Does anyone else have a problem accessing the server? I get the following messages:

Fetching schedule list
Project communication failed: attempting access to reference site
Internet access ok - project servers may be temporarily down

This has been going on for about a week. Updating or Resetting the project generates the same message. Other projects seem to be fine.

I did change the certificate file yesterday, but that does not seem to have made a difference.

Running Win10Pro with a Nvidia 2060 GPU. The OS Version is 10.0.19043 Build 19043 and the GPU Driver is 30.0.14.7196

The last WU I received was Sept 29.

I did change the certificate file yesterday, but that does not seem to have made a difference.

Did the error message go away when you restarted Boinc?

I just got three of 2.18 tasks in a few miinutes ago I actually saw the server status go from 64 down to 61. I had checked status before and after allowing new work.

Still get the message after restarting BONIC.

Still get the message after restarting BONIC.

Not sure where or if you got the corrected file or maybe it was put in the wrong place.

browse to \Program Files\Boinc and look at ca-bundle.crt
it should have a date from october something like this

10/03/2021 12:24 PM 225,584 ca-bundle.crt

If not october then you probably still have the file with the expired certificate

Open the file with notepad and search for the phrase
DST Root CA X3

If there then select that certificate and delete it.
save the file and restart boinc.

I added the new ca-bundle.crt file yesterday and DST Root CA X3 has ben deleted.

Haven't ben able to contact the server with this change.

Still get the message after restarting BONIC..

You state you are still getting the error message

I assumed you meant the error message about the expired certificate

What error message did you mean?

This is the error message I am referring to:

Fetching schedule list
Project communication failed: attempting access to reference site
Internet access ok - project servers may be temporarily down

I started getting the messages about a week ago. Updating the ca-bundle.crt file, and restarting BONIC or the PC, does not fix this issue.

You've got a cache somewhere fouling things up.

I started getting the messages about a week ago. Updating the ca-bundle.crt file, and restarting BONIC or the PC, does not fix this issue.

Updating ca-bundle.crt should do it - the symptoms and the timing are right for the certificate expiry problem.

Can you verify that you have exactly the right file, and that you've put it in exactly the right place? Where did you get the file from? It should have a timestamp of 30 September 2021 or later.

I used these links to get the new ca-bundle.crt file:

https://www.gpugrid.net/forum_thread.php?id=5256&nowrap=true#57440

When I open the file, using notepad, I can see the DST Root CA X3 section has been deleted.

The new/updated ca-bundle.crt file is in the same folder as the previous ca-bundle.crt file. I renamed the old ca-bundle.crt file .old

I used these links to get the new ca-bundle.crt file:

https://www.gpugrid.net/forum_thread.php?id=5256&nowrap=true#57440

When I open the file, using notepad, I can see the DST Root CA X3 section has been deleted.

The new/updated ca-bundle.crt file is in the same folder as the previous ca-bundle.crt file. I renamed the old ca-bundle.crt file .old

All that should have worked. Not sure what the problem is since a reboot should have worked.

The reference site is either Google or Ibm and they responded according to that message

All I can suggest is

1. Try pinging the project

C:\Users\josep>ping www.gpugrid.net

Pinging www.gpugrid.net [84.89.134.145] with 32 bytes of data:
Reply from 84.89.134.145: bytes=32 time=170ms TTL=44
Reply from 84.89.134.145: bytes=32 time=170ms TTL=44
Reply from 84.89.134.145: bytes=32 time=170ms TTL=44
Reply from 84.89.134.145: bytes=32 time=170ms TTL=44

2. Look in the windows 10 event viewer (system) for unusual errors such as "schannel" or anything related to ssl.

Sorry

That's strange - it might be something else.

The acid test: go to BOINC Manager, Advanced view.
Select Options menu, click 'Event Log Options...'
On the form that opens, tick the box labelled http_debug (don't change any others)
Click Save.

Go to the projects tab. Highlight GPUGrid, click Update once.

Wait no more than about 5 seconds, go back to the Event Log Options menu, remove the http_debug tick, save.

Then look at the event log itself. http_debug puts out a lot of detail - depending on your computer experience, it may or may not mean anything to you. See if you can pick out any references to certificates and expiry.

