Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

https://drazzy.com/package_drazzy.com_index.json - SSL-certificate expired 3 days ago #885

Open
realvinx opened this issue Oct 24, 2024 · 25 comments

Comments

@realvinx
Copy link

https://drazzy.com/package_drazzy.com_index.json - SSL-certificate expired 3 days ago

Please renew your certifiacte, Arduino IDE is complaining and I don't know how to skip the SSL check in Arduino IDE.

@Jaepe
Copy link

Jaepe commented Oct 25, 2024

Until they fix this you can install manually. install.md
In your sketchbook location make a "hardware" folder if there isn't one already, then extract the zip from the repo into that folder. For me it looked like this "~/Arduino/hardware/ATTinyCore-1.5.2"

@Jaepe
Copy link

Jaepe commented Oct 25, 2024

Same as Issue 869

@ArminJo
Copy link
Contributor

ArminJo commented Oct 30, 2024

@SpenceKonde
Hi Spence,
thanks for your support of the small AVR CPU's 🥇
But why not simple host the json on Github like e.g. ESP32 and other do?
A one time change is much better than all the breaks in availability.

https://raw.githubusercontent.com/espressif/arduino-esp32/gh-pages/package_esp32_index.json
https://raw.githubusercontent.com/stm32duino/BoardManagerFiles/main/package_stmicroelectronics_index.json
https://raw.githubusercontent.com/sparkfun/Arduino_Boards/master/IDE_Board_Manager/package_sparkfun_index.json

@LordNoodles
Copy link

I downloaded and extracted the zip. I now have a folder named ATTinyCore-1.5.2 and within it a folder of the same name.

which of the two do I copy to Documents/Arduino/hardware ?

@realvinx
Copy link
Author

realvinx commented Oct 31, 2024

I downloaded and extracted the zip. I now have a folder named ATTinyCore-1.5.2 and within it a folder of the same name.

which of the two do I copy to Documents/Arduino/hardware ?

obviously the "last one" which has the files in it, f.e. on Windows put it like this:
C:\Users<username>\Documents\Arduino\hardware\ATTinyCore-1.5.2

I have a newer version downloaded and put it here:
C:\Users<username>\Documents\Arduino\hardware\ATTinyCore-2.0.0-dev

@LordNoodles
Copy link

thanks, i guessed correctly but you can't tell me you've never seen nested folders of the same name in some file structures. shit happens

@SpenceKonde
Copy link
Owner

This issue is known. I am tryhing to locate the priviate key that I need to log into the machines, however this is challenging as the server they are backed up on is on the fritz (it's the fucking power connector, as alwatys. But the result is that only 20-40% of the time does it even complete the boot process before the power glitches and it turns off, and the laptop computer they were also located on failed not long ago. I then revived again while using a loaner computer, but I've serched EVERYEWHERE and can't find it.
So as soon as I can locate the all important certificate (if I cannot, this project maty have to be shut down entirely becasuye I am unspeaklably sick of reconfiguring webservers tyop do the exact same tyhing

@ArminJo
Copy link
Contributor

ArminJo commented Nov 1, 2024

So why not avoid half the trouble and at least put the json on Github?

@SpenceKonde
Copy link
Owner

So why not avoid half the trouble and at least put the json on Github?

I'd sooner kill myself than admit such sickening failure. Never suggest that to me again!

And besides I have no faith in those fuckers either. Every time IO've relied on an online service, year or two down the road, they yank it out from under my feet, or they secretly increase their monthly fees by an order of magnitude. I am still soo pissed at that registrar
Took me for THOUSANDS without my knowledge

@brian-gee
Copy link

Manual install does not work either. Getting an "Error Fetching Resource".

@lsellens
Copy link

lsellens commented Nov 5, 2024

So why not avoid half the trouble and at least put the json on Github?

I'd sooner kill myself than admit such sickening failure. Never suggest that to me again!

