home-assistant / core

:house_with_garden: Open source home automation that puts local control and privacy first.
https://www.home-assistant.io
Apache License 2.0
74.2k stars 31.16k forks source link

Egardia integration fails to load after firmware update egardia gateway #112636

Closed chokays closed 2 months ago

chokays commented 9 months ago

The problem

Updated the firmware of my Egardia gate-03 gateway this morning. Also installed HA core 2023.4.0 and after restart of HA the integration failed to load.

Logger: homeassistant.setup Source: setup.py:266 First occurred: 2:11:40 PM (1 occurrences) Last logged: 2:11:40 PM

Setup failed for 'egardia': Integration failed to initialize.

What version of Home Assistant Core has the issue?

2023.4.0

What was the last working version of Home Assistant Core?

2023.3.x

What type of installation are you running?

Home Assistant OS

Integration causing the issue

Egardia

Link to integration documentation on our website

https://www.home-assistant.io/integrations/egardia/

Diagnostics information

No response

Example YAML snippet

No response

Anything in the logs that might be useful for us?

No response

Additional information

No response

home-assistant[bot] commented 9 months ago

Hey there @jeroenterheerdt, mind taking a look at this issue as it has been labeled with an integration (egardia) you are listed as a code owner for? Thanks!

Code owner commands Code owners of `egardia` can trigger bot actions by commenting: - `@home-assistant close` Closes the issue. - `@home-assistant rename Awesome new title` Renames the issue. - `@home-assistant reopen` Reopen the issue. - `@home-assistant unassign egardia` Removes the current integration label and assignees on the issue, add the integration domain after the command. - `@home-assistant add-label needs-more-information` Add a label (needs-more-information, problem in dependency, problem in custom component) to the issue. - `@home-assistant remove-label needs-more-information` Remove a label (needs-more-information, problem in dependency, problem in custom component) on the issue.

(message by CodeOwnersMention)


egardia documentation egardia source (message by IssueLinks)

chokays commented 9 months ago

Looks like the http server of the gateway is no longer retuning any data:

curl ip-gateway curl: (52) Empty reply from server

port scan still shows port 80 is open

Jamstam commented 9 months ago

I'm facing that same problem.

chokays commented 9 months ago

I sent an e-mail to klantenservice@woonveilig.nl to let them know that local webserver running on the gateway can't be used anymore after the most recent firmware update.

hknobbe commented 9 months ago

I just called with Woonveilig/Egardia..

Bad news: This is not a bug.

Because of potential exploits (they have happened in the past according to their statement), they locked down the panel. This means there will be no fix from their side. They will not implement a switch/feature to accept the risks and open the panel anyway.

I know from his github that @jeroenterheerdt stopped using Woonveilig so I guess there won't be a fix from him, however I noticed that the Homey integration with Woonveilig still works. However, it looks like that's owned by Woonveilig themself, so I don't think thats a way to approach it.

Also, the're no official ways to downgrade to the previous version.

chokays commented 9 months ago

I was afraid for something like this. Really annoying, a lot of my automations get triggered by this integration.

IGNWoudenberg commented 8 months ago

Facing the same update. Currently in contact with Woonveilig about this. We should all do this or face the consequence of missing an important part of our functionality. Gateway firmware: Current: 35H:0.0.2.18.1 New: 35H:0.0.2.19.10

I blocked Internet access for the gateway for now and perhaps accept that I cancel my woonveilig subscription and let HA process all the notifications if they won’t come up with a solution.

Update: no respons from Woonveilig and to see the updates below I'm going to cancel my Woonveilig subscription and be lucky that I did not updates the firmware on my gateway.

lancer73 commented 8 months ago

Just talked to Egardia support. Totally unwilling to help. I think we can scrap our alarm systems.

thefoxmangit commented 8 months ago

I emailed support and got the same response. Short summary: the internal access was unsupported and they say they had to remove it due to certification requirements. When I asked them if they have announced this change they wrote they did not believe they need to announce the removal of something that is unsupported. They told me downgrading firmware is not possible. When asked if they will open up an API they replied they have an API and that it works with Olisto and Homey. This would make their system smart.

Personally my automations only use the system status (arm alarm->lights off) so i'm considering to start scraping the woonveilig website to get the alarm status, or maybe get something working through Olisto (which does not look very promissing to be honest).

Reminds me again that in the world of IoT you don't really own your products and they can be working perfectly fine one day and handicapped the next day and there is not much you can do about it.

I'm in any event not making any more investments into the Woonveilig system because as a company do are not trustworthy.

hknobbe commented 8 months ago

I got the same vibe from them..

I also, am moving away from Woonveilig.

