Yes, I get

This server could not prove that it is download.cpdn.org; its security certificate is from alpha.cpdn.org. This may be caused by a misconfiguration [or an attacker intercepting your connection].

I'll go with misconfiguration.

Bump. Downloads for HadCM3 short tasks still fail. Still getting the SSL certificate mismatch error for download.cpdn.org. And ssl labs still reports the same SSL certificate mismatch so it's not just my box. I think it's safe to assume this is affecting anyone trying to download from that server.

Thanks all!

Could you please enable http debug in the event log options and post the output when you do an update. Do uncheck it again afterwards though as it quickly fills the event log up. I will then email Andy again. There haven't been any of these tasks which are the only ones that run natively on Mac's for quite a long time with none that I know of in the pipeline so even once this is fixed, you may want to go down the emulation route to get work.

Going to SSL Labs and expanding the information provided when clicking on <test anyway> i see this

Safari 6 / iOS 6.0.1 	Server sent fatal alert: handshake_failure
Safari 7 / iOS 7.1  R		Server sent fatal alert: handshake_failure
Safari 7 / OS X 10.9  R		Server sent fatal alert: handshake_failure
Safari 8 / iOS 8.4  R		Server sent fatal alert: handshake_failure
Safari 8 / OS X 10.10  R		Server sent fatal alert: handshake_failure

Safari9/OSX 9 manages the handshake without problems as do most if not all non Mac systems tested. So it looks like only some OS's fail to manage the handshake successfully. Which version of OSX are you using? Apologies if you posted that earlier and I missed it scrolling back through the thread.

I see that following the latest fix, computers running Linux, Windows and MacOS have all been able to return results so things have certainly improved even if there are still problems for some users.

Bump. Downloads for HadCM3 short tasks still fail. Still getting the SSL certificate mismatch error for download.cpdn.org.

I remember the days when setting up an internet server was a piece of cake. With all this over the top SSL stuff, I wouldn't know where to start. It's no wonder 50% of the Boinc projects have had difficulties with it. I thought it was introduced for banking, you know, important secure stuff?

It's running 10.11.6, the highest version that can be run on that machine.

Here's the dump with http_debug flagged.

