Welcome to the Cumulus Support forum.

Latest Cumulus MX V4 release 4.3.3 (build 4070) - 04 January 2025

Latest Cumulus MX V3 release 3.28.6 (build 3283) - 21 March 2024

Legacy Cumulus 1 release 1.9.4 (build 1099) - 28 November 2014
(a patch is available for 1.9.4 build 1099 that extends the date range of drop-down menus to 2030)

Download the Software (Cumulus MX / Cumulus 1 and other related items) from the Wiki

If you are posting a new Topic on an error or if you need help PLEASE read this first viewtopic.php?p=164080#p164080

Certificate

From build 3044 the development baton passed to Mark Crossley. Mark has been responsible for all the Builds since. He has made the code available on GitHub. It is Mark's hope that others will join in this development, but at the very least he welcomes your ideas for future developments (see Cumulus MX Development suggestions).

Moderator: mcrossley

Post Reply
User avatar
HansR
Posts: 6864
Joined: Sat 20 Oct 2012 6:53 am
Weather Station: GW1100 (WS80/WH40)
Operating System: Raspberry OS/Bookworm
Location: Wagenborgen (NL)
Contact:

Certificate

Post by HansR »

I just helped somebody who had installed the CMX image. Everything well until he tried to do a https call (e.g. Windy upload) and failed.
The problem is the the disabling of the old certificate apparently has not been executed. Before creating a new image that should be done.

Code: Select all

sudo nano /etc/ca-certificates.conf
Put a ! in front of the line: /mozilla/DST_Root_CA_X3.crt
Save the file: Ctrl-X, y
sudo update-ca-certificates
Hans

https://meteo-wagenborgen.nl
CMX build 4070+ ● RPi 4B ● Linux 6.6.62+rpt-rpi-v8 aarch64 (bookworm) ● dotnet 8.0.1
BlueSky: https://bsky.app/profile/wagenborgenwx.bsky.social
User avatar
ConligWX
Posts: 1831
Joined: Mon 19 May 2014 10:45 pm
Weather Station: Davis vPro2+ w/DFARS + AirLink
Operating System: Ubuntu 24.04.1 LTS
Location: Bangor, NI
Contact:

Re: Certificate

Post by ConligWX »

I think that cert expired last year from what I remember. cant see this being CMX issue, unless using the Raspberry Pi image from the wiki downloads(?), its more likely the OS the user was using had not been updated in a while, if not ever.
users should still carry out updates on their OS from time to time.

the cert was to do with LetsEncrypt root cert if I am correct.
User avatar
HansR
Posts: 6864
Joined: Sat 20 Oct 2012 6:53 am
Weather Station: GW1100 (WS80/WH40)
Operating System: Raspberry OS/Bookworm
Location: Wagenborgen (NL)
Contact:

Re: Certificate

Post by HansR »

ConligWX wrote: Sat 16 Apr 2022 10:02 pm I think that cert expired last year from what I remember. cant see this being CMX issue, unless using the Raspberry Pi image from the wiki downloads(?), its more likely the OS the user was using had not been updated in a while, if not ever.
users should still carry out updates on their OS from time to time.

the cert was to do with LetsEncrypt root cert if I am correct.
Yes, I am very well aware of what the issue is. That is why I explicitly mention the installation was done through the CMX image which should contain the certification fix as the /etc/ca-certificates.conf is definitely an OS feature but delivered in this case as part of CMX (as is the whole OS).

This does not mean it immediately becomes a true CMX issue, but one might expect this certificate to be blocked as it causes e.g. Windy to be connected (and I believe any HTTPS call). Because the image is typically uses by lesser experienced users this really can become an issue.
Hans

https://meteo-wagenborgen.nl
CMX build 4070+ ● RPi 4B ● Linux 6.6.62+rpt-rpi-v8 aarch64 (bookworm) ● dotnet 8.0.1
BlueSky: https://bsky.app/profile/wagenborgenwx.bsky.social
User avatar
mcrossley
Posts: 14264
Joined: Thu 07 Jan 2010 9:44 pm
Weather Station: Davis VP2/WLL
Operating System: Bullseye Lite rPi
Location: Wilmslow, Cheshire, UK
Contact:

Re: Certificate

Post by mcrossley »

I'll be updating the image for v3.16, I'll try and remember to update the certs....
User avatar
HansR
Posts: 6864
Joined: Sat 20 Oct 2012 6:53 am
Weather Station: GW1100 (WS80/WH40)
Operating System: Raspberry OS/Bookworm
Location: Wagenborgen (NL)
Contact:

Re: Certificate

Post by HansR »

mcrossley wrote: Sun 17 Apr 2022 8:25 am I'll be updating the image for v3.16, I'll try and remember to update the certs....
👍
Hans

https://meteo-wagenborgen.nl
CMX build 4070+ ● RPi 4B ● Linux 6.6.62+rpt-rpi-v8 aarch64 (bookworm) ● dotnet 8.0.1
BlueSky: https://bsky.app/profile/wagenborgenwx.bsky.social
Post Reply