KML parsing error about simple_dwd_weatherforecast HOT 10 CLOSED

Sorry for the inconvenience. But I forgot HSTS totally. I will undo the changes. So unfortunately we all have to wait.

from simple_dwd_weatherforecast.

I have the same issue.

The problem is, that the SSL-Certificat from DWD is expired, so the https-URL are invalid

NET::ERR_CERT_DATE_INVALID
Subject: opendata.dwd.de
Issuer: DFN-Verein Global Issuing CA
Expires on: 08.05.2022
Current date: 09.05.2022

Don't switch to an unsafe http-URL because the DWD-Side use HSTS!

Wait for DWD to fix the error

from simple_dwd_weatherforecast.

@FL550 could you wait a bit until we ware sure about that?

@GerdRuetten are you sure about that? I collected the traffic outgoing from my HA installation and opened the dump with Wireshark. The HTTP response seems ok. Before I created the PR for switching from HTTPS to HTTP, I checked if everything is usable with HTTP by performing the requests via Postman.

Or is Python discarding HTTP responses that are not performed vie HTTPS but have an STS header?

from simple_dwd_weatherforecast.

Yes, i'm sure :-)

from simple_dwd_weatherforecast.

@GerdRuetten working just fine in Firefox, Edge and Chrome is opening
http://opendata.dwd.de/weather/local_forecasts/mos/MOSMIX_L/single_stations/10677/kml/MOSMIX_L_LATEST_10677.kmz
and not
https://opendata.dwd.de/weather/local_forecasts/mos/MOSMIX_L/single_stations/10677/kml/MOSMIX_L_LATEST_10677.kmz.

And thats what the package does. There is also no 301 or 302 response redirecting to HTTPS

from simple_dwd_weatherforecast.

The certificate for opendata.dwd.de expired. They need to renew it.

from simple_dwd_weatherforecast.

I wrote DWD an email and got a reply. They are working on a "solution" (most likely getting a new certificate ... DFN certificates often take some days to be issued).

@FL550 do you have a working test environment and check if HSTS really is the problem and if allowing unsecure connections solve the problem? I still think going for HTTP instead of HTTPS is the way to go if it's working. (just to avoid future certificate problems).

from simple_dwd_weatherforecast.

The certificate is now valid again. Problem solved with that.

from simple_dwd_weatherforecast.

The certificate is now valid again. Problem solved with that.

Yes i confirm!

The DWD-side is use a new SSL-Cert.

But the new version from this packages use the non-secure http-URL.

Pls re-fix to the secure https-URL.

from simple_dwd_weatherforecast.

I've reverted the change, so the integration is using SSL again.

from simple_dwd_weatherforecast.