Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

'update-ca-certificates' returned an error -> WARNING: Skipping duplicate certificate #17

Open
sudo-nitz opened this issue Feb 13, 2025 · 1 comment

Comments

@sudo-nitz
Copy link

Describe the issue

Hi!
I'm using integration for Haier cloud called HON (https://github.com/Andre0512/hon).

For last couple days there is a problem with SSL connection to this cloud. Fix is depending on Additional CA integration (Andre0512/hon#285)

With Additional CA and two certficates (desribed below) I successfully solved the issue and right now I can connect to Haier cloud using HON integration.

But!

I'm getting an warning in logs related with duplication of certficates (details below).

How to avoid this warning?

Describe your setup (please complete the following information):

HAOS on Raspberry Pi 4
Core 2025.2.3
Supervisor 2025.02.0
Operating System 14.2
User interface 20250210.0

Additional_CA 0.2.4

DigiCert Global Root G2 and RapiSSL TLS RSA CA G1 from https://hon-smarthome.com/ cloud.

YAML configuration extract

additional_ca:
DigiCert_Global_Root_G2: DigiCert_Global_Root_G2.crt
RapidSSL_TLS_RSA_CA_G1: RapidSSL_TLS_RSA_CA_G1.crt

Logs

Logger: custom_components.additional_ca.utils
Source: custom_components/additional_ca/utils.py:62
Integration: Additional CA (Documentation, Issues)
First event: 14:51:18 (1 event)
Last logged: 14:51:18
'update-ca-certificates' returned an error -> WARNING: Skipping duplicate certificate in file ca-cert-DigiCert_Global_Root_G2.pem

Additional context

I'm trying to reach Haier cloud (https://hon-smarthome.com/) using HON integration (https://github.com/Andre0512/hon)

I put two certs "DigiCert_Global_Root_G2.crt" and "RapidSSL_TLS_RSA_CA_G1.crt" in "config/additional_ca" folder.

Moving certs to folder "config/custom_components/additional_ca" didn't solve the issue.

@Athozs
Copy link
Owner

Athozs commented Feb 14, 2025

Hello @sudo-nitz ,

I donwloaded certificates "DigiCert Global Root G2" and "RapiSSL TLS RSA CA G1" from https://www.digicert.com/kb/digicert-root-certificates.htm#roots , can you confirm this is what you use ?

I checked the content of them and they are differents so Additional CA integration should not throw a warning of skipping duplicate.

Can you try to reset the CA trust store of HAOS with this method : https://github.com/Athozs/hass-additional-ca#1022-haos---home-assistant-operating-system

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants