Planned Deprecation of TLS 1.0/1.1

To Sum Up: Older machines/BOINC clients may encounter issues after 12/17/2021. In order to prevent this, update your BOINC client to at least 7.210 7.2.10 by then, as well as your OpenSSL and curl libraries if necessary.

Hey Everyone,

We recently renewed the cert for the server, and we realized that the server is still supporting TLS 1.0/1.1. These services are out of date and are security hazards. We are going to end support for these services as of Friday, December 17, 2021.

What does this mean for you as a user?

Older clients may still be using old versions of SSL that need TLS 1.0 or 1.1. Once we stop supporting these services, these older clients may encounter issues when trying to communicate and/or get work from the MilkyWay@home server. In order to prevent this, you should update to at least the 7.210 7.2.10 BOINC client.

Additionally, some libraries rely on old versions of TLS. The most common of these are old versions of OpenSSL and curl. If you are running old versions of these libraries, it may be time to update them. Other libraries might also cause issues, so we will keep track of any problems that people run into here.

Overall these issues are relatively easy to fix and should only impact older systems, especially those that have not updated their libraries or BIONC clients in a long time.

Best,
Tom

Hi,
Thanks for the update.
Where can we download the 7.210 client from, please?
Berkeley's web site only goes up to version 7.16.20.

---

There is no 7.210 BOINC release. However there is 7.2.10 but it was released 2013-08-07 so it's definitely not the correct version to upgrade to.
I can confirm that for Windows 7.16.20 is a mandatory release to be installed if you want to connect to any Project, not only this one.

What is this imaginary BOINC client version 7.210 you are referring to?
The latest Boinc Client available on https://boinc.berkeley.edu/download_all.php is version 7.16.20 from Oktober 17. 2021

Tom is probably pointing to the fact that everyone should be running version 7.2.10 or newer. There are a number of versions for different types of hardware and software that are not Windows 64 bit 7.16.20 compliant.

A full list of versions based on Hardware and OS is at the following location.

https://boinc.berkeley.edu/download_all.php

Thanks
Bill F

---

In October of 1969 I took an oath to support and defend the Constitution of the United States against all enemies, foreign and domestic;
There was no expiration date.

Yes, sorry that's a typo. I mean version 7.2.10. I've edited the original post to make that clear!

Also, yeah v7.2.10 is old. TLS 1.0 and 1.1 are pretty old too. I'm sure that there is a newer version of the BOINC client than 7.2.10 that you will want to upgrade to, but as long as you are using a more recent version of the client than 7.2.10 then you should be all set when we disable the old TLS versions on our end.

No version 7.2.10 is advertised at Boinc at all.

only:
Only version 7.14.2

No version 7.2.10 is advertised at Boinc at all.

only:
Only version 7.14.2

Yes for Windows 32 Bit the current version is 7.14.2 and it was released back in October of 2018. Version 7.2.10 is much older and would not be advertised anymore as it was released in August of 2013.

The intent it to get any "real" old users and systems to update to something newer before they change the system later this month, You are fine.

Bill F

---

In October of 1969 I took an oath to support and defend the Constitution of the United States against all enemies, foreign and domestic;
There was no expiration date.

No version 7.2.10 is advertised at Boinc at all.

only:
Only version 7.14.2

It's a Linux type numbering system ie 7.14.2 is NEWER than 7.2.2 because 14 is bigger than 2

You can always download the release and some beta version of Boinc here and if you scroll down far enough you will see the 7.2.? versions listed, not that anyone should still be using them of course. https://boinc.berkeley.edu/dl/?C=M;O=D

Taking a quick count of systems using BOINC versions older than 7.2.10 gives a count of about 79 systems. This is using statistics from the project.

URL source

https://milkyway.cs.rpi.edu/milkyway/host_stats.php?boinc_version=1

Considering that the Server stat's page shows 27,300 systems with recent credit 79 would be a very small number.

Bill F

---

In October of 1969 I took an oath to support and defend the Constitution of the United States against all enemies, foreign and domestic;
There was no expiration date.

Taking a quick count of systems using BOINC versions older than 7.2.10 gives a count of about 79 systems. This is using statistics from the project.

URL source

https://milkyway.cs.rpi.edu/milkyway/host_stats.php?boinc_version=1

Considering that the Server stat's page shows 27,300 systems with recent credit 79 would be a very small number.

Bill F

I never thought to look that up but that's cool and is a very small number

Tom,
What is the easiest way to accommodate this change ?
Bob
PS a non programmer

Tom,
What is the easiest way to accommodate this change ?
Bob
PS a non programmer

I had a look at the list of your computers and they are all running versions of BOINC newer then the minimum , So, you don't need to do anything.

All you need to do is look at the versions of BOINC that your machines are running. If those versions are 7.2.10 or higher (they almost certainly are), then you don't have to do anything. If those versions are lower, you will have to update BOINC.

(For example, 7.3.16 and 7.10.2 are higher, 7.1.1 would be lower - these may not be real versions, I just chose random numbers)

TLS 1.0/1.1 has been disabled. Please let me know if you run into any connection problems.