Re: [weewx-user] Re: rtupdate.wunderground.com certificate error

[J B]

Thanks for the update.

I'm not really sure what he means about embedded device controllers...most 
of us are running RaspberryPis that are sending data using Python. I'm 
pretty sure it can handle host names fine.

On Wednesday, February 5, 2020 at 12:40:31 PM UTC-8, Dave McCreath wrote:
>
> Leon
>
> The text below was posted by Tim Roche (WU IT) on the WeatherUndergound 
> FaceBook page 17 hours ago:
>
> *Quick update: We have some answers for why many of the stations are not 
> sending data. It appears that many of the embedded device controllers don't 
> behave very well with host names, and are sending data to us in a way that 
> is not expected.*
>
> *We love that enthusiasts building cool stuff send data to Weather 
> Underground, so while we asses how to fix these issues, we have temporarily 
> rolled back to our legacy system.*
>
> *We will be testing over the next week to see how to fix these problems, 
> and will ask for help from some of you.*
>
> *I would like to personally apologize for this issue, we felt our testing 
> was robust, but obviously there were gaps. We're still working on a plan 
> and I will try to keep you updated here.*
>
>
> Tim is a regular poster on the site and it's a good source of what's going 
> on.
>
>
> I think the time coincides with everything correcting itself on your system
>
>
> Regards
>
>
> Dave
>
> On Wednesday, 5 February 2020 16:42:53 UTC, Leon Shaner wrote:
>>
>> FWIW, I haven't seen any 404's since around these times from last night:
>>
>> Feb  4 20:43:52 Wunderground-RF: Failed upload attempt 1: HTTP Error 404: 
>> Not Found
>> Feb  4 20:43:52 Wunderground-RF: Failed to publish record 2020-02-04 
>> 20:43:53 EST (1580867033): Failed upload after 1 tries
>> Feb  4 20:49:10 Wunderground-RF: Failed upload attempt 1: > _ssl.c:1039: The handshake operation timed out>
>> Feb  4 20:49:10 Wunderground-RF: Failed to publish record 2020-02-04 
>> 20:48:49 EST (1580867329): Failed upload after 1 tries
>> Feb  4 20:49:45 Wunderground-RF: Failed upload attempt 1: > timed out>
>> Feb  4 20:49:45 Wunderground-RF: Failed to publish record 2020-02-04 
>> 20:49:15 EST (1580867355): Failed upload after 1 tries
>> Feb  4 20:50:19 Wunderground-RF: Failed upload attempt 1: > timed out>
>> Feb  4 20:50:19 Wunderground-RF: Failed to publish record 2020-02-04 
>> 20:49:49 EST (1580867389): Failed upload after 1 tries
>> Feb  4 21:04:41 Wunderground-RF: Failed upload attempt 1: > [Errno 104] Connection reset by peer>
>> Feb  4 21:04:41 Wunderground-RF: Failed to publish record 2020-02-04 
>> 21:04:41 EST (1580868281): Failed upload after 1 tries
>> Feb  4 21:04:44 Wunderground-RF: Failed upload attempt 1: HTTP Error 404: 
>> Not Found
>>
>>
>> Regards,
>> \Leon
>> --
>> Leon Shaner :: Dearborn, Michigan (iPad)
>>
>>
>>>

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/b2f3448a-dc34-4fa6-a938-2264197c25af%40googlegroups.com.

[weewx-user] Re: rtupdate.wunderground.com certificate error

[J B]

I should mention that I'm assuming that this workaround doesn't turn off 
certificate validation system-wide but I'm not well-versed enough in how 
this works to know for sure. Since the daemons are managed by root I guess 
it's possible.

