Foundation.