TelldusLive not working due to mismatching TLS versions

[jonasbjurel]

The problem

Related PR: https://github.com/home-assistant/home-assistant.io/issues/30049 The TelldusLive integration does not connect to the telduslive API due to failed SSL negotiation. The Ciphers seems to match, but TeldusLive API have removed support for TLS 1.0 (Now only supports 1.1, 1.2 and 1.3). I have not been able to verify that this is the root of the problem, but it seems very likely. You can check the TLS support for the TeldusLive API at ssllabs.com. I see two ways to go, first one is to generally set default TLS version to 1.2 - I assume in HA Core. If that has too many side effects I guess the Telldus integration can request TLS 1.2 from the openSSL library. Apart from that the integration does not work, it also generate exessive load on the Telldus API gateway. Adding a .pcap network trace from the SSL negotiation telldus2.zip

What version of Home Assistant Core has the issue?

2023.11.3

What was the last working version of Home Assistant Core?

2023.11.2

What type of installation are you running?

Home Assistant OS

Integration causing the issue

TelldusLive

Link to integration documentation on our website

No response

Diagnostics information

telldus2.zip

Example YAML snippet

No response

Anything in the logs that might be useful for us?

2023-12-05 18:49:17.430 WARNING (SyncWorker_3) [tellduslive] Failed request: HTTPSConnectionPool(host='pa-api.telldus.com', port=443): Max retries exceeded with url: /json/clients/list (Caused by SSLError(SSLError(1, '[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1006)')))

Additional information

No response

[ashpool]

I'm getting:

2023-12-05 19:46:17.318 WARNING (SyncWorker_3) [tellduslive] Failed request: HTTPSConnectionPool(host='pa-api.telldus.com', port=443): Max retries exceeded with url: /json/sensors/list?includeValues=1&includeScale=1&includeIgnored=0 (Caused by SSLError(SSLError(1, '[SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake failure (_ssl.c:1006)')))

On 2023.11.3

[sturlahallas]

Having the same issue. Eagerly awaiting a solution

[home-assistant[bot]]

Hey there @fredrike, mind taking a look at this issue as it has been labeled with an integration (tellduslive) you are listed as a code owner for? Thanks!

Code owner commands

Code owners of `tellduslive` can trigger bot actions by commenting: - `@home-assistant close` Closes the issue. - `@home-assistant rename Awesome new title` Renames the issue. - `@home-assistant reopen` Reopen the issue. - `@home-assistant unassign tellduslive` Removes the current integration label and assignees on the issue, add the integration domain after the command. - `@home-assistant add-label needs-more-information` Add a label (needs-more-information, problem in dependency, problem in custom component) to the issue. - `@home-assistant remove-label needs-more-information` Remove a label (needs-more-information, problem in dependency, problem in custom component) on the issue.

_{^{(message by CodeOwnersMention)}}

---

tellduslive documentation tellduslive source _{^{(message by IssueLinks)}}

[stewreds]

Same issue for me

[fredrike]

Telldus live api is down according to https://telldus.com/driftinformation/

There is nothing wrong with the integration.

[fredrike]

@home-assistant close

[toresetre]

Telldus live api is up again according to https://telldus.com/driftinformation/. The issue is still present.

[narsuman]

Yes! Same problem has been existing several days.

I can only control my NEXA powerline switches only by using Telldus mobile application. I was able to use HA + Telldus Live integration quite ok almost one year :)

About latest scenario:

1. I just updated HA and current setup is:

Core 2023.12.1 Supervisor 2023.11.6 Operating System Frontend 20231208.2

2. Telldus box was out of power 10 minutes.

3. I tried to reinstall again Telldus Live integration , but I still get same message which has been already reported.

_The path '/tellduslive/authorize' was not found.

Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/cherrypy/_cprequest.py", line 670, in respond File "/usr/lib/python2.7/site-packages/cherrypy/lib/encoding.py", line 217, in call File "/usr/lib/python2.7/site-packages/cherrypy/cpdispatch.py", line 61, in call File "/usr/lib/python2.7/site-packages/web/base/Server.py", line 230, in call File "/usr/lib/python2.7/site-packages/web/base/Server.py", line 202, in handle NotFound: (404, "The path '/tellduslive/authorize' was not found.")

I had working installation couple weeks ago :) Now I cannot use it at all? Is there someone who can use still integration?

BR, NarsuMan

[joka4ever]

Telldus live api is up again according to https://telldus.com/driftinformation/. The issue is still present.

I do not think it is up yet! The support info page still say: Swedish: _"pa-api.telldus.com kommer att förbli nere för närvarande medan vi inför ytterligare funktioner för att begränsa frekvensen av inkommande trafik som orsakas av vissa användare. Vi kommer så fort vi kan att öppna det igen när implementering och tester har gjorts." Translated to English: "pa-api.telldus.com will remain down for now while we implement additional features to limit the frequency of incoming traffic caused by certain users. We will reopen it as soon as possible once implementation and testing have been done."

[da9l]

I'm running

Core 2023.12.3
Supervisor 2023.11.6
Operating System 11.2
Frontend 20231208.2

With a Tellstick ZNet Lite v2, in local mode (configured host IP address in configuration.yml)

I'm still getting the same error message. N.B. It comes from the tellstick. (per 2023-12-15T19:24:00Z)

404 Not Found

The path '/tellduslive/authorize' was not found.

Traceback (most recent call last):
  File "/usr/lib/python2.7/site-packages/cherrypy/_cprequest.py", line 670, in respond
  File "/usr/lib/python2.7/site-packages/cherrypy/lib/encoding.py", line 217, in __call__
  File "/usr/lib/python2.7/site-packages/cherrypy/_cpdispatch.py", line 61, in __call__
  File "/usr/lib/python2.7/site-packages/web/base/Server.py", line 230, in __call__
  File "/usr/lib/python2.7/site-packages/web/base/Server.py", line 202, in handle
NotFound: (404, "The path '/tellduslive/authorize' was not found.")

Cloud connection works but not local.

[Blade3077]

Telldus API is now working for me! I removed Telldus from HA a week ago and I have tried re-adding it every day, just now it succeeded! Everything looks ok.