search

h4de5 / home-assistant-vimar

VIMAR by-me integration into home-assistant.io
GNU General Public License v3.0
43 stars 6 forks source link

Problems with Vimar web Server 1.7 #75

Closed stefben81 closed 5 months ago

stefben81 commented 7 months ago

Dear Sirs, i try to install and connect to my (very old) web server (firmware version 1.7) and each time the software says: "Invalid certificate, try change or remove" I think that is because the SSL implementation in VIMAR is without certificate. Other people have seen this type of problem? Any ideas?

marcogeni commented 7 months ago

Hi stefben81, did you try to download the CA certificate from the setup page of the Vimar By-me server?

h4de5 commented 7 months ago

i think at some point it was no longer possible to create an browser exception for the old vimar certificate. because sslv3 (or some cipher) was considered unsecure.

iirc the only option was to upgrade the vimqr webserver firmware. current version is 2.11. keep in mind to create backups before you do this and maybe get the contacts from your installer ready.

stefben81 commented 7 months ago

Hi stefben81, did you try to download the CA certificate from the setup page of the Vimar By-me server?

Thank you for the answer. Is seem that the CA certificate is not present in this version of web server

stefben81 commented 7 months ago

i think at some point it was no longer possible to create an browser exception for the old vimar certificate. because sslv3 (or some cipher) was considered unsecure.

iirc the only option was to upgrade the vimqr webserver firmware. current version is 2.11. keep in mind to create backups before you do this and maybe get the contacts from your installer ready.

Correct, but i have contact Vimar and they says that i can't upgrade the firmware for my web server. I have the Hardware version 00 and they do not garantee that the update can be do. Maybe that web server freeze, for this reason I do not want upgrade the firmware

h4de5 commented 7 months ago

i see. in this case it seems you were just left with an unsupported device :(

no current browser and also no library (like pyopenssl for python in this case) will allow calls to certificates using sslv2 or sslv3. this has been deprecated and the support dropped I think around 2021-2022.

i am afraid there is nothing else to do