Probleme login with the integration

[Powdo]

After installing the integration and reboot my HA (full reboot) I can't connect with my credentials.

The problem sems to make by an SSL sertificat error :

Traceback (most recent call last):
File "/usr/local/lib/python3.12/site-packages/aiohttp/connector.py", line 1116, in _wrap_create_connection
return await self._loop.create_connection(*args, **kwargs, sock=sock)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.12/asyncio/base_events.py", line 1149, in create_connection
transport, protocol = await self._create_connection_transport(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.12/asyncio/base_events.py", line 1182, in _create_connection_transport
await waiter
File "/usr/local/lib/python3.12/asyncio/sslproto.py", line 578, in _on_handshake_complete
raise handshake_exc
File "/usr/local/lib/python3.12/asyncio/sslproto.py", line 560, in _do_handshake
self._sslobj.do_handshake()
File "/usr/local/lib/python3.12/ssl.py", line 917, in do_handshake
self._sslobj.do_handshake()
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1000)

I'm the only user aving this problem ? I haven't any proxy or network problème with SLL at all on my installation...

[driagi]

Me too

2025-02-07 09:58:22.639 ERROR (MainThread) [homeassistant.config_entries] Error setting up entry xxxxxxxx1973@gmail.com for hon
Traceback (most recent call last):
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1122, in _wrap_create_connection
return await self._loop.create_connection(*args, **kwargs, sock=sock)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/asyncio/base_events.py", line 1188, in create_connection
transport, protocol = await self._create_connection_transport(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
...<2 lines>...
ssl_shutdown_timeout=ssl_shutdown_timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/asyncio/base_events.py", line 1221, in _create_connection_transport
await waiter
File "/usr/local/lib/python3.13/asyncio/sslproto.py", line 581, in _on_handshake_complete
raise handshake_exc
File "/usr/local/lib/python3.13/asyncio/sslproto.py", line 563, in _do_handshake
self._sslobj.do_handshake()
~~~~~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/local/lib/python3.13/ssl.py", line 951, in do_handshake
self._sslobj.do_handshake()
~~~~~~~~~~~~~~~~~~~~~~~~~^^
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File "/usr/src/homeassistant/homeassistant/config_entries.py", line 640, in __async_setup_with_context
result = await component.async_setup_entry(hass, self)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/config/custom_components/hon/init.py", line 73, in async_setup_entry
await hon.async_authorize()
File "/config/custom_components/hon/hon.py", line 141, in async_authorize
if await self.async_get_frontdoor_url(0) == 1:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/config/custom_components/hon/hon.py", line 107, in async_get_frontdoor_url
async with self._session.post(
~~~~~~~~~~~~~~~~~~^
f"{AUTH_API}/s/sfsites/aura?r=3&other.LightningLoginCustom.login=1",
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
headers={"Content-Type": "application/x-www-form-urlencoded; charset=UTF-8"},
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
data=data,
^^^^^^^^^^
) as resp:
^
File "/usr/local/lib/python3.13/site-packages/aiohttp/client.py", line 1425, in aenter
self._resp: _RetType = await self._coro
^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/aiohttp/client.py", line 703, in _request
conn = await self._connector.connect(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
req, traces=traces, timeout=real_timeout
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 548, in connect
proto = await self._create_connection(req, traces, timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1056, in _create_connection
_, proto = await self._create_direct_connection(req, traces, timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1400, in _create_direct_connection
raise last_exc
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1369, in _create_direct_connection
transp, proto = await self._wrap_create_connection(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
...<7 lines>...
)
^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1124, in _wrap_create_connection
raise ClientConnectorCertificateError(req.connection_key, exc) from exc
aiohttp.client_exceptions.ClientConnectorCertificateError: Cannot connect to host account2.hon-smarthome.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018)')]

[Zwerver91]

Solution: #285 (comment)

[Powdo]

Une piste les gars ...
Je n'arrive pas pour l'instant...

#285 (comment)

[Guidomo1954]

It hasn't been working for me since yesterday either. After installing home assistant core 2025.2.0, but even after restoring to a previous version the add-on does not work

[driagi]

It hasn't been working for me since yesterday either. After installing home assistant core 2025.2.0, but even after restoring to a previous version the add-on does not work

I haven't updated and it doesn't work (2025.1.4)

[Powdo]

Have you try to install certificate3 with hass-additional-ca ??

[driagi]

Have you try to install certificate3 with hass-additional-ca ??

Yes. Now work.
I download the certificate with Chrome Browser directly in the crt extension.
Pay attention to the file name in the additional_ca folder and in configuration.yaml. They must obviously be the same.

[Guidomo1954]

My home assistant runs in "HAOS - Home Assistant Operating System", i installed hass-additional-ca but nothing changed

Traceback (most recent call last):
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1122, in _wrap_create_connection
