Author Topic: WU offline ?  (Read 4337 times)

0 Members and 1 Guest are viewing this topic.

Offline konz

  • Senior Contributor
  • ****
  • Posts: 165
    • ArlingtonWX
Re: WU offline ?
« Reply #50 on: February 01, 2020, 12:03:23 PM »
My last upload was 5:05 PM today so I'm guessing that mine will be back online at 7:35 PM :?:

Well, that didn't work.   :grin:  Still not online.

Just check your station and as of 8:15am PST your up and running and your web cams working also !!

Thanks Mabcmb, I restarted the weeWX service at 10:00 AM CST so hopefully that was it.  Thanks for the feedback!
« Last Edit: February 01, 2020, 12:05:11 PM by konz »

Offline rormeister

  • Senior Contributor
  • ****
  • Posts: 196
Re: WU offline ?
« Reply #51 on: February 01, 2020, 12:14:14 PM »
 #-o Well, WU has pulled another mess out of their bag of tricks with this latest “upgrade/maintenance”. Not only have the spider legs re-appeared, but lots of other issues are appearing on subsidiary pages (too many to mention here). In my case, I noticed that while my widgets seemed to be updating, my charts stopped abruptly in the wee hours of the morning. Thanks to reading this thread I re-booted my Ambient IPObserver unit and after a few minutes the graphs caught up.
 [ You are not allowed to view attachments ]

Offline awsum140

  • Forecaster
  • *****
  • Posts: 341
Re: WU offline ?
« Reply #52 on: February 01, 2020, 12:19:34 PM »
That's weird, rormeister.  My Accuwrong just kept chugging along overnight.  Now all the other fubar stuff has turned into standard operating procedure for what passes, now, as WU.  I keep getting the urge to pull the plug on WU and let them have all the "fun" they want without aggravating myself in the process.

Edit:  I spoke too soon.  Now I'm showing "offline" and the map is "unavailable".  Good, ole, WU at it yet again....and on a Saturday!  Amazzzzzing!
« Last Edit: February 01, 2020, 12:35:34 PM by awsum140 »
If it's not a Boerboel it's just a dog.

KNJSOUTH86


Offline konz

  • Senior Contributor
  • ****
  • Posts: 165
    • ArlingtonWX
Re: WU offline ?
« Reply #53 on: February 01, 2020, 02:25:56 PM »
I'm offline again, too.   :?

EDIT: but it appears to be an OS update caused the issue.
« Last Edit: February 01, 2020, 03:12:27 PM by konz »

Offline CW2274

  • Forecaster
  • *****
  • Posts: 5449
    • Conditions @ CW2274 West Tucson-Painted Hills Ranch
Re: WU offline ?
« Reply #54 on: February 01, 2020, 03:12:16 PM »
I keep getting the urge to pull the plug on WU and let them have all the "fun" they want without aggravating myself in the process.
I quit them last spring as my own personal protest at them, haven't been back since, don't ever plan to.

Offline konz

  • Senior Contributor
  • ****
  • Posts: 165
    • ArlingtonWX
Re: WU offline ?
« Reply #55 on: February 01, 2020, 04:30:30 PM »
Using weewx.  I switched back to https after reading these last few comments. Worked well for a while, then quit again. I'll leave it with just http. Works reliably that way.

Hello Flessan,

How were you able to switch over to HTTP instead of HTTPS?  It appears I'm having the same issue.

Feb  1 15:03:43 COMPUTER weewx[1021]: restx: Wunderground-RF: Unexpected exception of type <class 'ssl.CertificateError'>
Feb  1 15:03:43 COMPUTER weewx[1021]: restx: Wunderground-RF: Thread exiting. Reason: hostname 'rtupdate.wunderground.com' doesn't match either of '*.prod-pws-ng-546567-997b58a668d15d562a6bed58ea7c5f9e-0000.us-south.containers.appdomain.cloud', 'prod-pws-ng-546567-997b58a668d15d562a6bed58ea7c5f9e-0000.us-south.containers.appdomain.cloud', 'prod-pws-ng-546567.us-south.containers.appdomain.cloud'

Yet the rtupdate certs look good.
https://www.ssllabs.com/ssltest/analyze.html?d=rtupdate.wunderground.com

EDIT: The SAN Cert is definitely NOT good.  There is a mismatch of server names which could be causing all the system-wide issues.  When you click the link above, it will run for about 5 minutes, checking each of the three IP addresses.  Once it's done, click one of the IP addresses and expand its Certificate #2: RSA 2048 bits (SHA256withRSA) No SNI + sign to see the SAN error.
« Last Edit: February 02, 2020, 10:12:34 AM by konz »

Offline konz

  • Senior Contributor
  • ****
  • Posts: 165
    • ArlingtonWX
Re: WU offline ?
« Reply #56 on: February 01, 2020, 04:58:09 PM »
Well, it looks like one of the SAN cert names is UNTRUSTED for one IP address.  Attached below.  This could be the source of other user's sporadic issues if they're using the same rtupdate URL.  Two of the three IP addresses SAN certs are trusted, but one isn't.  When you round-robin or time out on one and hit the one that's untrusted, you drop your connection.  Switching to HTTP should alleviate the issue for some, if you're able.

