[SOLVED] [Freebox] Opening session failed

Tr00d · May 9, 2019, 3:29pm

Hey guys,
I looked across multiple topics but I was not able to solve my issue…
I’m using OpenHab on a Raspberry with several Xiaomi devices. I also wanted to add my Freebox device, because why not.

I manage to add the Freebox as a Thing in OpenHab. I tried using both Discovery and .thing file.
I successfully recovered the token and accepted the activation request on the device:
2019-05-09 17:08:03.138 [INFO ] [ebox.internal.handler.FreeboxHandler] - ####################################################################
2019-05-09 17:08:03.140 [INFO ] [ebox.internal.handler.FreeboxHandler] - # Please accept activation request directly on your freebox #
2019-05-09 17:08:03.142 [INFO ] [ebox.internal.handler.FreeboxHandler] - # Once done, record Apptoken in the Freebox Item configuration #
2019-05-09 17:08:03.144 [INFO ] [ebox.internal.handler.FreeboxHandler] - # xxxxxxxxxxxxxxxxxxxxxx #
2019-05-09 17:08:03.145 [INFO ] [ebox.internal.handler.FreeboxHandler] - ####################################################################

But I keep having this message: (As shown below, I tried using both HTTP and HTTPS)
‘freebox:server:fb’ changed from OFFLINE to OFFLINE (CONFIGURATION_ERROR): Check your app token in the thing configuration; opening session with blby1w1r.fbxos.fr:51777 using HTTPS API version 6.0 failed
‘freebox:server:fb’ changed from OFFLINE (CONFIGURATION_ERROR): Check your app token in the thing configuration; opening session with 192.168.0.254:80 using HTTP API version 6.0 failed to OFFLINE

On the Freebox interface, I see the OpenHAB binding and I gave it full access. HTTP port is 80 and HTTPS is 51777, as expected.

Am I missing Something? Do I have to do something more ?
I started using OpenHAB recently but I managed to do everything properly so far.

Thanks a lot!!!

Tr00d · June 21, 2019, 5:06pm

Hey guys,
Up on this message. Any idea or hint?
Thanks!

Lolodomo · June 22, 2019, 6:59am

API version 6.0: Looks like a new version.
What kind of Freebox do you get ?

Tr00d · June 22, 2019, 3:20pm

I have a Freebox Revolution, the same for 6 years now.
This is the JSON response I get from http://mafreebox.freebox.fr/api_version :
{
“box_model_name”: “Freebox Server (r1)”,
“api_base_url”: “/api/”,
“https_port”: 51777,
“device_name”: “Freebox Server”,
“https_available”: true,
“box_model”: “fbxgw-r1/full”,
“api_domain”: “blby1w1r.fbxos.fr”,
“uid”: “7d07449bf3eb2f553eee31905797d100”,
“api_version”: “6.0”,
“device_type”: “FreeboxServer1,1”
}

I tried to request this one (just to see if I have something) https://blby1w1r.fbxos.fr:51777/api/v6/login and I get a response.
From what I read online, the official documentation is not up-to-date as it only references version 4.0.

Lolodomo · June 23, 2019, 9:07am

Ok, I have Freebox Revolution too and API v6.0. No problem so it looks like a problem in your binding setup. Did you follow the instructions and in particular set the app token in the thing configuration ?
You should have finally something like that:

Bridge freebox:server:fb “Freebox Revolution” [ appToken=“xxxxxxxx” ] {
}

Of course, don"t include the appToken setting the first time.

Tr00d · June 23, 2019, 9:17am

This is my binding:
Bridge freebox:server:fb “Freebox Revolution” [ fqdn=“192.168.0.254:80”, appToken=“6RsDvDEMzWJnkue7TRhHkOAe/9vaDvLvzYWeDwDns1NBRUNzemcPwB4Cl62jz/0/”, refreshInterval=20, useOnlyHttp=true, discoverPhone=false, discoverNetDevice=false, discoverNetInterface=false, discoverAirPlayReceiver=false ] {
}

I will try it again later today from scratch and let you know. For what I remember, I first included the Freebox via PaperUI in order to retrieve the token and then, remove it and manually add a thing with the token.

