I think I 'm getting close.
After again carefully read this entire post I understand I need to ADD certificates to Toon.
Still not understandig what to do exactly.
1. Where do the .pem certificates come from? Which are those? --> got them from Let's encrypt combined with DuckDNS
2. I also need to get the "DST_Root_CA_X3.crt", It seems this certificate is retired and should now be "IdenTrust Commercial Root CA 1" based on
https://www.identrust.com/support/downloads at the bottom of the page.
3. I understand only the "DST_Root_CA_X3.crt" -->IdenTrust Commercial Root CA 1 is needed?
If I get this to work, I would be pleased to make an updated instruction, but for now I need some help with this.
Update (but still no working Home Assistant app on Toonv2):
1. Installed the Home Assistant app on Toonv2 from ToonStore
2. entered IP-adres of HA (https://<IP_ADDRESS>
3. entered port of HA, in my case "8123" (433 not possible due to network limitations of Unifi (433 is fixed, not able to adjust))
4. SSL is enabled
5. Created a long-time key in HA
6. entered key in homeassistant.token.txt in /mnt/data/tsc
7. downloaded new certificate "IdenTrust Commercial Root CA 1" based on
https://www.identrust.com/support/downloads since the old certificate is outdated.
8. Created fullchain.pem from Let's encrypt combined with DuckDNS
9. Copied fullchain.pem to /etc/ssl/certs/
10. Copied fullchain.pem to /usr/share/ca-certificates/ and renamed it to fullchain.crt
11. Then added 'fullchain.crt' to the bottom of file ca-certificates.conf in /etc/
12. Then ALSO added "IdenTrustCommercialRootCA.crt" to the bottom of file ca-certificates.conf in /etc/
13. Ran command 'update-ca-certificates --fresh'
14. Reboot Toon
When doing:
Code: Select all
curl https://<myDNSname>.duckdns.org/api/states?api_password=xxx
I get this response:
Code: Select all
curl: (60) SSL certificate problem: self signed certificate
More details here: https://curl.haxx.se/docs/sslcerts.html
curl failed to verify the legitimacy of the server and therefore could not
establish a secure connection to it. To learn more about this situation and
how to fix it, please visit the web page mentioned above.
What I DON'T see in /etc/ssl/certs is:
Code: Select all
fullchain.pem -> /usr/share/ca-certificates/fullchain.crt
What I DO see in /etc/ssl/certs is:
Code: Select all
IdenTrustCommercialRootCA.pem -> ../../../usr/share/ca-certificates/IdenTrustCommercialRootCA.crt
Nothing happens--> in the Home Assistant app on Toon everything is still empty (and yes ofcourse I entered some sensors and switches)