search

iternio / ovms-link

14 stars 6 forks source link

Broken SSL preventing updates #10

Closed ntompson closed 1 year ago

ntompson commented 1 year ago

Hi,

I've been using this great script to keep my ABRP live data up to date from OVMS. It's been working brilliantly until about 2 weeks ago, when it just stopped. Looking at the shell, I see some kind of SSL error whenever an update is attempted:

E (14103568) mongoose: mg_ssl_if_mbed_err   0x3f8ba090 SSL error: -9984
I (14103608) ovms-duk-util: [sendlivedata2abrp.js:252:OnRequestFail] error="SSL error"

I have the Baltimore cert in my trust list. Am I doing something wrong (nothing has changed at my end), or is there something needing fixing?

jmariuse commented 1 year ago

Needs a new CA cert for https://api.iternio.com/

GTS CA 1P5

from this page: https://pki.goog/repository/

ntompson commented 1 year ago

Thanks @jmariuse, but I’m not quite sure I understand. Is that something I should do, or something the devs need to do? Or…?

jmariuse commented 1 year ago

You need to do this. In the installation guide, there are instructions on how to add one speciffic CA certificate. You need to add this one in addition, using the same procedure.

jmariuse commented 1 year ago

Look under the heading "Install the Baltimore CyberTrust Root Certificate in OVMS" and do the same for the Google cert. GTS CA 1P5 from this page: https://pki.goog/repository/

ntompson commented 1 year ago

Awesome - thank you @jmariuse - that worked nicely. Interesting to note that I don't think the Baltimore certificate currently listed in the README is required. Looking at the OVMS source code, the Baltimore certificate is already installed by default. I've confirmed this by deleting the manually added Baltimore certificate and including the new Google CA certificate, and my connection to APRB works.

ntompson commented 1 year ago

Resolved in #11