On Sunday, February 2, 2020 at 9:14:24 PM UTC-8, J B wrote:
>
> Like some of you I'm still getting intermittent errors that stop weewx 
> 3.9.2 from uploading until I restart. Someone over at 
> https://apicommunity.wunderground.com/ posted this creative 
> workaround that seems to be working so far. It lowers the security of 
> python but it's better than sending everything over http.
>
> tmarschner 
> <https://apicommunity.wunderground.com/weatherapi/people/tmarschner>
>
>- 2 Posts 
>-  0 Reply Likes
>
> Hi there,
>
> Here's an alternative workaround that doesn't require you to send your 
> Wunderground credentials in clear text. It turns off certificate validation 
> for python. I've tested this on weewx 3.9.2 on a Raspberry Pi (v. 9 
> Stretch) running python 2.7.13.
>
> Modify the weewx startup script /etc/init.d/weewx.
>
> Find the start-stop-daemon line that starts up weewx (the do_start 
> routine) and insert "/usr/bin/env PYTHONHTTPSVERIFY=0" into the --exec 
> parameter as shown below:
>
> start-stop-daemon --start --chuid $WEEWX_USER --pidfile $PIDFILE --exec 
> /usr/bin/env PYTHONHTTPSVERIFY=0 $DAEMON -- $DAEMON_ARGS || return 2
>
> Cheers,
> Tom
>

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/0b003603-6086-4d16-8612-ddb526efa1b9%40googlegroups.com.

[weewx-user] Re: rtupdate.wunderground.com certificate error

[J B]

Like some of you I'm still getting intermittent errors that stop weewx 
3.9.2 from uploading until I restart. Someone over at 
https://apicommunity.wunderground.com/ posted this creative workaround that 
seems to be working so far. It lowers the security of python but it's 
better than sending everything over http.

tmarschner 


   - 2 Posts 
   -  0 Reply Likes

Hi there,

Here's an alternative workaround that doesn't require you to send your 
Wunderground credentials in clear text. It turns off certificate validation 
for python. I've tested this on weewx 3.9.2 on a Raspberry Pi (v. 9 
Stretch) running python 2.7.13.

Modify the weewx startup script /etc/init.d/weewx.

Find the start-stop-daemon line that starts up weewx (the do_start routine) 
and insert "/usr/bin/env PYTHONHTTPSVERIFY=0" into the --exec parameter as 
shown below:

start-stop-daemon --start --chuid $WEEWX_USER --pidfile $PIDFILE --exec 
/usr/bin/env PYTHONHTTPSVERIFY=0 $DAEMON -- $DAEMON_ARGS || return 2

Cheers,
Tom

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/98106b14-546a-481b-a49c-c8cf3ec19d7c%40googlegroups.com.

Re: [weewx-user] Re: rtupdate.wunderground.com certificate error

[J B]

Working here too. I had to restart Weewx.

On Friday, January 31, 2020 at 11:34:19 AM UTC-8, Brice Ruth wrote:
>
> Looking like it's working to me, too.
>
> Brice Ruth, FCD
> Software Engineer, Madison WI
>
>
> On Fri, Jan 31, 2020 at 1:31 PM Travis Bully  > wrote:
>
>> Agreed.  Seems like I still get one cert error every now and then.  
>> Likely still propagating changes through their infrastructure?
>>
>> Jan 31 14:29:25 homeauto03 weewx[3784]: restx: Wunderground-RF: Published 
>> record 2020-01-31 14:29:24 EST (1580498964)
>> Jan 31 14:29:26 homeauto03 weewx[3784]: restx: Wunderground-RF: Failed 
>> upload attempt 1: > certificate verify failed (_ssl.c:727)>
>> Jan 31 14:29:31 homeauto03 weewx[3784]: restx: Wunderground-RF: Failed to 
>> publish record 2020-01-31 14:29:26 EST (1580498966): Failed upload after 1 
>> tries
>> Jan 31 14:29:31 homeauto03 weewx[3784]: restx: Wunderground-RF: Published 
>> record 2020-01-31 14:29:30 EST (1580498970)
>>
>> On Fri, Jan 31, 2020 at 2:30 PM Denny Page > > wrote:
>>
>>> It's fixed now.
>>>
>>>
>>> On Friday, January 31, 2020 at 8:54:02 AM UTC-8, Denny Page wrote:

 Wunderground just posted a note about the intermediate certificate 
 issue. Hopefully they will fix it shortly.