My planned solution is:

This does however mean new investments, this is not ideal, but for me it's worth the "small" investment to get away from a closed system like woonveilig.

As an alternative (especially when you've invested a lot more money in sensors from Woonveilig) you can use RFlink (https://www.rflink.nl/) with homeassistant and Alarmo. For this you'll need an arduinoboard with RF 868Mhz receiver:

Hope this helps you guys!

If you have any questions, I'm always willing to help where I can

Just as a reminder for you all; don't forget to stop any running subscribtions with Woonveilig :).

lancer73 commented 8 months ago

Just ordered aqara Zigbee doorsensors (The E1's, the work flawlessly on the internal doors) and a couple of extra motion detectors (have a lot already to control lights). I will be using the Sonos speakers as siren and the Hue outdoor light as strobe. I will leave fire and leak detection to Woonveilig. This was not properly integrated anyway.

chokays commented 8 months ago

You could use Olisto to send an email with the status when the status of the alarm changes. Use the IMAP integration from HA to parse the email. This works and supports all the alarm states, including smoke, water and the triggering of the alarm.

I've been using this setup for a few days now and works great. It's not ideal, but it works with only a few seconds longer delay than the HA integration.

lancer73 commented 8 months ago

Just got an email from Egardia/Woonveilig, the seem to be willing to help out on an incidental case. For new customers this is not going to be a solution, but for long time customers (with a proven track record of not submitting support calls, due to non-supported actions) they might be willing to help out.

marcelbakker7 commented 8 months ago

Just got an email from Egardia/Woonveilig, the seem to be willing to help out on an incidental case. For new customers this is not going to be a solution, but for long time customers (with a proven track record of not submitting support calls, due to non-supported actions) they might be willing to help out.

In what way are they helping out? I’ve reached out to them as well but only got the reply that local access is now blocked and they refer to using Olisto.

lancer73 commented 8 months ago

Just got an email from Egardia/Woonveilig, the seem to be willing to help out on an incidental case. For new customers this is not going to be a solution, but for long time customers (with a proven track record of not submitting support calls, due to non-supported actions) they might be willing to help out.

In what way are they helping out? I’ve reached out to them as well but only got the reply that local access is now blocked and they refer to using Olisto.

A couple of years ago I did some bughunting for them using the direct access to the system. So I used that when they argued that they never advertised direct access and so didn't have to inform me when taking it away. From this situation I told them that they implicitly supported the direct access. Furthermore they didn't build a confirmation for upgrading into the app.

As I just invested additional money into the system I told them I was looking into a legal follow-on.

They refused discussion, so I hang up the phone. Next day they opened my system for me.

Maybe we can have a discussion with them about the home assistant integration. There are few alarm systems here in the Netherlands that integrate that well. They are mainly concerned about interference in system operations and about certification. Maybe we can come to an agreement for the plugin. It creates an additional selling point for them.

But we can't open this discussion without the makers of the integration.

aphotrax commented 8 months ago

That explains why I woke up this morning and all lights where still on even though I scanned the NFC tag like usual. I updated the firmware yesterday. They could have at least put a warning about it.

Going to make a call today to see what they can do, and if it's nothing I think I might just be in the 4 years warranty so I could probably send everything back since it's broken now.

So even choosing for something with local access in the beginning just stops working after years.

lancer73 commented 8 months ago

Maybe we should point Egardia towards https://partner.home-assistant.io . The local api on the box can be used for the integration and the user accessible interface could be turned off. That way they remain compliant with their certifcation.

vlijmen commented 8 months ago

Just called them, and indeed it was no news for them they had already more complaints. The info has been shared with developers, but we don't have to except any solution soon (months or a year). API access will not be shared and local access won't come back. Also a rollback is not possible, so I can stop my subscription since I will have to find an alternative.

Will check also the possiblity to get a refund since the feature was the reason I bought it, and now they removed it without any heads-up what made it useless for my case.

wmeerendonk commented 8 months ago

I talked to the Dutch helpdesk this morning. They have an internal discussion today about the possibility of supporting Home Assistant. Fingers crossed. For now it’s possible to use webhooks to and from olisto to get some functionality back. Unfortunately, that’s cloudbased and via an additional 3rd party

fkuiper commented 8 months ago

Same problem over here. Send an e-mail to customer support but haven't received an answer yet (hopefully they are too busy fixing this issue ;)). I think in the meantime it would be fair to remove egardia from the list of integrations since it doesn't work and will most likely not be working anytime soon. This will prevent others from buying this system in the assumption it will work with home assistant...

