Bizarre UI Access Issue

sabbath · March 26, 2019, 5:23pm

Hi, i am having the same issue.
How did you update your certificate? it does not seem to be the one lets encrypt update? or maybe i need to have lets encrypt addon installed aswell as duckdns? i found that a little hard to understand since lets encrypt was added to duckdns addon.
I have uninstalled duckdns and made sure lets encrypt do a update, but still same issue.

I can access if i dont use duckdns adress.

Thanks

driveawedge · March 26, 2019, 5:26pm

I had lets encrypt already set up. I just followed the let’s encrypt directions and copied the new certificate to the location in my configuration file

sabbath · March 26, 2019, 5:36pm

Do you mean this?

http:
  base_url: !secret http_url
  ssl_certificate: /ssl/fullchain.pem
  ssl_key: /ssl/privkey.pem

I have this already and still have the same error.

sabbath · March 27, 2019, 2:20pm

This is the error i get:

Error doing job: SSL error errno:1 reason: SSLV3_ALERT_CERTIFICATE_UNKNOWN

15:11 /usr/local/lib/python3.7/site-packages/homeassistant/core.py (ERROR) - message first occured at 15:06 and shows up 23 times

Error doing job: SSL handshake failed

15:11 /usr/local/lib/python3.7/site-packages/homeassistant/core.py (ERROR) - message first occured at 15:06 and shows up 24 times

And when i look into duckdns addon it says my certificate ends in june so i dont know how to get this to work. And as i wrote earlier i have even reinstalled duckdns.
Internal network works, but as soon as i use duckdns-adress i get error, owntracks, reach frontend, tasker and so on wont work. Same with long lived token speaking to duckdns will not work.
Perhaps there is someone that can give me a hint on what to do.

thanks

rickje · March 29, 2019, 1:15pm

I’m having the same issue with 90.1 and 90.2.
It isn’t there all the time, but for some periods.

http:
base_url: https://my_url.duckdns.org:8123
ssl_certificate: /ssl/fullchain.pem
ssl_key: /ssl/privkey.pem

sabbath · March 29, 2019, 1:21pm

Hi,
Atleast i’m not alone with this error
For me it was static so i have sadly reverted to http only.

rickje · March 29, 2019, 5:25pm

2019-03-29 16:32:13 ERROR (MainThread) [homeassistant.core] Error doing job: SSL handshake failed
Traceback (most recent call last):
File “uvloop/handles/stream.pyx”, line 609, in uvloop.loop.UVStream._on_eof
File “uvloop/sslproto.pyx”, line 171, in uvloop.loop._SSLPipe.feed_ssldata
File “/usr/local/lib/python3.7/ssl.py”, line 763, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: VERSION_TOO_LOW] version too low (_ssl.c:1056)
2019-03-29 16:32:13 ERROR (MainThread) [homeassistant.core] Error doing job: SSL error errno:1 reason: VERSION_TOO_LOW
Traceback (most recent call last):
File “uvloop/sslproto.pyx”, line 504, in uvloop.loop.SSLProtocol.data_received
File “uvloop/sslproto.pyx”, line 204, in uvloop.loop._SSLPipe.feed_ssldata
File “uvloop/sslproto.pyx”, line 171, in uvloop.loop._SSLPipe.feed_ssldata
File “/usr/local/lib/python3.7/ssl.py”, line 763, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: VERSION_TOO_LOW] version too low (_ssl.c:1056)
2019-03-29 16:32:35 ERROR (MainThread) [homeassistant.core] Error doing job: SSL handshake failed
Traceback (most recent call last):
File “uvloop/handles/stream.pyx”, line 609, in uvloop.loop.UVStream._on_eof
File “uvloop/sslproto.pyx”, line 171, in uvloop.loop._SSLPipe.feed_ssldata
File “/usr/local/lib/python3.7/ssl.py”, line 763, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:1056)
2019-03-29 16:32:35 ERROR (MainThread) [homeassistant.core] Error doing job: SSL error errno:1 reason: NO_SHARED_CIPHER
Traceback (most recent call last):
File “uvloop/sslproto.pyx”, line 504, in uvloop.loop.SSLProtocol.data_received
File “uvloop/sslproto.pyx”, line 204, in uvloop.loop._SSLPipe.feed_ssldata
File “uvloop/sslproto.pyx”, line 171, in uvloop.loop._SSLPipe.feed_ssldata
File “/usr/local/lib/python3.7/ssl.py”, line 763, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: NO_SHARED_CIPHER] no shared cipher (_ssl.c:1056)

rickje · April 1, 2019, 4:36pm

I’m calling it a issue.
Still getting errors in my log.
The configuration isn’t that diffucult. Hopefully i’ve done nothing wrong

sabbath · April 1, 2019, 4:59pm

I agree, hope they find something

Akovano · April 1, 2019, 9:13pm

I have the same issue, upgraded to 90.2 and lost access to the UI.
I’m using a let’s encrypt wildcard cert

I was able to SSH in and this is what’s in the logs.
I don’t know why it’s looking for sslv3? It’s been deprecated years ago.

