[Plugin]DarkSky Weather

reneboer · March 9, 2020, 5:05pm

Hi Rafale,

According to the LuaSec documentation when passing just an URL the protocol is any. When I explicitly try any with the DarkSky API it rejects the call. I have to set the tlsv1_2 value. Does Vera default something else?

Cheers Rene

rafale77 · March 9, 2020, 5:12pm

I know that for openluup, I actually made the request call retry with different tls versions in the header if the return is a security error and I started from the higher version. It was a patch. I don’t know what is going on in the vera but I suspect that you are correct that it fills the header with a default version if it is left blank from everything I am seeing.

rigpapa · March 9, 2020, 5:48pm

Can you try using all and no_sslv3 in the options array?

Also you may try turning peer certificate validation off, in case they are self signing or have an outdated CA chain.

TiagoRolo · March 9, 2020, 10:58pm

My darksky plugin stopped working 5 days ago. I have done
RESET SECRET KEY, and remains the same. someone can help me?

Tim88 · March 9, 2020, 11:48pm

See @reneboer’s response that was posted earlier:
https://community.getvera.com/t/plugin-darksky-weather/207959/165?u=tim88

phillid2 · March 9, 2020, 11:56pm

I just updated to v1.5 and temperature is now updating. Thanks, Rene.

For those that do not want to wait until Mios approves the update, AltUI gets the latest from GitHub.

reneboer · March 10, 2020, 9:18am

Hi,

For some reason Vera did not release any plugin updates this Monday. @Sorin, can you ask the team to look at that? People are waiting on some pending updates from the App market.

Cheers Rene

reneboer · March 10, 2020, 11:21am

Hi Patrick,

On the latest Vera release they use LuaSec 0.5 (only 5 years old) and that indeed has a weird default for the TLS settings. Protocol “tlsv1” and options “any”. So now we are stuck with an incorrect default.

The TSL config as used in other versions works just fine

-- TLS configuration
local cfg = {
  protocol = "any",
  options  = {"all", "no_sslv2", "no_sslv3"},
  verify   = "none",
}

@edward, can you look at LuaSec version 0.7 or up for the next release (7.0.32) ? The 0.5 seems a bad choice, or change the default TSL options to a good default.

Cheers Rene

Sorin · March 10, 2020, 11:38am

Guys are on it, right now. Thanks for the heads up

rigpapa · March 10, 2020, 12:57pm

My Edge is at 0.5… my Plus is at 0.8, though.

reneboer · March 10, 2020, 5:45pm

Well, If I look on my Plus at /usr/lib/lua/ssl.lua it is the 0.8 version. The /usr/lib/lua/ssl/https.lua is 0.4??? The /rom versions are both 0.8. On the Edge the /rom versions are 0.5 and the used is a mix of 0.5 (ssl.lua) and 0.4 (https.lua)

So I wonder what the heck is going on. It looks like the last release downgraded it and mixes versions??

BTW; also the dkjson.lua on /rom is version 2.5, but downgraded to 1.2.

rigpapa · March 10, 2020, 6:05pm

And that’s a HUGE difference in performance if LPeg is also installed, which it should be. Sounds like, as you said in your other thread, there is some broken configuration management.

therealdb · March 11, 2020, 8:15pm

Is there an easy way to force an update on our part and stop this mixed versions?

reneboer · March 12, 2020, 10:12am

Well, you can link the files back to the /rom versions.The next update will probably undo that. I am not in experimenting mood at the moment though. With all the pre-alpha stuff that took time, but does not have usable functionality and other issues I’m done with that for now. I just want it all to be stable again.

Cheers Rene

therealdb · March 12, 2020, 10:26am

on my edge:

/usr/lib/lua/ssl.lua => 0.8
/usr/lib/lua/ssl/https.lua => 0.4
/rom/usr/lib/lua/ssl.lua => 0.5
/rom/usr/lib/lua/ssl/https.lua => 0.5

I can confirm that on my Edge, dkjson is version 1.2. what a mess

Anyway, I just sync’ed libs with

ln -sf /usr/lib/lua/ssl.lua /usr/lib/lua/ssl/https.lua

Just rename the existings symlinks before (or change the symlink with winscp). I downloaded dkjson directly and placed into usb lib. Are we ok with that?

@rigpapa what’s the best way to install Lpeg?

rigpapa · March 12, 2020, 12:48pm

opkg after applying Eduards repo

therealdb · March 12, 2020, 1:38pm

Are you sure? I can’t find the package.

rafale77 · March 12, 2020, 3:12pm

I just opened up one of my veras and tried to install it… It says it’s already installed and up to date.

root@MiOS_50000000:~# opkg install lpeg
Package lpeg (0.12.2-2) installed in root is up to date.

I have no memory of ever installing it… This is on a virgin factory reset upgraded vera which I nuked.

therealdb · March 12, 2020, 4:31pm

I’m on a Edge, so I suspect it’s only available on a plus.

rafale77 · March 12, 2020, 6:11pm

Hmm interesting. Sorry I did not check on the edge. Consistency is overrated…