Integration fails to start with home assistant 2025.2

[finalbillybong]

As title.

Logger: homeassistant.config_entries
Source: config_entries.py:637
First occurred: 06:58:21 (1 occurrences)
Last logged: 06:58:21

Error setting up entry [email protected] for hon
Traceback (most recent call last):
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1122, in _wrap_create_connection
return await self._loop.create_connection(*args, **kwargs, sock=sock)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/asyncio/base_events.py", line 1188, in create_connection
transport, protocol = await self._create_connection_transport(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
...<2 lines>...
ssl_shutdown_timeout=ssl_shutdown_timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/asyncio/base_events.py", line 1221, in _create_connection_transport
await waiter
File "/usr/local/lib/python3.13/asyncio/sslproto.py", line 581, in _on_handshake_complete
raise handshake_exc
File "/usr/local/lib/python3.13/asyncio/sslproto.py", line 563, in _do_handshake
self._sslobj.do_handshake()
~~~~~~~~~~~~~~~~~~~~~~~~~^^
File "/usr/local/lib/python3.13/ssl.py", line 951, in do_handshake
self._sslobj.do_handshake()
~~~~~~~~~~~~~~~~~~~~~~~~~^^
ssl.SSLCertVerificationError: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018)

The above exception was the direct cause of the following exception:

Traceback (most recent call last):
File "/usr/src/homeassistant/homeassistant/config_entries.py", line 637, in __async_setup_with_context
result = await component.async_setup_entry(hass, self)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/config/custom_components/hon/init.py", line 73, in async_setup_entry
await hon.async_authorize()
File "/config/custom_components/hon/hon.py", line 141, in async_authorize
if await self.async_get_frontdoor_url(0) == 1:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/config/custom_components/hon/hon.py", line 107, in async_get_frontdoor_url
async with self._session.post(
~~~~~~~~~~~~~~~~~~^
f"{AUTH_API}/s/sfsites/aura?r=3&other.LightningLoginCustom.login=1",
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
headers={"Content-Type": "application/x-www-form-urlencoded; charset=UTF-8"},
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
data=data,
^^^^^^^^^^
) as resp:
^
File "/usr/local/lib/python3.13/site-packages/aiohttp/client.py", line 1425, in aenter
self._resp: _RetType = await self._coro
^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/aiohttp/client.py", line 703, in _request
conn = await self._connector.connect(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
req, traces=traces, timeout=real_timeout
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
)
^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 548, in connect
proto = await self._create_connection(req, traces, timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1056, in _create_connection
_, proto = await self._create_direct_connection(req, traces, timeout)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1400, in _create_direct_connection
raise last_exc
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1369, in _create_direct_connection
transp, proto = await self._wrap_create_connection(
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
...<7 lines>...
)
^
File "/usr/local/lib/python3.13/site-packages/aiohttp/connector.py", line 1124, in _wrap_create_connection
raise ClientConnectorCertificateError(req.connection_key, exc) from exc
aiohttp.client_exceptions.ClientConnectorCertificateError: Cannot connect to host account2.hon-smarthome.com:443 ssl:True [SSLCertVerificationError: (1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1018)')]

[hyu9a]

Hello,
Same here, seems there is an issue with account2.hon-smarthome.com certificate
The issue is not directly linked to the integration, following command from anywhere is failing
openssl s_client -connect account2.hon-smarthome.com:443

Same issue as #174

---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: RSA-PSS
Server Temp Key: X25519, 253 bits
---
SSL handshake has read 2181 bytes and written 408 bytes
Verification error: unable to verify the first certificate
---
New, TLSv1.3, Cipher is TLS_AES_256_GCM_SHA384
Server public key is 2048 bit
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
Early data was not sent
Verify return code: 21 (unable to verify the first certificate)
---
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: 8513FA5961CA4AA7D8D2A94868D2EBE57B28D725B962FA58CDD74D4F01CE2200
    Session-ID-ctx: 
    Resumption PSK: 7B008D663F8E9CC93FEC73B513EA063CCAD81931E97DCDBE552451D7A0211CB51E3D8E69C9B435DAAF0AF202DA762280
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 2b c9 23 ec dc 1e 3b 17-c0 de 95 c5 7f bb 31 c9   +.#...;.......1.
    0010 - b3 a3 69 24 3a 17 94 a8-cb 0f 2e ef 06 eb 90 6d   ..i$:..........m

    Start Time: 1738923224
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: no
    Max Early Data: 0
---
read R BLOCK
---
Post-Handshake New Session Ticket arrived:
SSL-Session:
    Protocol  : TLSv1.3
    Cipher    : TLS_AES_256_GCM_SHA384
    Session-ID: B9C83497770F110479BA19F519F3862088094F428B1C3DFF0366A50A1EFA2054
    Session-ID-ctx: 
    Resumption PSK: 37B6701C093BBC3D156D6B6BDF75A7F47BDC0FC0D5C9D2A4AC28842A00CA091FED51DB35486326242FACDC05B87CF867
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    TLS session ticket lifetime hint: 300 (seconds)
    TLS session ticket:
    0000 - 81 04 6d fd 1a 7b 06 2a-eb 10 2e b7 53 6c a2 ce   ..m..{.*....Sl..
    0010 - ff cf 02 6b b1 7a 97 97-4f 87 bd d4 46 be 31 be   ...k.z..O...F.1.

    Start Time: 1738923224
    Timeout   : 7200 (sec)
    Verify return code: 21 (unable to verify the first certificate)
    Extended master secret: no
    Max Early Data: 0
---

[sajikur]

same here

[Guidomo1954]

It hasn't been working for me since yesterday either.

[gitmed1]

Same problem with home assistant 2024.12.5 from yesterday.. About 19 hours ago

[bvdf0251]

Same here, looks like a HON issue.

Maybe they've changed something. Got an alert on the HON app that changes are coming.

Edit: apparently the ssl certificate was updated on Hon website. not sure why that breaks signing in though.

[tecnotorino]

Are there any updates on this? Nothing from Haier air conditioners works in Home Assistant

[bvdf0251]

Fix is in the other HON integration

Andre0512/hon#288

[nunopicado]

Another one. Can't login using my hON data in the integration.

[tecnotorino]

Fix is in the other HON integration

Andre0512/hon#288

Thank you! The issue has been resolved. Let me know if you need anything else.

[ChriZathens]

Should we expect a fix for this with a future update of the integration, or should we try the fix mentioned above?

[bvdf0251]

I dont think it's related to the integration. It's HA that doesn't have the CA cert in it's store.

So it reports the cert. used by Haier as invalid.

[ChriZathens]

I dont think it's related to the integration. It's HA that doesn't have the CA cert in it's store.

So it reports the cert. used by Haier as invalid.

Oh, OK, I see…
Thanks for the clarification!!

UPDATE: I performed the manual steps mentioned in the other integration and problem is solved.

[mohir]

Hello,
I would apricate some help,
In my HACS, i see the two versions of Hon.

and trying to add an integration i see only one version, not Andre's,
How do i make it work?

Thanks

[Joca72]

Hello, I would apricate some help, In my HACS, i see the two versions of Hon.

and trying to add an integration i see only one version, not Andre's, How do i make it work?

Thanks

You can continue with this integration. Just follow the solution of the other one.

[Korkuttum]

Definitive solution #177 (comment)

[gvigroux]

Should work now

[mohir]

Definitive solution #177 (comment)

Thank you, it is back :)