If not, select and copy the whole segment from 'Starting scheduler request' to 'Scheduler request completed' (or failed - depending what happened). Post the whole thing here, and we'll go through it for you.

I am not computer literate enough to understand most of what is going on here, but I do see a SSL certificate problem and Peer certificate problem.

Should I delete the old ca-bundle.crt file?. Any other suggestions?



10/6/2021 3:54:09 PM | GPUGRID | update requested by user
10/6/2021 3:54:10 PM | | [http] HTTP_OP::init_get(): https://www.gpugrid.net/notices.php?userid=514725&auth=514725_4639989f215f6bf6d86c314204201c59
10/6/2021 3:54:10 PM | | [http] HTTP_OP::libcurl_exec(): ca-bundle set
10/6/2021 3:54:10 PM | GPUGRID | [http] HTTP_OP::init_get(): https://www.gpugrid.net/
10/6/2021 3:54:10 PM | GPUGRID | [http] HTTP_OP::libcurl_exec(): ca-bundle set
10/6/2021 3:54:10 PM | GPUGRID | Fetching scheduler list
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: Connection 376 seems to be dead!
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: Closing connection 376
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: Found bundle for host www.gpugrid.net: 0x264eb00 [serially]
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: Trying 84.89.134.145...
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: Hostname was found in DNS cache
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: Trying 84.89.134.145...
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: Connected to www.gpugrid.net (84.89.134.145) port 443 (#380)
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: ALPN, offering http/1.1
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: successfully set certificate verify locations:
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: CAfile: D:\Program Files\ca-bundle.crt
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: CApath: none
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS header, Certificate Status (22):
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: Connected to www.gpugrid.net (84.89.134.145) port 443 (#381)
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: ALPN, offering http/1.1
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: successfully set certificate verify locations:
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: CAfile: D:\Program Files\ca-bundle.crt
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: CApath: none
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: TLSv1.2 (OUT), TLS header, Certificate Status (22):
10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: TLSv1.2 (OUT), TLS alert, Server hello (2):
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: SSL certificate problem: certificate has expired
10/6/2021 3:54:11 PM | | [http] [ID#0] Info: Closing connection 380
10/6/2021 3:54:11 PM | | [http] HTTP error: Peer certificate cannot be authenticated with given CA certificates
10/6/2021 3:54:12 PM | GPUGRID | [http] [ID#1] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
10/6/2021 3:54:12 PM | GPUGRID | [http] [ID#1] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
10/6/2021 3:54:12 PM | GPUGRID | [http] [ID#1] Info: TLSv1.2 (OUT), TLS alert, Server hello (2):
10/6/2021 3:54:12 PM | GPUGRID | [http] [ID#1] Info: SSL certificate problem: certificate has expired
10/6/2021 3:54:12 PM | GPUGRID | [http] [ID#1] Info: Closing connection 381
10/6/2021 3:54:12 PM | GPUGRID | [http] HTTP error: Peer certificate cannot be authenticated with given CA certificates
10/6/2021 3:54:13 PM | | Project communication failed: attempting access to reference site
10/6/2021 3:54:13 PM | | [http] HTTP_OP::init_get(): https://www.google.com/
10/6/2021 3:54:13 PM | | [http] HTTP_OP::libcurl_exec(): ca-bundle set
10/6/2021 3:54:14 PM | | [http] [ID#0] Info: Found bundle for host www.google.com: 0x32a1d80 [can pipeline]
10/6/2021 3:54:14 PM | | [http] [ID#0] Info: Re-using existing connection! (#369) with host www.google.com
10/6/2021 3:54:14 PM | | [http] [ID#0] Info: Connected to www.google.com (172.217.1.196) port 443 (#369)
10/6/2021 3:54:14 PM | | [http] [ID#0] Sent header to server: GET / HTTP/1.1
10/6/2021 3:54:14 PM | | [http] [ID#0] Sent header to server: Host: www.google.com
10/6/2021 3:54:14 PM | | [http] [ID#0] Sent header to server: User-Agent: BOINC client (windows_x86_64 7.16.11)
10/6/2021 3:54:14 PM | | [http] [ID#0] Sent header to server: Accept: */*
10/6/2021 3:54:14 PM | | [http] [ID#0] Sent header to server: Accept-Encoding: deflate, gzip
10/6/2021 3:54:14 PM | | [http] [ID#0] Sent header to server: Accept-Language: en_US
10/6/2021 3:54:14 PM | | [http] [ID#0] Sent header to server:
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: HTTP/1.1 200 OK
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Date: Wed, 06 Oct 2021 19:54:15 GMT
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Expires: -1
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Cache-Control: private, max-age=0
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Content-Type: text/html; charset=ISO-8859-1
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Content-Encoding: gzip
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Server: gws
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: X-XSS-Protection: 0
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: X-Frame-Options: SAMEORIGIN
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Set-Cookie: 1P_JAR=2021-10-06-19; expires=Fri, 05-Nov-2021 19:54:15 GMT; path=/; domain=.google.com; Secure
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Set-Cookie: NID=511=d2F-ZgkxtOU1UTrqZ2t_4I-qkWJoIxMzbEV0f14cU66ZWyyE0kyurGXHwq_GGzddg911wyEkkB0hZ5_tMIS-4ZDeaa-uIDdIfHZCOIWmWXGo4i5nSWNF7bczpA5u8wWoRFAawi_mlVtFlcJp-sRX4JZ1bRV56a4mJ1-ZrTBoed8; expires=Thu, 07-Apr-2022 19:54:15 GMT; path=/; domain=.google.com; HttpOnly
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-T051=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: Transfer-Encoding: chunked
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server:
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: 00000001
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: 
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: 00000001
10/6/2021 3:54:14 PM | |
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: 00000001
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: 
10/6/2021 3:54:14 PM | | [http] [ID#0] Received header from server: 00000001
10/6/2021 3:54:15 PM | | [http] [ID#0] Info: Connection #369 to host www.google.com left intact
10/6/2021 3:54:15 PM | | Internet access OK - project servers may be temporarily down.
10/6/2021 3:54:23 PM | | Re-reading cc_config.xml
10/6/2021 3:54:23 PM | | log flags: file_xfer, sched_ops, task
10/6/2021 3:54:23 PM | Asteroids@home | Found app_config.xml
10/6/2021 3:54:23 PM | Einstein@Home | Found app_config.xml
10/6/2021 3:54:23 PM | GPUGRID | Found app_config.xml
10/6/2021 3:54:23 PM | GPUGRID | Your app_config.xml file refers to an unknown application 'acemd3'. Known applications: None
10/6/2021 3:54:23 PM | Milkyway@Home | Found app_config.xml
10/6/2021 3:54:23 PM | World Community Grid | Found app_config.xml
10/6/2021 3:54:23 PM | World Community Grid | Your app_config.xml file refers to an unknown application 'opng'. Known applications: 'arp1', 'mcm1', 'mip1', 'opn1'

