Custom Component fails to load starting yesterday - SSL Error

[dahlb]

Custom Component fails to load starting yesterday - SSL Error

[dahlb]

Applied and it seems to be working, thanks again

[0bmay]

Seems to be related to Issue 56

Seems to be due to HA upgrade again... my instance is running python 3.9.2

[0bmay]

making the following code change fixed the issue

file: kia_hyundai_api/us_kia.py
line 75:

        self.BASE_URL: str = "api.owners.kia.com"
        self.API_URL: str = "https://" + self.BASE_URL + "/apigw/v1/"

        if client_session is None:
            self.api_session = ClientSession(raise_for_status=True)
        else:
            self.api_session = client_session

        new_ssl_context = ssl.create_default_context(cafile=certifi.where())
        new_ssl_context.load_default_certs()
        new_ssl_context.check_hostname = True
        new_ssl_context.verify_mode = ssl.CERT_REQUIRED
        new_ssl_context.set_ciphers("DEFAULT@SECLEVEL=1")  # was ALL <--------
        new_ssl_context.options = (
                ssl.OP_CIPHER_SERVER_PREFERENCE
        )
        self.ssl_context = new_ssl_context

Probably not the best fix, but it works...

[dahlb]

Thanks for the fix, applying from my phone if I can now, level 1 seems more secure then it was and the real issue is all kia/Hyundai certs use weak settings