#838 closed Defect (invalid)
FreeBSD BOINC 6.4.5, WCG and SSL cert problem
Reported by: | marck | Owned by: | |
---|---|---|---|
Priority: | Undetermined | Milestone: | Undetermined |
Component: | Undetermined | Version: | 6.4.5 |
Keywords: | FreeBSD WCG SSL | Cc: |
Description
Problem and a workaround (client patching required) is explained at CWG forum:
http://www.worldcommunitygrid.org/forums/wcg/viewthread?thread=24324
Change History (3)
comment:1 Changed 16 years ago by
Resolution: | → wontfix |
---|---|
Status: | new → closed |
comment:2 Changed 16 years ago by
Resolution: | wontfix |
---|---|
Status: | closed → reopened |
Well, this patch was <b>workaround</b> rather than fix.
For now, FreeBSD BOINC could not communicate with WCG servers, so I'm asking for the advise how to fix this.
comment:3 Changed 15 years ago by
Resolution: | → invalid |
---|---|
Status: | reopened → closed |
You'll need to get the WCG's certificate authorities public certificate and get it added to the ca-bundle.crt file included with FreeBSD.
It'll have to be something you'll need to take up with the OpenSSL package maintainer.
Certificate validation was originally requested by WCG as part of their security audit.
Turning it off opens the client to man in the middle attacks using self signed certificates.