I don't know how to post screenshots apparently, but pinging www.gpugrid.net resulted in 4 packets being sent and four packets received. The Event Viewer (System) only showed Information entries, no Errors.

I suspect you have things in the wrong place or I dont understand the listing

10/6/2021 3:54:11 PM | GPUGRID | [http] [ID#1] Info: CAfile: D:\Program Files\ca-bundle.crt

that file should be in \Program Files\Boinc

next to the other executables

You should have at d:\Program Files\boinc
or at
c:\Program Files\boinc

the following
ca-bundle.crt
and ca-bundle.crt_old

if I understand correctly

Boinc is clearly getting the wrong ca-bundle as your script is exactly what I would see with the wrong bundle

I would delete the old file. BOINC may still be caching it.

Not sure why it is showing that. The file is in D:\Program Files\BONIC

I would delete the old file. BOINC may still be caching it.

Supposedly the system rebooted.

Possibly, if the file is missing, a windows path search may find a zillion ca-bundles and pick the first one!

Not sure why it is showing that. The file is in D:\Program Files\BONIC

Don't think that is correct spelling

Note that if you use notepad to save "ca-bundle.crt" you might unwittingly end up with "ca-bundle.txt" which won't work. Been there done that myself

LHC, WCG, Milky Way, Einstein, Cosmology, Rosetta are working fine.

GPUGrid and CPDN seem to be having the same issue.

Asteroids and Universe are not working, but I think they are both unrelated server issues.

I deleted the old ca-bundle.crt files and the problem still exists.

Regarding saving the ca-bundle.crt file in notepad, which encoding should be used?

Thanks for everyone's help!