EDIT: Just tried, same behavior.
When I add the Thing, I receive the message in logs containing the Token. I go on the Freebox and accept the OpenHAB binding. But then I have the same error message : Check your app token in the thing configuration; opening session with blby1w1r.fbxos.fr:51777 using HTTPS API version 6.0 failed.
I tried with both thing generated automatically (and just add the Token) or manually in my file.

Lolodomo · June 23, 2019, 9:30am

That is the good way to first use Paper UI to retrieve the token.
But why are you setting the fqdn parameter. Try to remove it.

PS: replace your real app token by a fake in your previous message.

Tr00d · June 23, 2019, 9:52am

I removed everything to have the same declaration than you, same problem.
I also tried to put a false token (or a blank one). Same problem too.

It’s like the token is not recognized. But I got it from the logs.

Bridge freebox:server:fb “Freebox Revolution” [ appToken=“5iJ8hLTsdN4cTsiZMXU2HibiZ2P47hIBaQ5jdR8JOmP4u+SK8I08/GM7ZeirGOn8” ] {
}

2019-06-23 11:22:02.435 [INFO ] [ebox.internal.handler.FreeboxHandler] - # 5iJ8hLTsdN4cTsiZMXU2HibiZ2P47hIBaQ5jdR8JOmP4u+SK8I08/GM7ZeirGOn8 #
2019-06-23 11:22:02.437 [INFO ] [ebox.internal.handler.FreeboxHandler] - ####################################################################

Lolodomo · June 23, 2019, 11:25am

Apparently, the opening of a session is failing for you but I can’t understand what could be wrong.

What version of OH and binding are you running ?

You must use the new binding which is included with 2.5. I don’t remember now if OH 2.4 is with the old or the new binding.

Lolodomo · June 23, 2019, 11:27am

Please enable the DEBUG logs for the binding: log:set DEBUG org.openhab.binding.freebox

Tr00d · June 23, 2019, 3:28pm

So, I am using version 2.4.0 of OpenHAB. Regarding the binding, I actually have no idea. I use the binding “Freebox Binding” on PaperUI but I don’t see a version anywhere.

Also, can you guide me a little bit for the logs? I’m not used to this for the moment… I use putty to connect on my Raspberry (with openhabian user) and I don’t know where to use the log command.

Thanks!

Lolodomo · June 23, 2019, 4:58pm

Connect to the openHAB server console and then run this command: bundle:list | grep Freebox
The result should look like this, you have the version and the date and hour the binding was compiled:

230 x Active x  80 x 2.5.0.201906222150    x openHAB Add-ons :: Bundles :: Freebox Binding

My refactoring of the binding was merged end of December 2018. So if you get a version with date 2019, that is a good starting point. If you have a version 2.4 dated in 2018, this is probably the old version of the binding and it is probably the reason why you have problems.

Lolodomo · June 23, 2019, 5:03pm

You can download the current version of the binding here: https://ci.openhab.org/job/openHAB2-Bundles/ws/openhab2-addons/bundles/org.openhab.binding.freebox/target/org.openhab.binding.freebox-2.5.0-SNAPSHOT.jar
Uninstall the binding provided with the distribution and then put the jar file in your folder named addons

Tr00d · June 23, 2019, 7:46pm

Sorry for the delay, I had to catch up with the Karaf console and I never used it before.
This is what I got from the command:
204 x Active x 80 x 2.4.0 x Freebox Binding
I don’t have the date but apparently I don’t have the latest version.

I will try tomorrow to get the latest one. I just have to put it inside the addons directory and the addon will be available on PaperUI?

Tr00d · June 23, 2019, 7:50pm

Sorry, long message incoming. I updated the logs as you suggested.
This is what I have when I update the Thing. The Token is valid but there is an issue when connecting to the API. Certificate issue?