I for one am looking at alternatives already. Preferably systems without cloud connectivity and/or subscriptions. Any suggestions?

update: of course I've downgraded my subscription to free to give them a clear signal. I hope others will follow...

aphotrax commented 8 months ago

You could use Olisto to send an email with the status when the status of the alarm changes. Use the IMAP integration from HA to parse the email. This works and supports all the alarm states, including smoke, water and the triggering of the alarm.

I've been using this setup for a few days now and works great. It's not ideal, but it works with only a few seconds longer delay than the HA integration.

Since we don't really have a choice then passing by Olisto for the moment I did the same. Really not happy with an external cloud provider for this but let's hope they will support HA somewhere in the near future.

Though I didn't go by the IMAP way but used the webhooks en connectors, seems more robust then putting a mail server in between. With a few automations and a helper I kind of have the same setup as before.

The only thing missing seems to be able to deactivate the alarm.

chokays commented 8 months ago

You could use Olisto to send an email with the status when the status of the alarm changes. Use the IMAP integration from HA to parse the email. This works and supports all the alarm states, including smoke, water and the triggering of the alarm. I've been using this setup for a few days now and works great. It's not ideal, but it works with only a few seconds longer delay than the HA integration.

Since we don't really have a choice then passing by Olisto for the moment I did the same. Really not happy with an external cloud provider for this but let's hope they will support HA somewhere in the near future.

Though I didn't go by the IMAP way but used the webhooks en connectors, seems more robust then putting a mail server in between. With a few automations and a helper I kind of have the same setup as before.

The only thing missing seems to be able to deactivate the alarm.

I'm really interested in how you used webhooks and connectors. Would it be possible to share how you used then?

vlijmen commented 8 months ago

To set the alarm (away/home:

  1. In the Olisto App, go to Channels, choose Olisto Connect
  2. Create two new Olisto connector, give them identifiable names, url will be send by email
  3. Create a new trigger, choose Olisto Connect, Connector is activated and one of the created connectors.
  4. Choose Egardia under "Then" and the desired action
  5. Repeat this for the other url/status
  6. Edit your configuration.yaml in HA and add this config (adapt the urls to your urls): #Egardia / Olisto config rest_command: egardia_arm_away: url: "https://connect.olisto.com/c/XXXXXXXXX" egardia_arm_home: url: "https://connect.olisto.com/c/XXXXXXXXX"
  7. You can now trigger this by using a Service action called "RESTful Command: egardia_arm_XX"

To get the status from the alarm in HA

  1. Create an automation with trigger type webhook in HA, an url will be created
  2. Adapt the settings and uncheck "local only" (Optional: I also choose to use a PUT request), copy the url created. 2b. In case you use Nabucasa cloud, make sure that in the settings -> HA Cloud, that you enable this webhook, and different url will be created that you should use.
  3. Create a new trigger in Olisto, Egardia, Alarm status (choose one).
  4. For the then option, choose Olisto Connect -> Sent a HTTP request, (choose POST if you did), enter the URL from HA.
  5. Repeat these steps for the three alarm statusses (and alarm going off if you want to).

Additonal To have a easier setup I decided to create an input helper to track the status. This way I also can use the current status to see what it is. 1 automation updates the status with the 4 webhooks in HA. And I use the status change of the helper to trigger the real automations that I want to be done based on the alarm. I'm pretty impressed about the speed, I expected a delay, but it's not really a big difference compared to local integration. Though I would have prefered that of course. What is missing is de-activating the alarm and seperate status of each device. I also used them to know if doors/windows are open and that is not possible now.

ecbos1967 commented 8 months ago

I have also contacted the customer support and this was their answer (in Dutch):

Voor Slimme alarmsystemen is digitale veiligheid en dataprivacy een belangrijke randvoorwaarde om gebruikers te beschermen. WoonVeilig is gecertificeerd door het onafhankelijke onderzoeksinstituut voor IT-beveiliging uit Duitsland AV-Test. Het AV-Test Institute toetst of apparaten, diensten en apps voldoen aan strenge eisen rondom communicatie, gegevensbescherming en applicatiebeveiliging. Alleen als daaraan wordt voldaan, krijgt een product de AV-Test certificering en het keurmerk "SECURE".

Een van de gevolgen hiervan is dat het panel (directe inlog) niet meer toegangkelijk is.

Op dit moment zijn we ons aan het beraden om inhoudelijk op uw bericht in te gaan, we zullen dit zo spoedig als mogelijk doen.

