Opened 15 years ago

Closed 15 years ago

Last modified 15 years ago

#838 closed Defect (invalid)

FreeBSD BOINC 6.4.5, WCG and SSL cert problem

Reported by: marck Owned by:
Priority: Undetermined Milestone: Undetermined
Component: Undetermined Version: 6.4.5
Keywords: FreeBSD WCG SSL Cc:

Description

Problem and a workaround (client patching required) is explained at CWG forum:

http://www.worldcommunitygrid.org/forums/wcg/viewthread?thread=24324

Change History (3)

comment:1 Changed 15 years ago by romw

Resolution: wontfix
Status: newclosed

Certificate validation was originally requested by WCG as part of their security audit.

Turning it off opens the client to man in the middle attacks using self signed certificates.

comment:2 Changed 15 years ago by marck

Resolution: wontfix
Status: closedreopened

Well, this patch was <b>workaround</b> rather than fix.

For now, FreeBSD BOINC could not communicate with WCG servers, so I'm asking for the advise how to fix this.

comment:3 Changed 15 years ago by romw

Resolution: invalid
Status: reopenedclosed

You'll need to get the WCG's certificate authorities public certificate and get it added to the ca-bundle.crt file included with FreeBSD.

It'll have to be something you'll need to take up with the OpenSSL package maintainer.

Note: See TracTickets for help on using tickets.