return await self._loop.create_connection(*args, **kwargs, sock=sock)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/asyncio/base_events.py", line 1188, in create_connection
transport, protocol = await self._create_connection_transport(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
...<2 lines>...
ssl_shutdown_timeout=ssl_shutdown_timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/asyncio/base_events.py", line 1221, in _create_connection_transport
await waiter
File "/usr/local/lib/python3.13/asyncio/sslproto.py", line 581, in _on_handshake_complete
raise handshake_exc
File "/usr/local/lib/python3.13/asyncio/sslproto.py", line 563, in _do_handshake
self._sslobj.do_handshake()
~~~~~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/local/lib/python3.13/ssl.py", line 951, in do_handshake
self._sslobj.do_handshake()
~~~~~~~~~~~~~~~~~~~~~~~~~^^
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File "/usr/src/homeassistant/homeassistant/config_entries.py", line 637, in __async_setup_with_context

[Powdo]

Have you try to install certificate3 with hass-additional-ca ??

Yes. Now work. I download the certificate with Chrome Browser directly in the crt extension. Pay attention to the file name in the additional_ca folder and in configuration.yaml. They must obviously be the same.

Can you help me, it didn't work for me !

[Powdo]

OK pour moi c'est celui-ci qui doit être téléchargé !!!
Merci a tous ! Et bon courage...

[driagi]

With Chrome Browser ( directly in crt extension)

[sortegal17]

With Chrome Browser ( directly in crt extension)

After doing this workaround, I had to log in to https://account2.hon-smarthome.com/ and change my password. It seemed to be expired

[kubasaw]

I've fixed the issue with Haier's incorrect SSL certificate configuration in my fork: https://github.com/IoTLabs-pl/hOn. The solution is based on the approach used in hass-additional-ca.

If the RapidSSL certificates are missing, they are now automatically added and will be available for communication after an HA restart.

I’d really appreciate it if you could test it out, and even more if you have some time to help maintain and improve it! 🚀

[Powdo]

Hello thx for the fork. I try but it doesn't work for me after i add the fork with new repo of HACS.

[MirkoHomeassistant]

Hello,
how to update the certificate running home assistant core? Seems Additional CA not run on it...

[framirezl]

Hello, how to update the certificate running home assistant core? Seems Additional CA not run on it...

Remember to set REQUESTS_CA_BUNDLE environment variable in your docker configuration:
https://github.com/Athozs/hass-additional-ca?tab=readme-ov-file#6-set-requests_ca_bundle-environment-variable

[zekje]

can anyone can explain how to make it working again ? it's not working for me ( HAOS , haierHON 0.14.0 )

i have :
installed Additional_CA from HACS ( 0.2.4 )
added this to my configuration.yalm :

additional_ca:
    hon: account2-hon-smarthome-com.pem
    hon2: account2-hon-smarthome-com.crt

downloaded certificate from https://account2.hon-smarthome.com/ (exported from chrome ) and renamed /config/additional_ca/account2.hon-smarthome.crt

reboot .... and not working
what i have missed ?

[MirkoHomeassistant]

Hello, how to update the certificate running home assistant core? Seems Additional CA not run on it...

Remember to set REQUESTS_CA_BUNDLE environment variable in your docker configuration: https://github.com/Athozs/hass-additional-ca?tab=readme-ov-file#6-set-requests_ca_bundle-environment-variable

Thanks for the feedback, but i'm running HA core on Sonoff Ihost, i don't know how to modify the docker configuration...

[framirezl]

can anyone can explain how to make it working again ? it's not working for me ( HAOS , haierHON 0.14.0 )

i have : installed Additional_CA from HACS ( 0.2.4 ) added this to my configuration.yalm :

additional_ca:
    hon: account2-hon-smarthome-com.pem
    hon2: account2-hon-smarthome-com.crt

downloaded certificate from https://account2.hon-smarthome.com/ (exported from chrome ) and renamed /config/additional_ca/account2.hon-smarthome.crt

reboot .... and not working what i have missed ?

Are you running HA core (docker) ?

If yes, you must set REQUESTS_CA_BUNDLE environment variable in your docker configuration: https://github.com/Athozs/hass-additional-ca?tab=readme-ov-file#6-set-requests_ca_bundle-environment-variable

[zekje]

@framirezl i am running on HAOS directly

[StamenchoBog]

For me, the issue was fixed uploading the certificate to /additional_ca. Then I had to reset the password since for some reason I was still not able to login.

[pellimark]

Hey I followed all instruction here and additional CA fails to initialize, does anyone know why ?

�[32m2025-02-13 10:50:20.709 INFO (MainThread) [homeassistant.setup] Setting up additional_ca�[0m
�[33m2025-02-13 10:50:20.710 WARNING (MainThread) [custom_components.additional_ca] Folder additional_ca not found in configuration folder.�[0m
�[31m2025-02-13 10:50:20.710 ERROR (MainThread) [homeassistant.setup] Setup failed for custom integration 'additional_ca': Integration failed to initialize.�[0m
�[32m2025-02-13 10:50:20.710 INFO (MainThread) [homeassistant.setup] Setup of domain additional_ca took 0.00 seconds�[0m

[zekje]

it ok for me, after viewing this tuto step by step :)

#285 (comment)

[rortuno]

For me, the issue was fixed uploading the certificate to /additional_ca. Then I had to reset the password since for some reason I was still not able to login.

I've added the cert, but still with the issue until I had change the pass after read your message. Big thanks!!

[martincvrk]

Everything is ok after installing this - https://github.com/gvigroux/hon.

[pellimark]

Yes it worked after installing https://github.com/gvigroux/hon , can i remove additional_ca integration now ?