2019-04-01 16:56:27 ERROR (MainThread) [homeassistant.core] Error doing job: SSL handshake failed
Traceback (most recent call last):
  File "uvloop/handles/stream.pyx", line 609, in uvloop.loop.UVStream._on_eof
  File "uvloop/sslproto.pyx", line 171, in uvloop.loop._SSLPipe.feed_ssldata
  File "/usr/local/lib/python3.7/ssl.py", line 763, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1056)
2019-04-01 16:56:27 ERROR (MainThread) [homeassistant.core] Error doing job: SSL error errno:1 reason: SSLV3_ALERT_CERTIFICATE_UNKNOWN
Traceback (most recent call last):
  File "uvloop/sslproto.pyx", line 504, in uvloop.loop.SSLProtocol.data_received
  File "uvloop/sslproto.pyx", line 204, in uvloop.loop._SSLPipe.feed_ssldata
  File "uvloop/sslproto.pyx", line 171, in uvloop.loop._SSLPipe.feed_ssldata
  File "/usr/local/lib/python3.7/ssl.py", line 763, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1056)
2019-04-01 16:56:29 ERROR (MainThread) [homeassistant.core] Error doing job: SSL handshake failed
Traceback (most recent call last):
  File "uvloop/handles/stream.pyx", line 609, in uvloop.loop.UVStream._on_eof
  File "uvloop/sslproto.pyx", line 171, in uvloop.loop._SSLPipe.feed_ssldata
  File "/usr/local/lib/python3.7/ssl.py", line 763, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1056)
2019-04-01 16:56:29 ERROR (MainThread) [homeassistant.core] Error doing job: SSL error errno:1 reason: SSLV3_ALERT_CERTIFICATE_UNKNOWN
Traceback (most recent call last):
  File "uvloop/sslproto.pyx", line 504, in uvloop.loop.SSLProtocol.data_received
  File "uvloop/sslproto.pyx", line 204, in uvloop.loop._SSLPipe.feed_ssldata
  File "uvloop/sslproto.pyx", line 171, in uvloop.loop._SSLPipe.feed_ssldata
  File "/usr/local/lib/python3.7/ssl.py", line 763, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1056)

rickje · April 3, 2019, 8:24am

Please do let the people also know in Github with your logfiles and configuration!
See https://github.com/home-assistant/home-assistant/issues/22625

rosie · April 12, 2019, 8:11am

Upgraded to 0.91.3 the other day, and this morning my https://domain.duckdns.org:8123 is dead. I can access via local IP if I ignore browser cert errors.

Trying to access the frontend on an external connection via duckdns, I get the following error instantly in my logs. Unable to connect to homeassistant in the browser.

Error doing job: SSL handshake failed
Traceback (most recent call last):
  File "uvloop/sslproto.pyx", line 500, in uvloop.loop.SSLProtocol._on_handshake_complete
  File "uvloop/sslproto.pyx", line 484, in uvloop.loop.SSLProtocol._do_handshake
  File "/usr/local/lib/python3.7/ssl.py", line 763, in do_handshake
    self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1056)

The DuckDNS add on says my cert is still in date.

Valid till Jun 22 11:38:14 2019 GMT Certificate will not expire
(Longer than 30 days). Skipping renew!

My hadashboard seems to still be working and my automations are firing as expected. I’m stumped.

igorovich664 · April 15, 2019, 12:17pm

I’ve found the solution:

Turn off DuckDns Add-on
Use DuckDns component
Use Let’s Encrypt add-on and generate new fullchain.pem and privkey.pem files.

Restart, done!

fixer · April 15, 2019, 5:56pm

Can you write exact steps you made? Based on your points, it’s still not working for me. Thanks

maurizio53 · April 15, 2019, 6:06pm

I have the same issue, but not on HASSIO… how to fix it when running hassbian?

noahj96 · April 16, 2019, 4:03pm

Hey Rosie,

I had the same issue. What worked for me (in hass.io) was to remove the duckdns component in the configuration.yaml and simply keep the settings for the duckdns add-on in 0.91.3.

sabbath · April 16, 2019, 5:31pm

Epic @igorovich664 worked perfectly!
Thnx so much for this, have been running http for weeks now

B1G · May 3, 2019, 7:12pm

I have the same issue with hass.io 0.92.2 and 0.92.1 before. Let’s encrypt certificate is valid and I use duckdns but configured directly on my fritbox.

Error doing job: SSL handshake failed
Traceback (most recent call last):
File “uvloop/sslproto.pyx”, line 500, in uvloop.loop.SSLProtocol._on_handshake_complete
File “uvloop/sslproto.pyx”, line 484, in uvloop.loop.SSLProtocol._do_handshake
File “/usr/local/lib/python3.7/ssl.py”, line 763, in do_handshake
self._sslobj.do_handshake()
ssl.SSLError: [SSL: SSLV3_ALERT_CERTIFICATE_UNKNOWN] sslv3 alert certificate unknown (_ssl.c:1056)

How could I fix it?

antonholmstedt · May 17, 2019, 4:03pm

I’ve got the exact same problem! Have you found any solution?

B1G · May 17, 2019, 5:21pm

Unfortunatly not