2019-06-23 21:48:15.025 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Authorize job…

2019-06-23 21:48:15.154 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Can’t connect to mafreebox.freebox.fr with HTTPS

java.io.IOException: java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

at org.eclipse.smarthome.io.net.http.HttpUtil.executeUrlAndGetReponse(HttpUtil.java:259) ~[?:?]

at org.eclipse.smarthome.io.net.http.HttpUtil.executeUrl(HttpUtil.java:156) ~[?:?]

at org.eclipse.smarthome.io.net.http.HttpUtil.executeUrl(HttpUtil.java:131) ~[?:?]

at org.eclipse.smarthome.io.net.http.HttpUtil.executeUrl(HttpUtil.java:109) ~[?:?]

at org.eclipse.smarthome.io.net.http.HttpUtil.executeUrl(HttpUtil.java:90) ~[?:?]

at org.openhab.binding.freebox.internal.handler.FreeboxHandler.lambda$1(FreeboxHandler.java:287) ~[?:?]

at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:?]

at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:?]

at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) [?:?]

at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [?:?]

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:?]

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:?]

at java.lang.Thread.run(Thread.java:748) [?:?]

Caused by: java.util.concurrent.ExecutionException: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

at org.eclipse.jetty.client.util.FutureResponseListener.getResult(FutureResponseListener.java:118) ~[?:?]

at org.eclipse.jetty.client.util.FutureResponseListener.get(FutureResponseListener.java:101) ~[?:?]

at org.eclipse.jetty.client.HttpRequest.send(HttpRequest.java:684) ~[?:?]

at org.eclipse.smarthome.io.net.http.HttpUtil.executeUrlAndGetReponse(HttpUtil.java:250) ~[?:?]

... 12 more

Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1521) ~[?:?]

at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:528) ~[?:?]

at sun.security.ssl.SSLEngineImpl.readNetRecord(SSLEngineImpl.java:802) ~[?:?]

at sun.security.ssl.SSLEngineImpl.unwrap(SSLEngineImpl.java:766) ~[?:?]

at javax.net.ssl.SSLEngine.unwrap(SSLEngine.java:624) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:681) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.process(HttpReceiverOverHTTP.java:128) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.receive(HttpReceiverOverHTTP.java:73) ~[?:?]

at org.eclipse.jetty.client.http.HttpChannelOverHTTP.receive(HttpChannelOverHTTP.java:133) ~[?:?]

at org.eclipse.jetty.client.http.HttpConnectionOverHTTP.onFillable(HttpConnectionOverHTTP.java:155) ~[?:?]

at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:281) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:291) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:151) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:118) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:762) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:680) ~[?:?]

... 1 more

Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) ~[?:?]

at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1709) ~[?:?]

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:318) ~[?:?]

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310) ~[?:?]

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1654) ~[?:?]

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:233) ~[?:?]

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) ~[?:?]

at sun.security.ssl.Handshaker$1.run(Handshaker.java:970) ~[?:?]

at sun.security.ssl.Handshaker$1.run(Handshaker.java:967) ~[?:?]

at java.security.AccessController.doPrivileged(Native Method) ~[?:?]

at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1459) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:775) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.process(HttpReceiverOverHTTP.java:128) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.receive(HttpReceiverOverHTTP.java:73) ~[?:?]

at org.eclipse.jetty.client.http.HttpChannelOverHTTP.receive(HttpChannelOverHTTP.java:133) ~[?:?]

at org.eclipse.jetty.client.http.HttpConnectionOverHTTP.onFillable(HttpConnectionOverHTTP.java:155) ~[?:?]

at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:281) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:291) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:151) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:118) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:762) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:680) ~[?:?]

... 1 more

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397) ~[?:?]

at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302) ~[?:?]

at sun.security.validator.Validator.validate(Validator.java:262) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:281) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:136) ~[?:?]

at org.eclipse.smarthome.io.net.http.internal.ExtensibleTrustManager.checkServerTrusted(ExtensibleTrustManager.java:118) ~[?:?]

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1636) ~[?:?]

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:233) ~[?:?]