And besides I have no faith in those fuckers either. Every time IO've relied on an online service, year or two down the road, they yank it out from under my feet, or they secretly increase their monthly fees by an order of magnitude. I am still soo pissed at that registrar Took me for THOUSANDS without my knowledge

You could always just mirror it on github, so if your server or you dies it will live on...

@terrypin999
Copy link

terrypin999 commented Nov 6, 2024

I downloaded and extracted the zip. I now have a folder named ATTinyCore-1.5.2 and within it a folder of the same name.

which of the two do I copy to Documents/Arduino/hardware ?

I'm confused about this too (as I usually am whenever I trouble-shoot issues with this core.) How/where did you get a recent folder called ATTinyCore-1.5.2?

The lowest extracted subfolder from the latest ZIP download I've just done from
https://github.com/SpenceKonde/ATTinyCore
is named 'ATTinyCore-2.0.0-devThis-is-the-head-submit-PRs-against-this' . The folder's properties identifies it as version 2.0.0. Did you/others just rename it to the much shorter and more sensible name?

Adding to my confusion (probably down to me - not rare!) is that this folder has a size of 31,774,918 bytes, but an earlier version
(April) of exactly the same name is 63,545,738, suspiciously close to twice the size.

Given the license matter, can one of the experts also advise if I should still have this, not the original, in Preferences please?
https://descartes.net/package_drazzy.com_index.json

Terry, hobbyist end user

@per1234
Copy link
Contributor

per1234 commented Nov 7, 2024

We are supporting @terrypin999's request over on Arduino Forum:

https://forum.arduino.cc/t/confuision-again-re-spencekonde-attinycore-status/1319511

@SpenceKonde
Copy link
Owner

SpenceKonde commented Nov 8, 2024 via email

@per1234 per1234 mentioned this issue Nov 8, 2024
@gnif
Copy link

gnif commented Nov 8, 2024

really sounds like you're in over your head here, perhaps it's time to relinquish control to someone that can take this off your plate. TBH using something like https://github.com/acmesh-official/acme.sh makes letsEncrypt certs, and their auto renewal a piece of cake.

Heck, I'd be happy to host it all for you for the sake of the community, I own servers, I have the bandwidth, and I operate a Linux server management and hosting company. Just saying.

@jvasileff
Copy link

I think that's an uncharitable take, @gnif. No one is above splitting their attention with other responsibilities, vacation, time-off, etc. And the solution to service unavailability isn't to turn over hosting to some other single individual.

As others have mentioned, I think hosting on Github would be a great solution. Online services may fail or change policies, but less often than problems generally occur with individual servers. And, if additional project maintainers are brought on board, hosting on Github would allow others to help out when necessary.

@kiwi64ajs
Copy link

Until the SSL issue is resolved, the Package JSON file can be accessed here: https://web.archive.org/web/20240701151914/https://drazzy.com/package_drazzy.com_index.json

@per1234
Copy link
Contributor

per1234 commented Nov 13, 2024

@kiwi64ajs did you test it? That won't work for multiple reasons:

The first is that is the URL of the Wayback Machine web page for the file, not for the JSON file alone. Arduino IDE needs to download a JSON file it can parse, but if it downloads the page from that URL it will have a bunch of HTML in addition to the JSON content.

We can get around that by using this feature of Wayback Machine:

The following flags can be appended to the datetime field to modify the format in which the archived content is displayed

[...]

  • if_ or fw_ Iframe - return document formatted normally, but without the navigational toolbar.

so the URL would be:

https://web.archive.org/web/20240701151914if_/https://drazzy.com/package_drazzy.com_index.json

(note the added if_)

Unfortunately we now run into yet another problem, which is that Wayback Machine has replaced all the original URLs in the file with the Wayback Machine equivalent URLs. For example, this line in the original file:

https://github.com/SpenceKonde/ReleaseScripts/blob/611e716c61335c1315cf83acff738b4d2eb67525/package_drazzy.com_index.json#L1765

"url": "https://azduino.com/bin/micronucleus/micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2"

Has been changed to this:

