Advanced search

Message boards : Server and website : GPUGRID now using HTTPS

Author Message
Profile MJH
Project administrator
Project developer
Project scientist
Send message
Joined: 12 Nov 07
Posts: 696
Credit: 27,266,655
RAC: 0
Level
Val
Scientific publications
watwat
Message 40340 - Posted: 4 Mar 2015 | 15:33:33 UTC

The server now supports HTTPS. For now you can continue to access over plain HTTP.

BOINC clients connected via HTTP should not receive any warning about an incorrect project URL. Equally, reconnecting a client using the HTTPS URL should work correctly, and all requests will be transfered securely.

All website pages should display without any security warnings[1]. Please let me know if you find a page that misbehaves or redirects back to an HTTP URL.

Matt

[1] Except for the donation page, thanks to a misbehaving Amazon link

[CSF] Thomas H.V. DUPONT
Send message
Joined: 20 Jul 14
Posts: 732
Credit: 100,630,366
RAC: 0
Level
Cys
Scientific publications
watwatwatwatwatwatwatwat
Message 40344 - Posted: 4 Mar 2015 | 18:06:28 UTC - in response to Message 40340.

Good news !
Thanks for the heads-up Matt.
Nothing to report at this time on my side (just one thing - the home page of the teams is OK but in HTTPS not secure)
All pages of the GPUG website seem to work.
HTTPS performed on my BOINC Manager (7.4.36) - Everything is OK for now :)
____________
[CSF] Thomas H.V. Dupont
Founder of the team CRUNCHERS SANS FRONTIERES 2.0
www.crunchersansfrontieres

captainjack
Send message
Joined: 9 May 13
Posts: 171
Credit: 2,321,854,288
RAC: 2,362,587
Level
Phe
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40348 - Posted: 4 Mar 2015 | 18:59:41 UTC

I don't know if this has anything to do with the HTTPS change, but now I am unable to download CPU and AMD GPU tasks. I detached and reattached to the https link and am still getting the following error messages.

3/4/2015 12:57:30 PM | GPUGRID | Temporarily failed download of 116760-MJHARVEY_AMDTEST1-0-input: transient HTTP error
3/4/2015 12:57:30 PM | GPUGRID | Backing off 00:03:32 on download of 116760-MJHARVEY_AMDTEST1-0-input
3/4/2015 12:57:30 PM | GPUGRID | Finished download of project_2.png
3/4/2015 12:57:33 PM | | Project communication failed: attempting access to reference site
3/4/2015 12:57:34 PM | | Internet access OK - project servers may be temporarily down.

GPUGRID Role account
Send message
Joined: 15 Feb 07
Posts: 134
Credit: 1,349,535,983
RAC: 0
Level
Met
Scientific publications
watwatwatwatwatwatwatwatwatwatwat
Message 40349 - Posted: 4 Mar 2015 | 20:05:57 UTC - in response to Message 40348.

I don't know if this has anything to do with the HTTPS change, but now I am unable to download CPU and AMD GPU tasks. I detached and reattached to the https link and am still getting the following error messages.


What client version do you have? Are you still able to get normal acemdlong WUs?

Matt

captainjack
Send message
Joined: 9 May 13
Posts: 171
Credit: 2,321,854,288
RAC: 2,362,587
Level
Phe
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40352 - Posted: 4 Mar 2015 | 21:26:17 UTC

What client version do you have? Are you still able to get normal acemdlong WUs?

Matt


The box that gets the error is Windows 7 and BOINC 7.4.27. It has an AMD 6950 GPU card.

My other box is Ubuntu 15.04 and BOINC 7.2.42 with two NVIDIA GPU's in it. It was able to download an acemdlong unit just fine.

Let me know if you want me to try something different.

eXaPower
Send message
Joined: 25 Sep 13
Posts: 293
Credit: 1,897,601,978
RAC: 0
Level
His
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwat
Message 40355 - Posted: 5 Mar 2015 | 0:09:18 UTC - in response to Message 40348.
Last modified: 5 Mar 2015 | 0:14:19 UTC

I don't know if this has anything to do with the HTTPS change, but now I am unable to download CPU and AMD GPU tasks. I detached and reattached to the https link and am still getting the following error messages.

3/4/2015 12:57:30 PM | GPUGRID | Temporarily failed download of 116760-MJHARVEY_AMDTEST1-0-input: transient HTTP error
3/4/2015 12:57:30 PM | GPUGRID | Backing off 00:03:32 on download of 116760-MJHARVEY_AMDTEST1-0-input
3/4/2015 12:57:30 PM | GPUGRID | Finished download of project_2.png
3/4/2015 12:57:33 PM | | Project communication failed: attempting access to reference site
3/4/2015 12:57:34 PM | | Internet access OK - project servers may be temporarily down.