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) ~[?:?]

at sun.security.ssl.Handshaker$1.run(Handshaker.java:970) ~[?:?]

at sun.security.ssl.Handshaker$1.run(Handshaker.java:967) ~[?:?]

at java.security.AccessController.doPrivileged(Native Method) ~[?:?]

at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1459) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:775) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.process(HttpReceiverOverHTTP.java:128) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.receive(HttpReceiverOverHTTP.java:73) ~[?:?]

at org.eclipse.jetty.client.http.HttpChannelOverHTTP.receive(HttpChannelOverHTTP.java:133) ~[?:?]

at org.eclipse.jetty.client.http.HttpConnectionOverHTTP.onFillable(HttpConnectionOverHTTP.java:155) ~[?:?]

at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:281) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:291) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:151) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:118) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:762) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:680) ~[?:?]

... 1 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) ~[?:?]

at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) ~[?:?]

at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280) ~[?:?]

at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392) ~[?:?]

at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302) ~[?:?]

at sun.security.validator.Validator.validate(Validator.java:262) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:281) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:136) ~[?:?]

at org.eclipse.smarthome.io.net.http.internal.ExtensibleTrustManager.checkServerTrusted(ExtensibleTrustManager.java:118) ~[?:?]

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1636) ~[?:?]

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:233) ~[?:?]

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) ~[?:?]

at sun.security.ssl.Handshaker$1.run(Handshaker.java:970) ~[?:?]

at sun.security.ssl.Handshaker$1.run(Handshaker.java:967) ~[?:?]

at java.security.AccessController.doPrivileged(Native Method) ~[?:?]

at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1459) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$DecryptedEndPoint.fill(SslConnection.java:775) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.process(HttpReceiverOverHTTP.java:128) ~[?:?]

at org.eclipse.jetty.client.http.HttpReceiverOverHTTP.receive(HttpReceiverOverHTTP.java:73) ~[?:?]

at org.eclipse.jetty.client.http.HttpChannelOverHTTP.receive(HttpChannelOverHTTP.java:133) ~[?:?]

at org.eclipse.jetty.client.http.HttpConnectionOverHTTP.onFillable(HttpConnectionOverHTTP.java:155) ~[?:?]

at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:281) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection.onFillable(SslConnection.java:291) ~[?:?]

at org.eclipse.jetty.io.ssl.SslConnection$3.succeeded(SslConnection.java:151) ~[?:?]

at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:102) ~[?:?]

at org.eclipse.jetty.io.ChannelEndPoint$2.run(ChannelEndPoint.java:118) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:762) ~[?:?]

at org.eclipse.jetty.util.thread.QueuedThreadPool$2.run(QueuedThreadPool.java:680) ~[?:?]

... 1 more

2019-06-23 21:48:15.452 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Apptoken valide : [Dwhaad22N7Meu4sNPJbFO/8LwQhzhGy0AzM3CoisfoDIp6SundRztOUpCtUmzA0u]

2019-06-23 21:48:15.546 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Thing freebox:server:fb: error while opening a session

org.matmaul.freeboxos.FreeboxException: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at org.matmaul.freeboxos.internal.RestManager.execute(RestManager.java:158) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.execute(RestManager.java:165) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.get(RestManager.java:112) ~[?:?]

at org.matmaul.freeboxos.login.LoginManager.login(LoginManager.java:85) ~[?:?]

at org.matmaul.freeboxos.login.LoginManager.openSession(LoginManager.java:94) ~[?:?]

at org.openhab.binding.freebox.internal.handler.FreeboxHandler.authorize(FreeboxHandler.java:192) ~[?:?]

at org.openhab.binding.freebox.internal.handler.FreeboxHandler.lambda$1(FreeboxHandler.java:340) ~[?:?]

at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:?]

at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:?]

at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) [?:?]

at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [?:?]

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:?]

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:?]

at java.lang.Thread.run(Thread.java:748) [?:?]

Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) ~[?:?]

at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1946) ~[?:?]

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:316) ~[?:?]

at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:310) ~[?:?]

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1654) ~[?:?]

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:233) ~[?:?]

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) ~[?:?]

at sun.security.ssl.Handshaker.process_record(Handshaker.java:965) ~[?:?]

