Having trouble with HTTPS

Configuration
1

Hi

I have setup Lets Encrypt and can login to my HA from inside and outside my network as https://xxxxx.ddns.net:8123
But when i just do https://xxxxx.ddns.net it says > This Site can’t provide a secure connection.

I have forwarded my router from 443 - 8123 .

Sky router.png691×120 9.56 KB

I am trying to get it to work for Alexa on https://xxxxx.ddns.net

Any Help.

2

I’m certainly no expert on SKY routers, but a quick google search seems to indicate that the rule you have forwards everything from ports 443 to port 8123 to the same numbered corresponding port on your internal device. I don’t see anything (Again, I’m no expert) that allows you to forward to a different port.
If in fact that is the case, you should change your port forward rules to port 80 and 443 only (assuming you need 80 for letsEncrypt). Then change your home assistant instance to listen on port 443.

3

Thank you
Then you say change your home assistant instance to listen on port 443. Do you mean on the sky router or the Home Assistant config? And how?

4

Your forwarding info looks weird, but maybe it’s just me.

It looks like you’re forwarding from an address(range) to 0.0.0.0

it should be something like address:port forwarded to address:port.

5

To me these look like rules allowing the traffic but not actual forwarding rules. Some firewall separate the two.

6

I managed to get the url working without the :8123 at the end by adding this to my RPi.

sudo iptables -t nat -A PREROUTING -p tcp --dport 443 -j REDIRECT --to-port 8123

Thank you Dullage

Alexa is now working on intents but the flash briefings don’t want to allow me to save the URL-

https://xxxx.ddns.net/api/alexa/flash_briefings/whoishome?api_password=xxxxx

2 Likes
7

I was having the same problem with my Sky hub. I tried this and it now works as it should, thanks!

8

HI, Sorry to revive an old thread, but I am havig some issies with declaring the certificate location

I use lets encrypt in my Synology NAS, I then synchronise the folders to ensure that the certificat3es are up to date.

I store a synchronised copy of the certificates in my www folder in HA and have the following in my config file

  base_url: https://www.hostname:8123
  ssl_certificate: /local/certificates/cert.pem
  ssl_key: /local/certificates/privkey.pem

However I am seeing the following errors in my log pertaining to this setup

2018-02-09 11:28:20 ERROR (MainThread) [homeassistant.config] Invalid config for [http]: not a file for dictionary value @ data['http']['ssl_certificate']. Got '/local/certificates/cert.pem'
not a file for dictionary value @ data['http']['ssl_key']. Got '/local/certificates/privkey.pem'. (See /config/configuration.yaml, line 116). Please check the docs at https://home-assistant.io/components/http/
2018-02-09 11:28:20 ERROR (MainThread) [homeassistant.setup] Setup failed for http: Invalid config.

Can anyone help?

Thanks

9

Hi @uiguy,

I am not an expert but had similar issue. If you are using docker, just restart the docker/HA. If this is not your config folder, you may need to add the path to docker.

Thanks,
RT

10

Hi Sorry to drag this up but i am currently running Hassio and new to home assistant. however the issue my Sky Q Hub as i cant figure out the port forwarding.

can i ask is it possible and secondly is it possible for a complete novice like myself.

Thanks in advance

11

From the Sky.com website

12

Thanks i had read this info in the past but obviously misunderstood it, all running internally and externally.