Experiencing these error messages with 7.3.11 BOINC for AMDTEST CPU only. Download keeps backing off repeating the same error lines for multiple work units. Transfer is reporting a 2.23MB download for the 1.12MB file size- stalling at 99.12%/2.23MB/1.12MB

captainjack
Send message
Joined: 9 May 13
Posts: 171
Credit: 2,321,854,288
RAC: 2,362,587
Level
Phe
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40368 - Posted: 5 Mar 2015 | 14:20:13 UTC

Download of CPU & AMD GPU tasks seems to be working okay for me this morning. Just downloaded 16 CPU & AMD GPU tasks. One is running now.

captainjack

jlhal
Send message
Joined: 1 Mar 10
Posts: 147
Credit: 1,077,535,540
RAC: 0
Level
Met
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40506 - Posted: 18 Mar 2015 | 11:43:23 UTC - in response to Message 40340.

The server now supports HTTPS. For now you can continue to access over plain HTTP.
...
All website pages should display without any security warnings[1]. Please let me know if you find a page that misbehaves or redirects back to an HTTP URL.


Please see this thread https://www.gpugrid.net/forum_thread.php?id=4037
and tell me what you think about this...
Regards


____________
Lubuntu 16.04.1 LTS x64

Profile caffeineyellow5
Avatar
Send message
Joined: 30 Jul 14
Posts: 225
Credit: 2,658,976,345
RAC: 0
Level
Phe
Scientific publications
watwatwatwatwatwatwatwat
Message 40755 - Posted: 5 Apr 2015 | 8:47:05 UTC - in response to Message 40506.

I am having to access the web pages over IE (using CLRs) since Firefox is complaining about the https certificate being revoked in the Online Certificate Status Protocol.

Secure Connection Failed

An error occurred during a connection to www.gpugrid.net. The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.

____________
1 Corinthians 9:16 "For though I preach the gospel, I have nothing to glory of: for necessity is laid upon me; yea, woe is unto me, if I preach not the gospel!"
Ephesians 6:18-20, please ;-)
http://tbc-pa.org

mikey
Send message
Joined: 2 Jan 09
Posts: 290
Credit: 2,037,116,115
RAC: 10,314,977
Level
Phe
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40758 - Posted: 5 Apr 2015 | 11:22:12 UTC - in response to Message 40755.

I am having to access the web pages over IE (using CLRs) since Firefox is complaining about the https certificate being revoked in the Online Certificate Status Protocol.
Secure Connection Failed

An error occurred during a connection to www.gpugrid.net. The OCSP server has no status for the certificate. (Error code: sec_error_ocsp_unknown_cert)

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.


I get the same error using Firefox but Chrome works just fine, and at exactly the same time, so it's not a website down problem.

jlhal
Send message
Joined: 1 Mar 10
Posts: 147
Credit: 1,077,535,540
RAC: 0
Level
Met
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40760 - Posted: 5 Apr 2015 | 16:08:26 UTC - in response to Message 40758.

Hi, just follow the link given by Firefox and you"ll know what to do...

I think the problem is just transient .
I could connect normally to give you this reply....
Regards

____________
Lubuntu 16.04.1 LTS x64

mikey
Send message
Joined: 2 Jan 09
Posts: 290
Credit: 2,037,116,115
RAC: 10,314,977
Level
Phe
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40766 - Posted: 6 Apr 2015 | 11:26:14 UTC - in response to Message 40760.

Hi, just follow the link given by Firefox and you"ll know what to do...

I think the problem is just transient .
I could connect normally to give you this reply....
Regards


It works for me today in Firefox!

Profile caffeineyellow5
Avatar
Send message
Joined: 30 Jul 14
Posts: 225
Credit: 2,658,976,345
RAC: 0
Level
Phe
Scientific publications
watwatwatwatwatwatwatwat
Message 40768 - Posted: 6 Apr 2015 | 12:31:23 UTC - in response to Message 40766.
Last modified: 6 Apr 2015 | 12:33:09 UTC

OCSP is updated very often. I was only reporting it so that the certificate owners (GPUGrid.net) can do it diligence to make sure the OCSP stays current to the cert here.

Hi, just follow the link given by Firefox and you"ll know what to do...
BTW, the only options given by Firefox at that error are "Retry" and "Cancel". There is no link given to an error of an OCSP cert missing in the index.

jlhal
Send message
Joined: 1 Mar 10
Posts: 147
Credit: 1,077,535,540
RAC: 0
Level
Met
Scientific publications
watwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwatwat
Message 40769 - Posted: 6 Apr 2015 | 17:10:10 UTC - in response to Message 40768.

OCSP is updated very often. I was only reporting it so that the certificate owners (GPUGrid.net) can do it diligence to make sure the OCSP stays current to the cert here.
Hi, just follow the link given by Firefox and you"ll know what to do...
BTW, the only options given by Firefox at that error are "Retry" and "Cancel". There is no link given to an error of an OCSP cert missing in the index.



Oups ! You are right ! Sorry...
this link https://support.mozilla.org/fr/questions/967950 is given when you type "firefox sec_error_ocsp_unknown_cert" in Google's search bar ;-)


____________
Lubuntu 16.04.1 LTS x64

Post to thread

Message boards : Server and website : GPUGRID now using HTTPS

//