Oops, spoke too soon.  Looks like all three of the Subject Alternate Names are UNTRUSTED.

« Last Edit: February 01, 2020, 05:08:39 PM by konz »

Offline frankpc

  • Lakepoint Weather
  • Member
  • *
  • Posts: 40
  • Build it and they will come.
Re: WU offline ?
« Reply #57 on: February 01, 2020, 06:35:40 PM »
Ever since I shut off SSL, my PWS hasn't missed a beat.
WU: Lakepointe KKSSHAWN122
.-- -... -.... --.- .-- .---

Offline arbkab

  • Member
  • *
  • Posts: 7
Re: WU offline ?
« Reply #58 on: February 01, 2020, 09:22:36 PM »
#-o Well, WU has pulled another mess out of their bag of tricks with this latest “upgrade/maintenance”. Not only have the spider legs re-appeared, but lots of other issues are appearing on subsidiary pages (too many to mention here). In my case, I noticed that while my widgets seemed to be updating, my charts stopped abruptly in the wee hours of the morning. Thanks to reading this thread I re-booted my Ambient IPObserver unit and after a few minutes the graphs caught up.
 [ You are not allowed to view attachments ]
I've been having that same problem for the last several nights. Frustrating. I just changed from having my connection from my WS-2000 console to uploading from ambientweather.net. My station then showed back online so maybe I'll just leave it at that. Unreal how they've screwed this up so bad.

Offline jmmctighe

  • Member
  • *
  • Posts: 6
    • High St. Ipswich
Re: WU offline ?
« Reply #59 on: February 02, 2020, 09:52:51 AM »


Hello Flessan,

How were you able to switch over to HTTP instead of HTTPS?  It appears I'm having the same issue.


I'd like to know also.  Having trouble finding the info.  I'd also like to try tuning off SSL to see if that works.  How is that done in WeeWX?


Offline rormeister

  • Senior Contributor
  • ****
  • Posts: 196
Re: WU offline ?
« Reply #60 on: February 02, 2020, 10:23:19 AM »
 [ You are not allowed to view attachments ]
Must be Groundhogs Day. Same result different day.  ](*,)
 [ You are not allowed to view attachments ]

Offline awsum140

  • Forecaster
  • *****
  • Posts: 341
Re: WU offline ?
« Reply #61 on: February 02, 2020, 10:32:18 AM »
They're picking on you, rormeister.

Mine keeps going from offline to reporting while I'm doing a refresh.  It'll refresh and say it's offline with nothing displayed, like yours, then pop back up as reporting a few seconds later.  I understand they migrated to new hosting, or something.  Maybe the new hosting is being done on a VIC-20.  Beats me.
« Last Edit: February 02, 2020, 12:17:22 PM by awsum140 »
If it's not a Boerboel it's just a dog.

KNJSOUTH86


Offline flainn

  • Member
  • *
  • Posts: 27
Re: WU offline ?
« Reply #62 on: February 02, 2020, 11:26:48 AM »
Mine broke last week (same error about not being able to verify the SSL certificate). I "fixed" the issue by altering my software's (WeeWX's) uploads to use http not https.

I also filed a support ticket with WU four days ago and have heard nothing back.

Offline rormeister

  • Senior Contributor
  • ****
  • Posts: 196
Re: WU offline ?
« Reply #63 on: February 02, 2020, 11:29:40 AM »
Maybe the new hosting is being done on a VIC-20.
Probably an old Commodore 64. Great game machine in its time. I bounced my Ambient IP again and we're talking once again. Curious if any other Ambient users are seeing this. Perhaps a problem in the IPObserver settings (which you can't change).
 [ You are not allowed to view attachments ]

Offline konz

  • Senior Contributor
  • ****
  • Posts: 165
    • ArlingtonWX
Re: WU offline ?
« Reply #64 on: February 02, 2020, 12:21:13 PM »
Ever since I shut off SSL, my PWS hasn't missed a beat.

Yes, but your user/pass can be intercepted.  SSL and HTTPS is the future of the Internet.  HTTP is dying a slow but necessary death.

Offline jmmctighe

  • Member
  • *
  • Posts: 6
    • High St. Ipswich
Re: WU offline ?
« Reply #65 on: February 02, 2020, 12:24:02 PM »
Mine broke last week (same error about not being able to verify the SSL certificate). I "fixed" the issue by altering my software's (WeeWX's) uploads to use http not https.