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064) ~[?:?]

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) ~[?:?]

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) ~[?:?]

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) ~[?:?]

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:261) ~[?:?]

at org.apache.http.impl.conn.HttpClientConnectionOperator.connect(HttpClientConnectionOperator.java:118) ~[?:?]

at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:314) ~[?:?]

at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:357) ~[?:?]

at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:218) ~[?:?]

at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:194) ~[?:?]

at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:85) ~[?:?]

at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:108) ~[?:?]

at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:186) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.execute(RestManager.java:155) ~[?:?]

... 13 more

Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:397) ~[?:?]

at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302) ~[?:?]

at sun.security.validator.Validator.validate(Validator.java:262) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124) ~[?:?]

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1631) ~[?:?]

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:233) ~[?:?]

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) ~[?:?]

at sun.security.ssl.Handshaker.process_record(Handshaker.java:965) ~[?:?]

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064) ~[?:?]

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) ~[?:?]

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) ~[?:?]

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) ~[?:?]

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:261) ~[?:?]

at org.apache.http.impl.conn.HttpClientConnectionOperator.connect(HttpClientConnectionOperator.java:118) ~[?:?]

at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:314) ~[?:?]

at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:357) ~[?:?]

at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:218) ~[?:?]

at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:194) ~[?:?]

at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:85) ~[?:?]

at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:108) ~[?:?]

at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:186) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.execute(RestManager.java:155) ~[?:?]

... 13 more

Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141) ~[?:?]

at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126) ~[?:?]

at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280) ~[?:?]

at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:392) ~[?:?]

at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:302) ~[?:?]

at sun.security.validator.Validator.validate(Validator.java:262) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229) ~[?:?]

at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:124) ~[?:?]

at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1631) ~[?:?]

at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:233) ~[?:?]

at sun.security.ssl.Handshaker.processLoop(Handshaker.java:1037) ~[?:?]

at sun.security.ssl.Handshaker.process_record(Handshaker.java:965) ~[?:?]

at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:1064) ~[?:?]

at sun.security.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1367) ~[?:?]

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1395) ~[?:?]

at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1379) ~[?:?]

at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:261) ~[?:?]

at org.apache.http.impl.conn.HttpClientConnectionOperator.connect(HttpClientConnectionOperator.java:118) ~[?:?]

at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:314) ~[?:?]

at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:357) ~[?:?]

at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:218) ~[?:?]

at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:194) ~[?:?]

at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:85) ~[?:?]

at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:108) ~[?:?]

at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:186) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106) ~[?:?]

at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.execute(RestManager.java:155) ~[?:?]

... 13 more

2019-06-23 21:48:15.636 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Thing freebox:server:fb: Check your app token in the thing configuration; opening session with blby1w1r.fbxos.fr:51777 using HTTPS API version 6.0 failed

==> /var/log/openhab2/events.log <==

2019-06-23 21:48:15.658 [hingStatusInfoChangedEvent] - ‘freebox:server:fb’ changed from OFFLINE to OFFLINE (CONFIGURATION_ERROR): Check your app token in the thing configuration; opening session with blby1w1r.fbxos.fr:51777 using HTTPS API version 6.0 failed

2019-06-23 21:48:15.664 [me.event.ThingUpdatedEvent] - Thing ‘freebox:server:fb’ has been updated.

Tr00d · June 23, 2019, 7:51pm

And this is the error message I have when I try to force the HTTP Api (useOnlyHttp=true):
2019-06-23 21:50:54.000 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Authorize job…
2019-06-23 21:50:54.069 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Apptoken valide : [Dwhaad22N7Meu4sNPJbFO/8LwQhzhGy0AzM3CoisfoDIp6SundRztOUpCtUmzA0u]
2019-06-23 21:50:56.015 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Thing freebox:server:fb: error while opening a session

org.matmaul.freeboxos.FreeboxException: org.codehaus.jackson.map.exc.UnrecognizedPropertyException: Unrecognized field “password_set” (Class org.matmaul.freeboxos.login.Session), not marked as ignorable

at [Source: java.util.zip.GZIPInputStream@1a17941; line: 1, column: 387] (through reference chain: org.matmaul.freeboxos.login.SessionResponse[“result”]->org.matmaul.freeboxos.login.Session[“password_set”])

at org.matmaul.freeboxos.internal.RestManager.execute(RestManager.java:173) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.post(RestManager.java:144) ~[?:?]

at org.matmaul.freeboxos.login.LoginManager.openSession(LoginManager.java:102) ~[?:?]

at org.openhab.binding.freebox.internal.handler.FreeboxHandler.authorize(FreeboxHandler.java:192) ~[?:?]

at org.openhab.binding.freebox.internal.handler.FreeboxHandler.lambda$1(FreeboxHandler.java:340) ~[?:?]

at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511) [?:?]

at java.util.concurrent.FutureTask.run(FutureTask.java:266) [?:?]

at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$201(ScheduledThreadPoolExecutor.java:180) [?:?]

at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:293) [?:?]

at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) [?:?]

at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) [?:?]

at java.lang.Thread.run(Thread.java:748) [?:?]

Caused by: org.codehaus.jackson.map.exc.UnrecognizedPropertyException: Unrecognized field “password_set” (Class org.matmaul.freeboxos.login.Session), not marked as ignorable

at [Source: java.util.zip.GZIPInputStream@1a17941; line: 1, column: 387] (through reference chain: org.matmaul.freeboxos.login.SessionResponse[“result”]->org.matmaul.freeboxos.login.Session[“password_set”])

at org.codehaus.jackson.map.exc.UnrecognizedPropertyException.from(UnrecognizedPropertyException.java:53) ~[?:?]

at org.codehaus.jackson.map.deser.StdDeserializationContext.unknownFieldException(StdDeserializationContext.java:267) ~[?:?]

at org.codehaus.jackson.map.deser.std.StdDeserializer.reportUnknownProperty(StdDeserializer.java:673) ~[?:?]

at org.codehaus.jackson.map.deser.std.StdDeserializer.handleUnknownProperty(StdDeserializer.java:659) ~[?:?]

at org.codehaus.jackson.map.deser.BeanDeserializer.handleUnknownProperty(BeanDeserializer.java:1365) ~[?:?]

at org.codehaus.jackson.map.deser.BeanDeserializer._handleUnknown(BeanDeserializer.java:725) ~[?:?]

at org.codehaus.jackson.map.deser.BeanDeserializer.deserializeFromObject(BeanDeserializer.java:703) ~[?:?]

at org.codehaus.jackson.map.deser.BeanDeserializer.deserialize(BeanDeserializer.java:580) ~[?:?]

at org.codehaus.jackson.map.deser.SettableBeanProperty.deserialize(SettableBeanProperty.java:299) ~[?:?]

at org.codehaus.jackson.map.deser.SettableBeanProperty$FieldProperty.deserializeAndSet(SettableBeanProperty.java:579) ~[?:?]

at org.codehaus.jackson.map.deser.BeanDeserializer.deserializeFromObject(BeanDeserializer.java:697) ~[?:?]

at org.codehaus.jackson.map.deser.BeanDeserializer.deserialize(BeanDeserializer.java:580) ~[?:?]

at org.codehaus.jackson.map.ObjectMapper._readMapAndClose(ObjectMapper.java:2732) ~[?:?]

at org.codehaus.jackson.map.ObjectMapper.readValue(ObjectMapper.java:1909) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.readValue(RestManager.java:122) ~[?:?]

at org.matmaul.freeboxos.internal.RestManager.execute(RestManager.java:165) ~[?:?]

... 11 more

2019-06-23 21:50:56.094 [DEBUG] [ebox.internal.handler.FreeboxHandler] - Thing freebox:server:fb: Check your app token in the thing configuration; opening session with mafreebox.freebox.fr using HTTP API version 6.0 failed

==> /var/log/openhab2/events.log <==

2019-06-23 21:50:56.100 [hingStatusInfoChangedEvent] - ‘freebox:server:fb’ changed from OFFLINE to OFFLINE (CONFIGURATION_ERROR): Check your app token in the thing configuration; opening session with mafreebox.freebox.fr using HTTP API version 6.0 failed

2019-06-23 21:50:56.126 [me.event.ThingUpdatedEvent] - Thing ‘freebox:server:fb’ has been updated.

Lolodomo · June 23, 2019, 8:06pm

I can see with your logs that you are running the old version of the binding that required an additional step for the certificate.
I can’t help more with this old version but of course I advice the new version which is working well.

Tr00d · June 24, 2019, 4:54pm

So, as requested, I uninstalled my version of the binding and I put the 2.5.0 in the addons directory. Then, I rebooted.
These are the messages I saw in the logs :
2019-06-24 18:52:24.723 [ERROR] [org.openhab.binding.freebox ] - FrameworkEvent ERROR - org.openhab.binding.freebox

org.osgi.framework.BundleException: Could not resolve module: org.openhab.binding.freebox [209]

Unresolved requirement: Import-Package: com.google.gson; version="[2.8.0,3.0.0)"

at org.eclipse.osgi.container.Module.start(Module.java:444) ~[?:?]

at org.eclipse.osgi.container.ModuleContainer$ContainerStartLevel.incStartLevel(ModuleContainer.java:1634) ~[?:?]

at org.eclipse.osgi.container.ModuleContainer$ContainerStartLevel.incStartLevel(ModuleContainer.java:1614) ~[?:?]

at org.eclipse.osgi.container.ModuleContainer$ContainerStartLevel.doContainerStartLevel(ModuleContainer.java:1585) ~[?:?]

at org.eclipse.osgi.container.ModuleContainer$ContainerStartLevel.dispatchEvent(ModuleContainer.java:1528) ~[?:?]

at org.eclipse.osgi.container.ModuleContainer$ContainerStartLevel.dispatchEvent(ModuleContainer.java:1) ~[?:?]

at org.eclipse.osgi.framework.eventmgr.EventManager.dispatchEvent(EventManager.java:230) [?:?]

at org.eclipse.osgi.framework.eventmgr.EventManager$EventThread.run(EventManager.java:340) [?:?]

2019-06-24 18:52:27.354 [WARN ] [org.apache.felix.fileinstall ] - Error while starting bundle: file:/usr/share/openhab2/addons/org.openhab.binding.freebox-2.5.0-SNAPSHOT.jar

org.osgi.framework.BundleException: Could not resolve module: org.openhab.binding.freebox [209]

Unresolved requirement: Import-Package: com.google.gson; version="[2.8.0,3.0.0)"

at org.eclipse.osgi.container.Module.start(Module.java:444) ~[?:?]

at org.eclipse.osgi.internal.framework.EquinoxBundle.start(EquinoxBundle.java:383) ~[?:?]

at org.apache.felix.fileinstall.internal.DirectoryWatcher.startBundle(DirectoryWatcher.java:1260) [10:org.apache.felix.fileinstall:3.6.4]

at org.apache.felix.fileinstall.internal.DirectoryWatcher.startBundles(DirectoryWatcher.java:1233) [10:org.apache.felix.fileinstall:3.6.4]

at org.apache.felix.fileinstall.internal.DirectoryWatcher.startAllBundles(DirectoryWatcher.java:1221) [10:org.apache.felix.fileinstall:3.6.4]

at org.apache.felix.fileinstall.internal.DirectoryWatcher.doProcess(DirectoryWatcher.java:515) [10:org.apache.felix.fileinstall:3.6.4]

at org.apache.felix.fileinstall.internal.DirectoryWatcher.process(DirectoryWatcher.java:365) [10:org.apache.felix.fileinstall:3.6.4]

at org.apache.felix.fileinstall.internal.DirectoryWatcher.run(DirectoryWatcher.java:316) [10:org.apache.felix.fileinstall:3.6.4]

Lolodomo · June 24, 2019, 5:03pm

In this case, install a 2.5 snapshot or wait for an official 2.5 version.

Tr00d · June 25, 2019, 5:19am

Okay, I will wait then.
Thanks for your help.