Hydrawise Integration: Default SSL Verification Warning in AIOHTTPTransport

The Hydrawise integration generates repeated warnings in the logs regarding SSL certificate verification when using AIOHTTPTransport. The warning is as follows:

/usr/local/lib/python3.13/site-packages/gql/transport/aiohttp.py:92: UserWarning: WARNING: By default, AIOHTTPTransport does not verify ssl certificates. This will be fixed in the next major version. You can set ssl=True to force the ssl certificate verification or ssl=False to disable this warning
warnings.warn(

This indicates that SSL certificate verification is disabled by default for the AIOHTTPTransport used by the Hydrawise integration. While this does not currently break functionality, it raises concerns about security and floods the logs with warnings.

Steps to Reproduce

  1. Set up the Hydrawise integration in Home Assistant.
  2. Monitor the logs under Settings > Logs or via home-assistant.log.
  3. Observe repeated warnings regarding SSL verification.

Expected Behavior

The integration should:

  1. Explicitly enable (ssl=True) or disable (ssl=False) SSL certificate verification without generating warnings.
  2. Provide a configuration option for users to control SSL verification behavior.

Actual Behavior

The integration defaults to no SSL verification, generating warnings during every request.

Proposed Solution

  1. Update the Hydrawise integration to explicitly set ssl=True or ssl=False for AIOHTTPTransport.
  2. Add a configuration option in Home Assistant for users to control SSL verification:
hydrawise:
  ssl_verify: true  # Default should be true

Environment Details

  • Home Assistant Version: 2025.2
  • Hydrawise Integration Version: Latest
  • Operating System: Home Assistant OS
  • Python Version: 3.13

Logs

/usr/local/lib/python3.13/site-packages/gql/transport/aiohttp.py:92: UserWarning: WARNING: By default, AIOHTTPTransport does not verify ssl certificates. This will be fixed in the next major version. You can set ssl=True to force the ssl certificate verification or ssl=False to disable this warning
warnings.warn(

Additional Context

This issue seems related to how AIOHTTPTransport handles SSL certificates by default. The default behavior of disabling certificate verification raises security concerns and should be addressed proactively.

This looks like a bug report?
Is that what you are trying to do or are you asking for a change to the existing feature list?

If it is a bug report, it needs to go here…
Reporting issues - Home Assistant.
GitHub · Where software is built.
@Dennit0h