"url": "https://web.archive.org/web/20240701151914/https://azduino.com/bin/micronucleus/micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2"

That would be great, except that these URLs download the Wayback Machine web page for the file instead of the file itself, causing the installation of ATTinyCore to fail with an error like this:

Installing ATTinyCore:micronucleus@2.5-azd1b
Failed to install platform: 'ATTinyCore:avr:1.5.2'.
Error: 13 INTERNAL: Cannot install tool ATTinyCore:micronucleus@2.5-azd1b: testing local archive integrity: testing archive size: fetched archive size differs from size specified in index: 12940 != 431381

(because the ATTinyCore:micronucleus@2.5-azd1b download URL pointed to a 12940 byte web page instead of the 431381 byte micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2 file)

It is possible to avoid the modification of URLs in the file by using this feature of Wayback Machine:

id_ Identity - perform no alterations of the original resource, return it as it was archived.

so the URL would be:

https://web.archive.org/web/20240701151914id_/https://drazzy.com/package_drazzy.com_index.json

(note the added id_)

But now the installation of ATTinyCore just fails with a different error. For example, installing on Linux:

ATTinyCore:micronucleus@2.5-azd1b
Failed to install platform: 'ATTinyCore:avr:1.5.2'.
Error: 2 UNKNOWN: Get "https://azduino.com/bin/micronucleus/micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-11-13T05:06:35-08:00 is after 2024-10-22T18:59:06Z

The reason is that now the URLs in the file point to the original locations and this file is hosted on azduino.com, which has the same problem of an expired certificate as drazzy.com. And anyway, if all we needed was another source for the hosted JSON file alone we could just use the "raw" URL for the source file in the SpenceKonde/ReleaseScripts GitHub repository:

https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

@kiwi64ajs
Copy link

@kiwi64ajs did you test it? That won't work for multiple reasons:

The test I did was to put that Web Archive URL for the JSON into my Arduino IDE, then I restarted it, and it didn't complain.

However, because I was already on the latest version, it didn't offer to upgrade, which didn't surprise me.

What I didn't do was force a downgrade to a previous version and then upgrade to the latest.

I mistakenly thought that solution might have been a low-effort workaround until you could resolve the core SSL issue on https://drazzy.com/.

And anyway, if all we needed was another source for the hosted JSON file alone we could just use the "raw" URL for the source file in the SpenceKonde/ReleaseScripts GitHub repository:

https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

Yes, awesome, that works - why didn't I think of that... ;)

I can downgrade and upgrade that package and it all seems to work fine - thanks

Regards
Alex Shepherd

@Chewhacker
Copy link

Hello, hoping for a pointer as I'm new to Arduino...

I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json and then have gone to board manager to install it, and get an error.
image
Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated.

@fsievers
Copy link

You can also Download the JSON file to your local machine and change the URL in the preference to something like file:///home/USERNAME/foo/bar/package_drazzy.com_index.json. The drawback is that you have to manually update the file if it change. But it would work around any SSL verifcation problems.

@kiwi64ajs
Copy link

Hello, hoping for a pointer as I'm new to Arduino...

I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated.
That is a local install error of some kind.

What Operating System and Version are you running? What version of Arduino IDE are you using?

@Chewhacker
Copy link

Chewhacker commented Nov 14, 2024

Hello, hoping for a pointer as I'm new to Arduino...
I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated.
That is a local install error of some kind.

What Operating System and Version are you running? What version of Arduino IDE are you using?

Thanks so much Alex, I'm using Windows 11 23H2 and I am able to install up to version 1.3.0. Anything above that (when I try to update) just gives an error message.

@nomakewan
Copy link

Hello, hoping for a pointer as I'm new to Arduino...

I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json and then have gone to board manager to install it, and get an error. Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated.

This is happening to you because the certificate for azduino.com has expired, and the micronucleus toolchain is hosted on that website. Fixing the expired JSON won't help you.

@realvinx
Copy link
Author

You can install manually without the boards-json-url.... see the second comment from Jaepe in this thread !

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests