expired certificate when downloading ProstT5 database

vmkhot commented 2 weeks ago

Expected Behavior

Current Behavior

Steps to Reproduce (for bugs)

Please make sure to execute the reproduction steps with newly recreated and empty tmp folders.

foldseek databases ProstT5 prostt5_out tmp --remove-tmp-files

Foldssek Output (for bugs)

MMseqs Version:                 9.427df8a
Tsv                             false
Force restart with latest tmp   false
Remove temporary files          true
Compressed                      0
Threads                         144
Verbosity                       3

06/11 13:41:23 [NOTICE] Downloading 1 item(s)

06/11 13:41:23 [ERROR] CUID#7 - Download aborted. URI=https://foldseek.steineggerlab.workers.dev/prostt5-f16-safetensors.tar.gz
Exception: [AbstractCommand.cc:351] errorCode=1 URI=https://foldseek.steineggerlab.workers.dev/prostt5-f16-safetensors.tar.gz
  -> [SocketCore.cc:1019] errorCode=1 SSL/TLS handshake failure: certificate has expired

06/11 13:41:23 [NOTICE] Download GID#b2a7693783d1c234 not complete: tmp/13322749095071590370/prostt5-f16-safetensors.tar.gz

Download Results:
gid   |stat|avg speed  |path/URI
======+====+===========+=======================================================
b2a769|ERR |       0B/s|tmp/13322749095071590370/prostt5-f16-safetensors.tar.gz

Status Legend:
(ERR):error occurred.

aria2 will resume download if the transfer is restarted.
If there are any errors, then see the log file. See '-l' option in help/man page for details.
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
  0     0    0     0    0     0      0      0 --:--:-- --:--:-- --:--:--     0
curl: (60) SSL certificate problem: certificate has expired
More details here: https://curl.haxx.se/docs/sslcerts.html

curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
--2024-06-11 13:41:23--  https://foldseek.steineggerlab.workers.dev/prostt5-f16-safetensors.tar.gz
Resolving internet4nzm.rz.uni-jena.de (internet4nzm.rz.uni-jena.de)... 10.138.192.22, 10.138.224.22
Connecting to internet4nzm.rz.uni-jena.de (internet4nzm.rz.uni-jena.de)|10.138.192.22|:3128... connected.
ERROR: cannot verify foldseek.steineggerlab.workers.dev's certificate, issued by ‘CN=DFN-Verein Global Issuing CA,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE’:
  Issued certificate has expired.
ERROR: no certificate subject alternative name matches
        requested host name ‘foldseek.steineggerlab.workers.dev’.
To connect to foldseek.steineggerlab.workers.dev insecurely, use `--no-check-certificate'.
Error: Could not download https://foldseek.steineggerlab.workers.dev/prostt5-f16-safetensors.tar.gz to tmp/13322749095071590370/prostt5-f16-safetensors.tar.gz

Context

Providing context helps us come up with a solution and improve our documentation for the future.

Your Environment

Include as many relevant details about the environment you experienced the bug in.

Git commit used (The string after "MMseqs Version:" when you execute foldseek without any parameters): 9.427df8a
Which foldseek version was used (Statically-compiled, self-compiled, Conda, etc.): conda
For self-compiled and Homebrew: Compiler and Cmake versions used and their invocation:
Server specifications (especially CPU support for AVX2/SSE and amount of system memory):
Operating system and version:

NAME="AlmaLinux"
VERSION="8.7 (Stone Smilodon)"
ID="almalinux"
ID_LIKE="rhel centos fedora"
VERSION_ID="8.7"
PLATFORM_ID="platform:el8"
PRETTY_NAME="AlmaLinux 8.7 (Stone Smilodon)"
ANSI_COLOR="0;34"
LOGO="fedora-logo-icon"
CPE_NAME="cpe:/o:almalinux:almalinux:8::baseos"
HOME_URL="https://almalinux.org/"
DOCUMENTATION_URL="https://wiki.almalinux.org/"
BUG_REPORT_URL="https://bugs.almalinux.org/"

ALMALINUX_MANTISBT_PROJECT="AlmaLinux-8"
ALMALINUX_MANTISBT_PROJECT_VERSION="8.7"
REDHAT_SUPPORT_PRODUCT="AlmaLinux"
REDHAT_SUPPORT_PRODUCT_VERSION="8.7"

milot-mirdita commented 2 weeks ago

ERROR: cannot verify foldseek.steineggerlab.workers.dev's certificate, issued by ‘CN=DFN-Verein Global Issuing CA,OU=DFN-PKI,O=Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.,C=DE’:

Something in your network is intercepting traffic and breaking downloads. I would recommend asking your IT about this.

milot-mirdita commented 2 weeks ago

Maybe to be more clear. This should be a Cloudflare certificate, not a DFN certificate.

steineggerlab / foldseek