Tot dat moment willen we graag om uw geduld vragen.

fkuiper commented 8 months ago

I have also contacted the customer support and this was their answer (in Dutch):

Voor Slimme alarmsystemen is digitale veiligheid en dataprivacy een belangrijke randvoorwaarde om gebruikers te beschermen. WoonVeilig is gecertificeerd door het onafhankelijke onderzoeksinstituut voor IT-beveiliging uit Duitsland AV-Test. Het AV-Test Institute toetst of apparaten, diensten en apps voldoen aan strenge eisen rondom communicatie, gegevensbescherming en applicatiebeveiliging. Alleen als daaraan wordt voldaan, krijgt een product de AV-Test certificering en het keurmerk "SECURE".

Een van de gevolgen hiervan is dat het panel (directe inlog) niet meer toegangkelijk is.

Op dit moment zijn we ons aan het beraden om inhoudelijk op uw bericht in te gaan, we zullen dit zo spoedig als mogelijk doen.

Tot dat moment willen we graag om uw geduld vragen.

That's the exact same answer I got and I think they send to everyone. I'm not expecting any significant developments soon so I've canceled my subscription (and hope everyone else will do as well) and am actively look for an alternative or maybe build one using Alarmo once I get my hands on a good and available keypad :)

ecbos1967 commented 8 months ago

Let me know if you find a good alternative have been looking but not really found something as simple as this solution (as long as you have local access)

fkuiper commented 8 months ago

Let me know if you find a good alternative have been looking but not really found something as simple as this solution (as long as you have local access)

Agreed... but without local access or other direct integration this system is pretty much useless as security system in a smart home (there is nothing smart about this system).

Alarmo is looking good a pretty easy to setup but I have not found a affordable, working and available keypad yet.

fkuiper commented 8 months ago

This afternoon I received an e-mail from customer support that they can re-enable local access but you'll have to agree with two conditions: one: they will not guarantee system security and two: they can't guarantee full support form woonveilig/egardia (exact words in Dutch below). I agreed with these conditions and within the hour access was enabled and everything works as before...

--- Conditions in the email I received (Dutch) ---

We hebben uw aanvraag ontvangen om de huiscentrale vrij te geven voor lokaal gebruik. We hebben besloten om dit te honoreren onder de volgende 2 voorwaarden:

  1. We kunnen geen systeemveiligheid meer garanderen.
  2. We kunnen geen werkingsgarantie en volledige ondersteuning vanuit WoonVeilig/Egardia meer geven.
ecbos1967 commented 8 months ago

Same for me, everything is working again! Glad they came up with this solution

Jamstam commented 7 months ago

Same for me. Everything is working as used before.

Op ma 8 apr 2024 16:30 schreef ecbos1967 @.***>:

Same for me, everything is working again! Glad they came up with this solution

— Reply to this email directly, view it on GitHub https://github.com/home-assistant/core/issues/112636#issuecomment-2042907821, or unsubscribe https://github.com/notifications/unsubscribe-auth/AXZL7FJ4U72W3VQOQ3JMJ2TY4KSXXAVCNFSM6AAAAABELPFTA6VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDANBSHEYDOOBSGE . You are receiving this because you commented.Message ID: @.***>

ajongen commented 6 months ago

Same for me, everything is working again! Glad they came up with this solution

Hi all, I have a Woonveilig system for which I never have had a paid subscription. I use this python plugin in Domoticz:

https://github.com/DanielTromp/Domoticz-eGardia-Woonveilig/blob/master/plugin.py

which is essentially the same as is used for Home Assistant as far as I can see. I have not upgraded the firmware myself and will probably not reading all your comments. Few questions:

  1. Is the firmware pushed activelly by woonveilig or will it only be updated if I initiate myself?
  2. Is the solution that woonveilig offers also possible if you have never had a subscription of any kind?

Thanks for your help!

niekniek89 commented 6 months ago

Update doesn't seem to be pushed. This morning I stupidly clicked on "firmware update huiscentrale" in the IOS app.

Now my HA in combination with egardia/woonveilig no longer works. So I will also send them an email. hopefully they can fix it soon.

zambrovski commented 5 months ago

Hi folks,

had the same issue. Locked after update. I wrote a short E-Mail to German Egardia support, with the same statement and they provided my an offer to re-open it again on the next business day, if I confirm the statements 1. and 2. (Same as above: limited system securty and no warranty for operations).

The statements in German:

I should answer the mail if I want to do so. I did and they enabled the local access immediately.

So everything works again after a short mail to support.

Hope this helps.

issue-triage-workflows[bot] commented 2 months ago

There hasn't been any activity on this issue recently. Due to the high number of incoming GitHub notifications, we have to clean some of the old issues, as many of them have already been resolved with the latest updates. Please make sure to update to the latest Home Assistant version and check if that solves the issue. Let us know if that works for you by adding a comment 👍 This issue has now been marked as stale and will be closed if no further activity occurs. Thank you for your contributions.