This happened to me as well. Reinstalling the CA certs didn't help. I can curl using -k (ignore cert) but weewx isn't playing nicely with the certs as they are right now.
On Thursday, January 30, 2020 at 1:40:56 PM UTC-7, Thomas Keffer wrote: > > You're the second person in recent days who has had WU certificate > problems. > > Most likely they've been monkeying around with their API, as they tend to > do, but it's also possible your machine has stale certificates. Try this: > > *sudo apt-get update* > *sudo apt-get install --reinstall ca-certificates* > > This will refresh your cache of certificates. > > -tk > > On Thu, Jan 30, 2020 at 11:53 AM J B <[email protected] <javascript:>> > wrote: > >> Hi, >> I've had a PWS uploading to Wunderground with Weewx 3.9.2 on a Raspberry >> Pi for several months. Yesterday the station randomly stopped uploading to >> WU although my local database is still being updated. Checking the log >> shows the following: >> >> restx: Wunderground-PWS: Failed upload attempt 1: <urlopen error [SSL: >> CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:661)> >> >> Elsewhere in the log I found the actual URL that is being queried by >> weewx and when I run that manually with curl I get the following: >> >> user@host:~$ curl -L " >> https://weatherstation.wunderground.com/weatherstation/updateweatherstation.php?action=updateraw& >> <redacted>" >> curl: (60) SSL certificate problem: unable to get local issuer certificate >> More details here: https://curl.haxx.se/docs/sslcerts.html >> >> curl performs SSL certificate verification by default, using a "bundle" >> of Certificate Authority (CA) public keys (CA certs). If the default >> bundle file isn't adequate, you can specify an alternate file >> using the --cacert option. >> If this HTTPS server uses a certificate signed by a CA represented in >> the bundle, the certificate verification probably failed due to a >> problem with the certificate (it might be expired, or the name might >> not match the domain name in the URL). >> If you'd like to turn off curl's verification of the certificate, use >> the -k (or --insecure) option. >> >> >> I've tried this on 2 other systems (another RPi and a CentOS VM) with the >> same result. I'm not that familiar with SSL certificates but when I check >> the one for weatherstation.wunderground.com one in my browser it says >> "valid". >> >> Is anyone else having this problem? How can I fix this issue? >> >> Thanks in advance. >> >> -- >> You received this message because you are subscribed to the Google Groups >> "weewx-user" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/d/msgid/weewx-user/b444ed31-e887-45bf-9c06-ad995ea53494%40googlegroups.com >> >> <https://groups.google.com/d/msgid/weewx-user/b444ed31-e887-45bf-9c06-ad995ea53494%40googlegroups.com?utm_medium=email&utm_source=footer> >> . >> > -- You received this message because you are subscribed to the Google Groups "weewx-user" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/weewx-user/8135f05c-b72f-4241-bcb6-d830bbc1acc0%40googlegroups.com.