Tue May 16 07:00:11 2023 | climateprediction.net | [http] HTTP_OP::init_get(): https://download.cpdn.org/download//batch_930/workunits/hadcm3s_1iyo_201412_132_930_012138393.zip
Tue May 16 07:00:11 2023 | climateprediction.net | Started download of hadcm3s_1iyo_201412_132_930_012138393.zip
Tue May 16 07:00:11 2023 | climateprediction.net | [http] HTTP_OP::init_get(): https://download.cpdn.org/download//batch_930/ancils/NAT_VOLC.gz
Tue May 16 07:00:11 2023 | climateprediction.net | Started download of NAT_VOLC.gz
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: Hostname download.cpdn.org was found in DNS cache
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: Trying 129.67.193.181...
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TCP_NODELAY set
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: Found bundle for host download.cpdn.org: 0x7fba5b614f20 [serially]
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: Hostname download.cpdn.org was found in DNS cache
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: Trying 129.67.193.181...
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TCP_NODELAY set
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: Connected to download.cpdn.org (129.67.193.181) port 443 (#4124)
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: ALPN, offering http/1.1
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: successfully set certificate verify locations:
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: CAfile: ca-bundle.crt
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: CApath: none
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: Connected to download.cpdn.org (129.67.193.181) port 443 (#4123)
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: ALPN, offering http/1.1
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: successfully set certificate verify locations:
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: CAfile: ca-bundle.crt
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: CApath: none
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (IN), TLS handshake, Server key exchange (12):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (IN), TLS handshake, Server finished (14):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (OUT), TLS change cipher, Client hello (1):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (OUT), TLS handshake, Finished (20):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (IN), TLS handshake, Server key exchange (12):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (IN), TLS handshake, Server finished (14):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (OUT), TLS change cipher, Client hello (1):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (OUT), TLS handshake, Finished (20):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (IN), TLS handshake, Finished (20):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: ALPN, server did not agree to a protocol
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: Server certificate:
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: subject: CN=alpha.cpdn.org
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: start date: May 15 23:03:33 2023 GMT
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: expire date: Aug 13 23:03:32 2023 GMT
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: subjectAltName does not match download.cpdn.org
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: SSL: no alternative certificate subject name matches target host name 'download.cpdn.org'
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: Closing connection 4124
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4651] Info: TLSv1.2 (OUT), TLS alert, Client hello (1):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] HTTP error: SSL peer certificate or SSH remote key was not OK
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (IN), TLS handshake, Finished (20):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: ALPN, server did not agree to a protocol
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: Server certificate:
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: subject: CN=alpha.cpdn.org
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: start date: May 15 23:03:33 2023 GMT
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: expire date: Aug 13 23:03:32 2023 GMT
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: subjectAltName does not match download.cpdn.org
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: SSL: no alternative certificate subject name matches target host name 'download.cpdn.org'
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: Closing connection 4123
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: TLSv1.2 (OUT), TLS alert, Client hello (1):
Tue May 16 07:00:12 2023 | climateprediction.net | [http] HTTP error: SSL peer certificate or SSH remote key was not OK
Tue May 16 07:00:12 2023 | | Project communication failed: attempting access to reference site
Tue May 16 07:00:12 2023 | | [http] HTTP_OP::init_get(): https://www.ibm.com
Tue May 16 07:00:12 2023 | climateprediction.net | Temporarily failed download of hadcm3s_1iyo_201412_132_930_012138393.zip: transient HTTP error
Tue May 16 07:00:12 2023 | climateprediction.net | Backing off 04:05:28 on download of hadcm3s_1iyo_201412_132_930_012138393.zip
Tue May 16 07:00:12 2023 | climateprediction.net | Temporarily failed download of NAT_VOLC.gz: transient HTTP error
Tue May 16 07:00:12 2023 | climateprediction.net | Backing off 04:20:24 on download of NAT_VOLC.gz
Tue May 16 07:00:12 2023 | climateprediction.net | [http] HTTP_OP::init_get(): https://download.cpdn.org/download//batch_930/ancils/SO2DMS_test_ancil.gz
Tue May 16 07:00:12 2023 | climateprediction.net | Started download of SO2DMS_test_ancil.gz
Tue May 16 07:00:12 2023 | climateprediction.net | [http] HTTP_OP::init_get(): https://download.cpdn.org/download//batch_930/ancils/sulpc_oxidants_19_A2_1990.gz
Tue May 16 07:00:12 2023 | climateprediction.net | Started download of sulpc_oxidants_19_A2_1990.gz
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Rebuilt URL to: https://www.ibm.com/
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Found bundle for host www.ibm.com: 0x7fba5b6978c0 [can pipeline]
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Re-using existing connection! (#4120) with host www.ibm.com
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Connected to www.ibm.com (23.211.36.60) port 443 (#4120)
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: GET / HTTP/1.1
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Host: www.ibm.com
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: User-Agent: BOINC client (x86_64-apple-darwin 7.14.5)
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Accept: */*
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Accept-Encoding: deflate, gzip
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Content-Type: application/x-www-form-urlencoded
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Accept-Language: en_US
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server:
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: Hostname download.cpdn.org was found in DNS cache
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: Trying 129.67.193.181...
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TCP_NODELAY set
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: Found bundle for host download.cpdn.org: 0x7fba5b571410 [serially]
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: Hostname download.cpdn.org was found in DNS cache
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: Trying 129.67.193.181...
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TCP_NODELAY set
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: HTTP/1.1 303 See Other
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Server: AkamaiGHost
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Content-Length: 0
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Location: https://www.ibm.com/us-en/?ar=1
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Date: Tue, 16 May 2023 12:00:13 GMT
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Connection: keep-alive
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: x-content-type-options: nosniff
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: X-XSS-Protection: 1; mode=block
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Content-Security-Policy: upgrade-insecure-requests
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Strict-Transport-Security: max-age=31536000
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Set-Cookie: _abck=D648662190DD03017ACB160B9B1BBF95~-1~YAAQiB6uRRnn7AiIAQAAq61uJAk3jF92ricFUC8QWoynqvjO/BtMm1hxLAcbtoOsXUFTLs5pq7nn044etIuwpNco8RmBwIxgWZ7gaZnUewy7QSxPMAkBqD+B0KpAhfdVqQL29D7DebFB7FRu983PbbK0rFEOa4Kj+wqBtYZlIV0LZZGhdtRx4DRQNvqocawOU5ejuGClXCBW4/Brks6kieJ8eNA8ctWL80/vtXqN4mc35XklTnWFrezApJqERhkJTp0h75R8wfOjZIMNovu8W/OmjRC87eY4IgOW+SPGeMwSaVmq/AQkmJIU/0Cd75VAA0mdcc2VvCcZoiwITj+lYwAb5s/6/M9CWIF5pFwCs5FODPjT0Vk=~-1~-1~-1; Domain=.ibm.com; Path=/; Expires=Wed, 15 May 2024 12:00:13 GMT; Max-Age=31536000; Secure
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Set-Cookie: bm_sz=4567D5EAB71C165E8C8EA5D3DD4A1B44~YAAQiB6uRRrn7AiIAQAAq61uJBPypHCa16oEfIAFJn5ak1qVFhq9p26fhLY48AUH0+Rt1mpnSq8exsGYXtu5X2fi7y6fmnnjiJ7SbJ8qh1cVZJjuCSlKkrcDEP7uAnSGa0l4nxAVPvM2I3wr3ydZ5jcd3FrLeBET/pteZVcBpZfvtgxY4jMI4kJnlBO6HSgvOWa9xroO7SoGMLKqAWt+sIYVQquBCtIuPu+2G2puKyDYOGnY761Ct2WaoF3k1zGKrHS/V3KDp9RrJmXZ6rjFgqM27nf2/cq5ABZqSxehkY0=~3360325~4338242; Domain=.ibm.com; Path=/; Expires=Tue, 16 May 2023 16:00:13 GMT; Max-Age=14400
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server:
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Connection #4120 to host www.ibm.com left intact
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Issue another request to this URL: 'https://www.ibm.com/us-en/?ar=1'
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Found bundle for host www.ibm.com: 0x7fba5b6978c0 [can pipeline]
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Re-using existing connection! (#4120) with host www.ibm.com
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Connected to www.ibm.com (23.211.36.60) port 443 (#4120)
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: GET /us-en/?ar=1 HTTP/1.1
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Host: www.ibm.com
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: User-Agent: BOINC client (x86_64-apple-darwin 7.14.5)
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Accept: */*
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Accept-Encoding: deflate, gzip
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Referer: https://www.ibm.com/
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Content-Type: application/x-www-form-urlencoded
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server: Accept-Language: en_US
Tue May 16 07:00:13 2023 | | [http] [ID#0] Sent header to server:
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: Connected to download.cpdn.org (129.67.193.181) port 443 (#4125)
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: ALPN, offering http/1.1
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: successfully set certificate verify locations:
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: CAfile: ca-bundle.crt
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: CApath: none
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: Connected to download.cpdn.org (129.67.193.181) port 443 (#4126)
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: ALPN, offering http/1.1
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: successfully set certificate verify locations:
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: CAfile: ca-bundle.crt
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: CApath: none
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (OUT), TLS handshake, Client hello (1):
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: HTTP/1.1 200 OK
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Accept-Ranges: bytes
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Content-Type: text/html
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: ETag: "c1633ffa71e9f7915c50a7845e2c093e:1683595203.234443"
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Last-Modified: Tue, 09 May 2023 00:02:09 GMT
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Server: AkamaiNetStorage
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Cache-Control: max-age=3600
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Expires: Tue, 16 May 2023 13:00:13 GMT
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: X-Akamai-Transformed: 9 18381 0 pmb=mTOE,2
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Content-Encoding: gzip
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Date: Tue, 16 May 2023 12:00:13 GMT
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Content-Length: 18577
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Connection: keep-alive
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Vary: Accept-Encoding
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: x-content-type-options: nosniff
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: X-XSS-Protection: 1; mode=block
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Content-Security-Policy: upgrade-insecure-requests
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Strict-Transport-Security: max-age=31536000
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Set-Cookie: _abck=4205C2DF286F1C1F7581FAF4B2BBCF34~-1~YAAQiB6uRSbn7AiIAQAAMq5uJAlOCEBI5AazOm+GB8S8cmgZaLdr6NFnPRtRfLOMOryVKn6fR2AOdKkjRS94Oj4s3LoXI6/RdC0IKDzT9yTvF5HlSrv1sfAIm/7Ig1HOW7R5l8mwffkfUGmVaKEQ4UEpRX0DRM0A0j3qVA5bGd7Lcw9Szh/SduA5Hq4nTBCDGOtbuYmXPk9Hps5Sl7o4ANhiuJ80fYDdFI/f3aHTyFhr8SFZzRq7K7GyxwbSlPIGgFYXYdDHuOBZR0u+YjKoCGlCfDAs4d7JSeusxVNwF5QmpPcuCKat6qm9V414DrpCaTuRzMD5+R5zOlVDXrnq6CugtPfXfcB4S40h86WxLMPfH37kDLM=~-1~-1~-1; Domain=.ibm.com; Path=/; Expires=Wed, 15 May 2024 12:00:13 GMT; Max-Age=31536000; Secure
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Set-Cookie: ak_bmsc=0C12E9002B10B60FBABD175FDC11651C~000000000000000000000000000000~YAAQiB6uRSfn7AiIAQAAMq5uJBNst6AaFA9wGV7obZbXnkezgvnCJTn9dNdWHvS+bCSH1EwOl4y9fL5VwkY8wZnC6rYa9K19UH3e26j0VGR8CC8O0Zj63DHA2qlniO/rX1k4sKmC0vVvPpchs6xQqMt1NhctwP+p+AVKoVApdrq63Ybo1Y4DEVjUN6LGB3YiSBEZ8l2JtuDML2r6sh/cymHpHu7WmeWA7s4J++bepzV2hL0qMT+2X3Frtug2Df5KOKfCLWWa6oT151mToko1qlALIxrsbYg3AUB2GeuDWvivQMFUzginla/T/GEu2rEEcNDqn/0AIvywSxRcYRt4eotLU55q7+tFMrCwLQKdwlSwnrSQUShuNw==; Domain=.ibm.com; Path=/; Expires=Tue, 16 May 2023 14:00:13 GMT; Max-Age=7200; HttpOnly
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server: Set-Cookie: bm_sz=83A9C7A29A045EE8B7A52AFCF565CCC8~YAAQiB6uRSjn7AiIAQAAMq5uJBPTiAGQdaigdukUQ57FBcopeJxsPLYUe7CfmC/qa1HoZMlRr3ljZ29EWpLOTOaG9zw5ft1Gi2f60m1SzW6u+ZIprNIDso5Rw1dpn+LjXGc+iQxg7CIjLxZ/ZWCT+WbLEEHFyL2kNPv+Fc6BcyQPjilrKtWi9txzpolMpPm6HdycpQVofFyEfADYX4SvVzXdozD0Yiz3O7s0ovgL3T0PIWD3GZG9NgxhYqeFOhFMbZDDYZPPk2SbIEDOFonhKhwPwRbKhZ1o0gDxajvB7JE=~3360325~4338242; Domain=.ibm.com; Path=/; Expires=Tue, 16 May 2023 16:00:13 GMT; Max-Age=14400
Tue May 16 07:00:13 2023 | | [http] [ID#0] Received header from server:
Tue May 16 07:00:13 2023 | |
Tue May 16 07:00:13 2023 | | [http] [ID#0] Info: Connection #4120 to host www.ibm.com left intact
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (IN), TLS handshake, Server key exchange (12):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (IN), TLS handshake, Server finished (14):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (OUT), TLS change cipher, Client hello (1):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (OUT), TLS handshake, Finished (20):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (IN), TLS handshake, Server hello (2):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (IN), TLS handshake, Certificate (11):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (IN), TLS handshake, Server key exchange (12):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (IN), TLS handshake, Server finished (14):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (OUT), TLS handshake, Client key exchange (16):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (OUT), TLS change cipher, Client hello (1):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (OUT), TLS handshake, Finished (20):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (IN), TLS handshake, Finished (20):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: ALPN, server did not agree to a protocol
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: Server certificate:
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: subject: CN=alpha.cpdn.org
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: start date: May 15 23:03:33 2023 GMT
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: expire date: Aug 13 23:03:32 2023 GMT
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: subjectAltName does not match download.cpdn.org
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: SSL: no alternative certificate subject name matches target host name 'download.cpdn.org'
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: Closing connection 4125
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4652] Info: TLSv1.2 (OUT), TLS alert, Client hello (1):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] HTTP error: SSL peer certificate or SSH remote key was not OK
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (IN), TLS handshake, Finished (20):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: ALPN, server did not agree to a protocol
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: Server certificate:
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: subject: CN=alpha.cpdn.org
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: start date: May 15 23:03:33 2023 GMT
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: expire date: Aug 13 23:03:32 2023 GMT
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: subjectAltName does not match download.cpdn.org
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: SSL: no alternative certificate subject name matches target host name 'download.cpdn.org'
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: Closing connection 4126
Tue May 16 07:00:13 2023 | climateprediction.net | [http] [ID#4653] Info: TLSv1.2 (OUT), TLS alert, Client hello (1):
Tue May 16 07:00:13 2023 | climateprediction.net | [http] HTTP error: SSL peer certificate or SSH remote key was not OK
Tue May 16 07:00:13 2023 | | Internet access OK - project servers may be temporarily down.
Tue May 16 07:00:13 2023 | climateprediction.net | Temporarily failed download of SO2DMS_test_ancil.gz: transient HTTP error

I see that following the latest fix, computers running Linux, Windows and MacOS have all been able to return results so things have certainly improved even if there are still problems for some users.

Do you see any work coming from a Mac that was sent to the client after the 15th of April? That would indicate that this is not a global issue but perhaps limited to my machine. I would be surprised as the SSL cert at download.cpdn.org is still showing errors, but I've been wrong at multiple things this week. What's one more?

This seems to be the critical part of bullschuck's extended log:

Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: SSL connection using TLSv1.2 / ECDHE-RSA-AES256-GCM-SHA384
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: ALPN, server did not agree to a protocol
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: Server certificate:
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: subject: CN=alpha.cpdn.org
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: start date: May 15 23:03:33 2023 GMT
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: expire date: Aug 13 23:03:32 2023 GMT
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: subject AltName does not match download.cpdn.org
Tue May 16 07:00:12 2023 | climateprediction.net | [http] [ID#4650] Info: SSL: no alternative certificate subject name matches target host name 'download.cpdn.org'

That matches my experience probing download.cpdn.org with an https: request from a browser.

I'd surmise that server has been repurposed from alpha test duties, now that we're using dev.cpdn.org instead. There's some more cleaning up to do.

Thanks for going through that Richard. It saves me having to make sure I haven't missed anything vital. I have forwarded your thoughts to Andy.

Message from Andy, about 30 minutes ago:

I understand what is going on now. This is the download service. The https wasn't properly configured on the download service and it was trying to connect to alpha or dev.
I have pulled down a new certificate for this now. This should go live, I understand, in one hour.

Not not quite fixed yet, but worth trying again a little later.

Message from Andy, about 30 minutes ago:

I understand what is going on now. This is the download service. The https wasn't properly configured on the download service and it was trying to connect to alpha or dev.
I have pulled down a new certificate for this now. This should go live, I understand, in one hour.

Not not quite fixed yet, but worth trying again a little later.

I'm still not seeing the change on my side or at ssl labs. It's been ~4 hours now. I'll check again in the morning, Texas time.

https://www.ssllabs.com/ssltest/analyze.html?d=download.cpdn.org

Yes, I'm still getting the same from a Windows browser probe:

Message from Andy, about 30 minutes ago:

I understand what is going on now. This is the download service. The https wasn't properly configured on the download service and it was trying to connect to alpha or dev.
I have pulled down a new certificate for this now. This should go live, I understand, in one hour.

Not not quite fixed yet, but worth trying again a little later.

I'm still not seeing the change on my side or at ssl labs. It's been ~4 hours now. I'll check again in the morning, Texas time.

https://www.ssllabs.com/ssltest/analyze.html?d=download.cpdn.org

I'm still not seeing any difference this morning. The ssl labs link and the event log both show the same issue with the SSL certificate name mismatch.

I'm still not seeing any difference this morning. The ssl labs link and the event log both show the same issue with the SSL certificate name mismatch.

Richard has informed Andy that nothing seems to have changed. The weekend however is looming and I know there are other aspects of the server that Andy has to deal with. I don't hold up much hope of this being resolved before Monday which presumably pushes the East Asia WAH2 tasks back into next week at least before they appear too.

Try again now. Andy says it's been fixed, and I can get a secure connection from a Windows browser. Chrome says the connection is secure, and that the certificate is valid: but strangely it has a CN of dev.cpdn.org (not download). The acid test will be when we start getting downloads across the board.

Try again now. Andy says it's been fixed, and I can get a secure connection from a Windows browser. Chrome says the connection is secure, and that the certificate is valid: but strangely it has a CN of dev.cpdn.org (not download). The acid test will be when we start getting downloads across the board.

And in my last post, I was confused about the day of the week!

The acid test will be when we start getting downloads across the board.

Not yet for me.

Thu 18 May 2023 02:24:43 PM EDT | climateprediction.net | Sending scheduler request: To fetch work.
Thu 18 May 2023 02:24:43 PM EDT | climateprediction.net | Requesting new tasks for CPU
Thu 18 May 2023 02:24:46 PM EDT | climateprediction.net | Scheduler request completed: got 0 new tasks
Thu 18 May 2023 02:24:46 PM EDT | climateprediction.net | Project has no tasks available

---

The acid test will be when we start getting downloads across the board.

Not yet for me.

Thu 18 May 2023 02:24:43 PM EDT | climateprediction.net | Sending scheduler request: To fetch work.
Thu 18 May 2023 02:24:43 PM EDT | climateprediction.net | Requesting new tasks for CPU
Thu 18 May 2023 02:24:46 PM EDT | climateprediction.net | Scheduler request completed: got 0 new tasks
Thu 18 May 2023 02:24:46 PM EDT | climateprediction.net | Project has no tasks available

That is not the same issue. This issue in this thread is with the download server having a bad SSL cert. What you are showing is that the project has no tasks available.

Try again now. Andy says it's been fixed, and I can get a secure connection from a Windows browser. Chrome says the connection is secure, and that the certificate is valid: but strangely it has a CN of dev.cpdn.org (not download). The acid test will be when we start getting downloads across the board.

Success!!

Stuff was downloading and then the atmos.gz files "failed." I didn't have http_debug on so I can't say what happened.

Thu May 18 15:56:40 2023 | climateprediction.net | Started download of hadcm3s_1iyo_201412_132_930_012138393.zip
Thu May 18 15:56:40 2023 | climateprediction.net | Started download of 1iyo_2014.ostart.gz
Thu May 18 15:56:42 2023 | climateprediction.net | Finished download of hadcm3s_1iyo_201412_132_930_012138393.zip
Thu May 18 15:56:42 2023 | climateprediction.net | Started download of 1iyo_930_atmos.gz
Thu May 18 15:56:43 2023 | climateprediction.net | Giving up on download of 1iyo_930_atmos.gz: permanent HTTP error
Thu May 18 15:56:43 2023 | climateprediction.net | Started download of spec3a_sw_3_asol2c_hadcm3.gz
Thu May 18 15:56:44 2023 | climateprediction.net | Finished download of spec3a_sw_3_asol2c_hadcm3.gz
Thu May 18 15:56:44 2023 | climateprediction.net | Started download of spec3a_lw_3_asol2c_hadcm3.gz
Thu May 18 15:56:44 2023 | climateprediction.net | Sending scheduler request: To fetch work.
Thu May 18 15:56:44 2023 | climateprediction.net | Requesting new tasks for CPU
Thu May 18 15:56:45 2023 | climateprediction.net | Finished download of spec3a_lw_3_asol2c_hadcm3.gz
Thu May 18 15:56:45 2023 | climateprediction.net | Started download of waterfix.ancil.be.32.gz
Thu May 18 15:56:46 2023 | climateprediction.net | Finished download of waterfix.ancil.be.32.gz
Thu May 18 15:56:47 2023 | climateprediction.net | Started download of NAT_VOLC.gz
Thu May 18 15:56:47 2023 | climateprediction.net | Scheduler request completed: got 0 new tasks
Thu May 18 15:56:47 2023 | climateprediction.net | Project has no tasks available
Thu May 18 15:56:48 2023 | climateprediction.net | Finished download of NAT_VOLC.gz
Thu May 18 15:56:48 2023 | climateprediction.net | Started download of SO2DMS_test_ancil.gz
Thu May 18 15:57:03 2023 | climateprediction.net | Finished download of SO2DMS_test_ancil.gz
Thu May 18 15:57:03 2023 | climateprediction.net | Started download of sulpc_oxidants_19_A2_1990.gz
Thu May 18 15:57:05 2023 | climateprediction.net | Finished download of 1iyo_2014.ostart.gz
Thu May 18 15:57:05 2023 | climateprediction.net | Started download of ozone_cmip6hist+ssp126_2014_2026.gz
Thu May 18 15:57:07 2023 | climateprediction.net | Finished download of ozone_cmip6hist+ssp126_2014_2026.gz
Thu May 18 15:57:07 2023 | climateprediction.net | Started download of hadcm3s_1jlo_201412_132_930_012138422.zip
Thu May 18 15:57:08 2023 | climateprediction.net | Finished download of hadcm3s_1jlo_201412_132_930_012138422.zip
Thu May 18 15:57:08 2023 | climateprediction.net | Started download of 1jlo_2014.ostart.gz
Thu May 18 15:57:26 2023 | climateprediction.net | Finished download of 1jlo_2014.ostart.gz
Thu May 18 15:57:26 2023 | climateprediction.net | Started download of 1jlo_930_atmos.gz
Thu May 18 15:57:27 2023 | climateprediction.net | Giving up on download of 1jlo_930_atmos.gz: permanent HTTP error
Thu May 18 15:57:27 2023 | climateprediction.net | Started download of hadcm3s_1bo5_201412_132_930_012138076.zip
Thu May 18 15:57:28 2023 | climateprediction.net | Finished download of hadcm3s_1bo5_201412_132_930_012138076.zip
Thu May 18 15:57:28 2023 | climateprediction.net | Started download of 1bo5_2014.ostart.gz
Thu May 18 15:57:47 2023 | climateprediction.net | Finished download of sulpc_oxidants_19_A2_1990.gz
Thu May 18 15:57:47 2023 | climateprediction.net | Started download of 1bo5_930_atmos.gz
Thu May 18 15:57:48 2023 | climateprediction.net | Giving up on download of 1bo5_930_atmos.gz: permanent HTTP error
Thu May 18 15:57:49 2023 | climateprediction.net | Finished download of 1bo5_2014.ostart.gz
Thu May 18 15:58:21 2023 | climateprediction.net | update requested by user
Thu May 18 15:58:22 2023 | climateprediction.net | Sending scheduler request: Requested by user.
Thu May 18 15:58:22 2023 | climateprediction.net | Reporting 3 completed tasks
Thu May 18 15:58:22 2023 | climateprediction.net | Requesting new tasks for CPU

Where'd you get that from? I've got 8 Windows and 1 Linux PC and I never get work.

Where'd you get that from? I've got 8 Windows and 1 Linux PC and I never get work.

I have some (old) Macs so I only get the Hadley CM3 jobs. These three were sitting in my Transfers tab, trying to be downloaded, for a month. The most previous work before that was from February. There's not a lot to go around from this project. I counted and my two Macs have been assigned 28 tasks since May 18th of last year.