Re: [weewx-user] Wunderground Upload fails with SSL error started last night

[Thomas Keffer]

You're the second person in recent days who has had WU certificate problems. 

Most likely they've been monkeying around with their API, as they tend to do, but it's also possible your machine has stale certificates. Try this:

sudo apt-get update

sudo apt-get install --reinstall ca-certificates

This will refresh your cache of certificates.

-tk

On Thu, Jan 30, 2020 at 11:53 AM J B <gq9...@gmail.com> wrote:

Hi,

I've had a PWS uploading to Wunderground with Weewx 3.9.2 on a Raspberry Pi for several months. Yesterday the station randomly stopped uploading to WU although my local database is still being updated. Checking the log shows the following:

restx: Wunderground-PWS: Failed upload attempt 1: <urlopen error [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)>

Elsewhere in the log I found the actual URL that is being queried by weewx and when I run that manually with curl I get the following:

user@host:~$ curl -L "https://weatherstation.wunderground.com/weatherstation/updateweatherstation.php?action=updateraw&<redacted>"

curl: (60) SSL certificate problem: unable to get local issuer certificate

More details here: https://curl.haxx.se/docs/sslcerts.html

curl performs SSL certificate verification by default, using a "bundle"

 of Certificate Authority (CA) public keys (CA certs). If the default

 bundle file isn't adequate, you can specify an alternate file

 using the --cacert option.

If this HTTPS server uses a certificate signed by a CA represented in

 the bundle, the certificate verification probably failed due to a

 problem with the certificate (it might be expired, or the name might

 not match the domain name in the URL).

If you'd like to turn off curl's verification of the certificate, use

 the -k (or --insecure) option.

I've tried this on 2 other systems (another RPi and a CentOS VM) with the same result. I'm not that familiar with SSL certificates but when I check the one for weatherstation.wunderground.com one in my browser it says "valid".

Is anyone else having this problem? How can I fix this issue?

Thanks in advance.

--
You received this message because you are subscribed to the Google Groups "weewx-user" group.
To unsubscribe from this group and stop receiving emails from it, send an email to weewx-user+...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/weewx-user/b444ed31-e887-45bf-9c06-ad995ea53494%40googlegroups.com.

[Jarom Hatch]

This happened to me as well.  Reinstalling the CA certs didn't help.  I can curl using -k (ignore cert) but weewx isn't playing nicely with the certs as they are right now.

To unsubscribe from this group and stop receiving emails from it, send an email to weewx...@googlegroups.com.

[Jarom Hatch]

Quick fix for me was to change the URLs in restx.py to http instead of https.  That got it back updating.

[RobbH]

That seems to have worked for me, too.

[Kevin Key]

Where is this file located? 

[Tim St. Clair]

/usr/share/weewx/weewx/restx.py

look for

pws_url = "https://weatherstation.wunderground.com/weatherstation/updateweatherstation.php"

probaby need to restart the service too ?? 

[Tim St. Clair]

Noted on the wunderground api page too - https://apicommunity.wunderground.com/weatherapi/topics/ssl-certificate-error-9lwea9u1krwgd - seems like they have stuffed something up their end. Cert updates via apt-get or sudo /usr/sbin/update-ca-certificates don't work to solve this.

To unsubscribe from this group and stop receiving emails from it, send an email to weewx...@googlegroups.com.