I also filed a support ticket with WU four days ago and have heard nothing back.

Flainn-how did you alter WeeWX?  I'm not fluent in the Pi OS

Offline galfert

  • Global Moderator
  • Forecaster
  • *****
  • Posts: 5649
Re: WU offline ?
« Reply #66 on: February 02, 2020, 12:34:36 PM »
Ever since I shut off SSL, my PWS hasn't missed a beat.

Yes, but your user/pass can be intercepted.  SSL and HTTPS is the future of the Internet.  HTTP is dying a slow but necessary death.

Yes but at home your weather station packets have a very low risk of being intercepted. The only way would be if some other device on your network was untrusted. You can't hack packets after they pass into the ISP*. And what would be the harm in your WU key getting into the wrong hands? Worst case is that they upload bad data to your WU ID.

Therefore upload to WU via HTTP until this matter is resolved. I have 3 separate WU IDs uploading from Ambient console, Ecowitt console, and Meteobridge and none have stopped working during this WU incident. Which shows you that all of them are uploading by default via HTTP...they always have, and there is no way to change them. So there is no real risk in uploading to WU with HTTP.

* Most hacking occurs at the local network level or at the perimeter (router/firewall). This is where compromised computers and spyware/viruses employ their payload. Once a packet is gone into the ISP, then hacking can still occur but it would require ISP and backbone Internet to be compromised...which you don't really ever hear of happening.
« Last Edit: February 02, 2020, 12:41:23 PM by galfert »
Ecowitt GW1000 | Meteobridge (WeatherBridge)
WU: KFLWINTE111  |  PWSweather: KFLWINTE111
CWOP: FW3708  |  AWEKAS: 14814
Windy: pws-f075acbe
Weather Underground Issue Tracking
Tele-Pole

Offline konz

  • Senior Contributor
  • ****
  • Posts: 165
    • ArlingtonWX
Re: WU offline ?
« Reply #67 on: February 02, 2020, 01:02:07 PM »
Ever since I shut off SSL, my PWS hasn't missed a beat.

Yes, but your user/pass can be intercepted.  SSL and HTTPS is the future of the Internet.  HTTP is dying a slow but necessary death.
...
 So there is no real risk in uploading to WU with HTTP.

It's never a good idea to introduce risk, regardless of how small it might seem.  They (WU) don't enforce HSTS (Strict Transport Security (HSTS)    No), which should disallow the use of HTTP and create a more secure environment.  You and others can do what you want, but I stand by my opinion.

Offline frankpc

  • Lakepoint Weather
  • Member
  • *
  • Posts: 40
  • Build it and they will come.
Re: WU offline ?
« Reply #68 on: February 02, 2020, 01:12:30 PM »
Yes, but your user/pass can be intercepted.  SSL and HTTPS is the future of the Internet.  HTTP is dying a slow but necessary death.

I truly appreciate your advice!

My misunderstanding is that using a https based URL but not using SSL verification, would be the same thing as using http.  Or is that correct?

I am using PHP and curl for my WU transmitted message.  And now I've added a statement within the data stream that shuts off SSL.

I am using this approach just until WU gets their security consistent.  Perhaps you are just suggesting that I not continue using http.  If so, I do intend to take advantage of SSL.  But it seemed people were still having intermittent problems, which seem to be attributable to WU's problem with SSL decryption.  And I know that none of my messages to WU have failed since I shut off SSL.

I would appreciate corrections to my understanding expressed above.

Thanks

Edited by galfert for misquoting individual.
« Last Edit: February 02, 2020, 03:03:46 PM by galfert »
WU: Lakepointe KKSSHAWN122
.-- -... -.... --.- .-- .---

Offline konz

  • Senior Contributor
  • ****
  • Posts: 165
    • ArlingtonWX
Re: WU offline ?
« Reply #69 on: February 02, 2020, 01:22:39 PM »
Yes, but your user/pass can be intercepted.  SSL and HTTPS is the future of the Internet.  HTTP is dying a slow but necessary death.

I truly appreciate your advice!

My misunderstanding is that using a https based URL but not using SSL verification, would be the same thing as using http.  Or is that correct?

I am using PHP and curl for my WU transmitted message.  And now I've added a statement within the data stream that shuts off SSL.

I am using this approach just until WU gets their security consistent.  Perhaps you are just suggesting that I not continue using http.  If so, I do intend to take advantage of SSL.  But it seemed people were still having intermittent problems, which seem to be attributable to WU's problem with SSL decryption.  And I know that none of my messages to WU have failed since I shut off SSL.

I would appreciate corrections to my understanding expressed above.