>>> -- 
>>> You received this message because you are subscribed to a topic in the 
>>> Google Groups "weewx-user" group.
>>> To unsubscribe from this topic, visit 
>>> https://groups.google.com/d/topic/weewx-user/mYhw6CSKHHg/unsubscribe.
>>> To unsubscribe from this group and all its topics, send an email to 
>>> weewx...@googlegroups.com .
>>> To view this discussion on the web visit 
>>> https://groups.google.com/d/msgid/weewx-user/f5e5741a-e5f8-419b-9c0d-df1972fe5ced%40googlegroups.com
>>>  
>>> 
>>> .
>>>
>> -- 
>> You received this message because you are subscribed to the Google Groups 
>> "weewx-user" group.
>> To unsubscribe from this group and stop receiving emails from it, send an 
>> email to weewx...@googlegroups.com .
>> To view this discussion on the web visit 
>> https://groups.google.com/d/msgid/weewx-user/CAF_%2Bh57S88%3DZOX1mXK8oZBx-_KEHvDPFP%3Dvtd4u3_1qg7994yg%40mail.gmail.com
>>  
>> 
>> .
>>
>

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/80045ee1-d48d-47ed-95fd-19af175783f0%40googlegroups.com.

[weewx-user] Re: rtupdate.wunderground.com certificate error

[J B]

I just tried running the request that Weewx attempts manually via curl and 
it still gives me a certificate error:

curl: (60) SSL certificate problem: unable to get local issuer certificate


Maybe there's some caching involved?

On Thursday, January 30, 2020 at 1:51:28 PM UTC-8, Denny Page wrote:
>
> I received an email from Wunderground "Yes, there was a problem that has 
> been resolved."
>
> While the certificate error has been resolved, it appears that the https 
> head still is not accepting updates. The http head appears fully 
> functional. I've reported the secondary problem to them.
>

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/6595b863-76fd-40fc-a625-c93da3c7f012%40googlegroups.com.

[weewx-user] Re: rtupdate.wunderground.com certificate error

[J B]

Same problem here. Thanks for posting the response from WU.

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/f6336e3e-00f0-4d47-88ee-a51b4e2c3ef7%40googlegroups.com.

[weewx-user] Wunderground Upload fails with SSL error started last night

[J B]

Hi,
I've had a PWS uploading to Wunderground with Weewx 3.9.2 on a Raspberry Pi 
for several months. Yesterday the station randomly stopped uploading to WU 
although my local database is still being updated. Checking the log shows 
the following:

restx: Wunderground-PWS: Failed upload attempt 1: 

Elsewhere in the log I found the actual URL that is being queried by weewx 
and when I run that manually with curl I get the following:

user@host:~$ curl -L 
"https://weatherstation.wunderground.com/weatherstation/updateweatherstation.php?action=updateraw&;"
curl: (60) SSL certificate problem: unable to get local issuer certificate
More details here: https://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"
 of Certificate Authority (CA) public keys (CA certs). If the default
 bundle file isn't adequate, you can specify an alternate file
 using the --cacert option.
If this HTTPS server uses a certificate signed by a CA represented in
 the bundle, the certificate verification probably failed due to a
 problem with the certificate (it might be expired, or the name might
 not match the domain name in the URL).
If you'd like to turn off curl's verification of the certificate, use
 the -k (or --insecure) option.


I've tried this on 2 other systems (another RPi and a CentOS VM) with the 
same result. I'm not that familiar with SSL certificates but when I check 
the one for weatherstation.wunderground.com one in my browser it says 
"valid".

Is anyone else having this problem? How can I fix this issue?

Thanks in advance.

-- 
You received this message because you are subscribed to the Google Groups 
"weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to weewx-user+unsubscr...@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/weewx-user/b444ed31-e887-45bf-9c06-ad995ea53494%40googlegroups.com.