Thanks

I think it boils down to whether or not someone feels comfortable using HTTP vs getting data into the system.  I tend to err on the side of caution because, to me, the data isn't worth the risk.  Galfert presents a compelling case that you should consider for the short term, but I'll either wait until the issue is fixed or stop my service before I upload insecurely.  This should be fixed eventually and I don't think it will take very long.

Also, it could open a whole other can of worms if WU does begin to enforce HSTS.  There could be PWS systems and software out there that may not support HTTPS just yet.
« Last Edit: February 02, 2020, 03:04:25 PM by galfert »

Offline flainn

  • Member
  • *
  • Posts: 27
Re: WU offline ?
« Reply #70 on: February 02, 2020, 03:51:33 PM »
Flainn-how did you alter WeeWX?  I'm not fluent in the Pi OS

In the file /usr/share/weewx/weewx/restx.py, change the lines

  # the rapidfire URL:
  rf_url = "https://rtupdate.wunderground.com/weatherstation/updateweatherstation.php"
  # the personal weather station URL:
  pws_url = "https://weatherstation.wunderground.com/weatherstation/updateweatherstation.php"

to have http rather than https. Then restart weewx (run systemctl restart weewx).

Offline flainn

  • Member
  • *
  • Posts: 27
Re: WU offline ?
« Reply #71 on: February 02, 2020, 03:53:20 PM »

It's never a good idea to introduce risk, regardless of how small it might seem.

Simple cost/benefit analysis. The risk is exceedingly small (it's a random, throwaway password I use nowhere else, and I seriously doubt anyone's going to go to the trouble of a replay attack with my weather data), and the benefit is my telemetry starts flowing again and doesn't have to wait for WU to find its rear end with a flashlight, since nobody at WU seems to feel they need to answer tech support tickets.

Simple choice: be secure with https (so secure, in fact, that it doesn't work at all) or have your weather station communicate with WU. Until WU stops breaking things, those are your options.
« Last Edit: February 02, 2020, 03:56:26 PM by flainn »

Offline WxFox

  • Northern Androscoggin Weather
  • Senior Member
  • **
  • Posts: 92
  • Happiness is having my toes in the warm sand.
    • Northern Androscoggin County Weather
Re: WU offline ?
« Reply #72 on: February 03, 2020, 12:16:31 AM »
I can't even log into my dashboard! It says the email address is not found! The one I've been using for many years! Yet I can send data and see my station if I do a search on the ID (but it't not on the station list in my app).  :-x  ](*,)  :evil:
Davis VP2 (cabled) Uploading to PWS, Weather Underground, Weathercloud, WOW, WeatherBug, AWEKAS and Twitter, using Cumulus.  Cabled = fewer problems, less maintenance and better reliability!

Northern Androscoggin Weather:
http://home.myfairpoint.net/~jody2011/index.php
Mobile friendly: http://home.myfairpoint.net/~jody2011//iCumulus/#_home
CWOP AV346

Offline MNicastro

  • WeatherMike
  • Member
  • *
  • Posts: 9
    • WeatherMike
Re: WU offline ?
« Reply #73 on: February 03, 2020, 06:47:47 AM »
I'm having the same issue with WU.  My two weather stations KFLDAVEN9, KFLDAVEN28 were not reporting.  I submitted a support ticket to WU and it seemed to get resolved within 24 hours.  I still have an issue with WU "Weather Sticker" widgets not working.  I summited a ticket for that as well, but no luck so far. I don't know about anyone else, but when I submit a ticket nobody ever gets back to me from WU with an update. A couple years ago I at least use to receive a confirmation from support and an update.  But with the 'new, and improved' Weather Underground, no communications at all.
Davis Vantage Pro 2 Plus (KFLDAVEN9)
AcuRite PRO+ 5-in-1 (KFLDAVEN28)
CWOP:  K7FLA | APRS Direct: K7FLA
AWEKAS: AWEKAS

Offline buffy

  • Contributor
  • ***
  • Posts: 108
  • My PWS: Garni Ventus 830
    • PWS Monitor
Re: WU offline ?
« Reply #74 on: February 03, 2020, 08:41:48 AM »
I'm having the same issue with WU.  My two weather stations KFLDAVEN9, KFLDAVEN28 were not reporting.  I submitted a support ticket to WU and it seemed to get resolved within 24 hours.  I still have an issue with WU "Weather Sticker" widgets not working.  I summited a ticket for that as well, but no luck so far. I don't know about anyone else, but when I submit a ticket nobody ever gets back to me from WU with an update. A couple years ago I at least use to receive a confirmation from support and an update.  But with the 'new, and improved' Weather Underground, no communications at all.

Try Facebook Group, There is sometime WU member and I got answer there.

https://www.facebook.com/groups/145852786027137/