ATTinyCore icon indicating copy to clipboard operation
ATTinyCore copied to clipboard

https://drazzy.com/package_drazzy.com_index.json - SSL-certificate expired 3 days ago

Open realvinx opened this issue 1 year ago • 36 comments

https://drazzy.com/package_drazzy.com_index.json - SSL-certificate expired 3 days ago

Please renew your certifiacte, Arduino IDE is complaining and I don't know how to skip the SSL check in Arduino IDE.

realvinx avatar Oct 24 '24 22:10 realvinx

Until they fix this you can install manually. install.md In your sketchbook location make a "hardware" folder if there isn't one already, then extract the zip from the repo into that folder. For me it looked like this "~/Arduino/hardware/ATTinyCore-1.5.2"

Jaepe avatar Oct 25 '24 03:10 Jaepe

Same as Issue 869

Jaepe avatar Oct 25 '24 03:10 Jaepe

@SpenceKonde Hi Spence, thanks for your support of the small AVR CPU's 🥇 But why not simple host the json on Github like e.g. ESP32 and other do? A one time change is much better than all the breaks in availability.

https://raw.githubusercontent.com/espressif/arduino-esp32/gh-pages/package_esp32_index.json https://raw.githubusercontent.com/stm32duino/BoardManagerFiles/main/package_stmicroelectronics_index.json https://raw.githubusercontent.com/sparkfun/Arduino_Boards/master/IDE_Board_Manager/package_sparkfun_index.json

ArminJo avatar Oct 30 '24 10:10 ArminJo

I downloaded and extracted the zip. I now have a folder named ATTinyCore-1.5.2 and within it a folder of the same name.

which of the two do I copy to Documents/Arduino/hardware ?

LordNoodles avatar Oct 31 '24 01:10 LordNoodles

I downloaded and extracted the zip. I now have a folder named ATTinyCore-1.5.2 and within it a folder of the same name.

which of the two do I copy to Documents/Arduino/hardware ?

obviously the "last one" which has the files in it, f.e. on Windows put it like this: C:\Users<username>\Documents\Arduino\hardware\ATTinyCore-1.5.2

I have a newer version downloaded and put it here: C:\Users<username>\Documents\Arduino\hardware\ATTinyCore-2.0.0-dev

realvinx avatar Oct 31 '24 19:10 realvinx

thanks, i guessed correctly but you can't tell me you've never seen nested folders of the same name in some file structures. shit happens

LordNoodles avatar Oct 31 '24 23:10 LordNoodles

This issue is known. I am tryhing to locate the priviate key that I need to log into the machines, however this is challenging as the server they are backed up on is on the fritz (it's the fucking power connector, as alwatys. But the result is that only 20-40% of the time does it even complete the boot process before the power glitches and it turns off, and the laptop computer they were also located on failed not long ago. I then revived again while using a loaner computer, but I've serched EVERYEWHERE and can't find it. So as soon as I can locate the all important certificate (if I cannot, this project maty have to be shut down entirely becasuye I am unspeaklably sick of reconfiguring webservers tyop do the exact same tyhing

SpenceKonde avatar Nov 01 '24 12:11 SpenceKonde

So why not avoid half the trouble and at least put the json on Github?

ArminJo avatar Nov 01 '24 12:11 ArminJo

So why not avoid half the trouble and at least put the json on Github?

I'd sooner kill myself than admit such sickening failure. Never suggest that to me again!

And besides I have no faith in those fuckers either. Every time IO've relied on an online service, year or two down the road, they yank it out from under my feet, or they secretly increase their monthly fees by an order of magnitude. I am still soo pissed at that registrar Took me for THOUSANDS without my knowledge

SpenceKonde avatar Nov 01 '24 13:11 SpenceKonde

Manual install does not work either. Getting an "Error Fetching Resource".

brian-gee avatar Nov 05 '24 00:11 brian-gee

So why not avoid half the trouble and at least put the json on Github?

I'd sooner kill myself than admit such sickening failure. Never suggest that to me again!

And besides I have no faith in those fuckers either. Every time IO've relied on an online service, year or two down the road, they yank it out from under my feet, or they secretly increase their monthly fees by an order of magnitude. I am still soo pissed at that registrar Took me for THOUSANDS without my knowledge

You could always just mirror it on github, so if your server or you dies it will live on...

lsellens avatar Nov 05 '24 13:11 lsellens

I downloaded and extracted the zip. I now have a folder named ATTinyCore-1.5.2 and within it a folder of the same name.

which of the two do I copy to Documents/Arduino/hardware ?

I'm confused about this too (as I usually am whenever I trouble-shoot issues with this core.) How/where did you get a recent folder called ATTinyCore-1.5.2?

The lowest extracted subfolder from the latest ZIP download I've just done from https://github.com/SpenceKonde/ATTinyCore is named 'ATTinyCore-2.0.0-devThis-is-the-head-submit-PRs-against-this' . The folder's properties identifies it as version 2.0.0. Did you/others just rename it to the much shorter and more sensible name?

Adding to my confusion (probably down to me - not rare!) is that this folder has a size of 31,774,918 bytes, but an earlier version (April) of exactly the same name is 63,545,738, suspiciously close to twice the size.

Given the license matter, can one of the experts also advise if I should still have this, not the original, in Preferences please? https://descartes.net/package_drazzy.com_index.json

Terry, hobbyist end user

terrypin999 avatar Nov 06 '24 12:11 terrypin999

We are supporting @terrypin999's request over on Arduino Forum:

https://forum.arduino.cc/t/confuision-again-re-spencekonde-attinycore-status/1319511

per1234 avatar Nov 07 '24 09:11 per1234

I have bee. aware of this issue since it happ[ened however until completing the next phase of work on my tax arrears ()not inability to pay, inability to calculate how much to pay them, and irt tookYRARS TO FIND A prepaRERE who qouylsn'r juqr say "Well give me X, Y amd Z and I can get thyme prepared in a jiffy' "I don't know X Y oer Z" "Then you nee3d to find thaT OUT, io CAN]T HELP YOU WITHOUT THAT. I DON'T EVEN KNOW WHAT THOSE THINGS Are! i AM AN ENGINEER! i AM NOT AN ACCOUNTANT! Finally I found a more helpful one, buty getttiering the data has bneen why I've been so absent for a year.

The IRS is threatening to seize assets and charge me with tax evasio until I get all ytjis sorted ouit so any time there is something to do on that, I need to 100% instqantly dr0p all other activity and focu on that; I don't want to go to jail and I don'ty want to have my worldly possessions lost. When that jhappens befopre the cert that I jhave configured to autorenw (burt which does't) happens to happening when I have a Stay-Out-Of-Jail priority, ptohibity myelfg from doing anything else otyherwise w2el;l, thaty's how I got 7 years behunbd. ,

On Fri, Nov 1, 2024 at 8:17 AM Armin @.***> wrote:

So why not avoid half the trouble and at least put the json on Github?

— Reply to this email directly, view it on GitHub https://github.com/SpenceKonde/ATTinyCore/issues/885#issuecomment-2451781121, or unsubscribe https://github.com/notifications/unsubscribe-auth/ABTXEWYBLRTM3GLIAGQASN3Z6NWMFAVCNFSM6AAAAABQSBIYEGVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDINJRG44DCMJSGE . You are receiving this because you were mentioned.Message ID: @.***>

--


Spence Konde Azzy’S Electronics

New products! Check them out at tindie.com/stores/DrAzzy GitHub: github.com/SpenceKonde ATTinyCore https://github.com/SpenceKonde/ATTinyCore: Arduino support for all pre-2016 tinyAVR with >2k flash! megaTinyCore https://github.com/SpenceKonde/megaTinyCore: Arduino support for all post-2016 tinyAVR parts! DxCore https://github.com/SpenceKonde/DxCore: Arduino support for the AVR Dx-series parts, the latest and greatest from Microchip! Contact: @.***

SpenceKonde avatar Nov 08 '24 07:11 SpenceKonde

really sounds like you're in over your head here, perhaps it's time to relinquish control to someone that can take this off your plate. TBH using something like https://github.com/acmesh-official/acme.sh makes letsEncrypt certs, and their auto renewal a piece of cake.

Heck, I'd be happy to host it all for you for the sake of the community, I own servers, I have the bandwidth, and I operate a Linux server management and hosting company. Just saying.

gnif avatar Nov 08 '24 11:11 gnif

I think that's an uncharitable take, @gnif. No one is above splitting their attention with other responsibilities, vacation, time-off, etc. And the solution to service unavailability isn't to turn over hosting to some other single individual.

As others have mentioned, I think hosting on Github would be a great solution. Online services may fail or change policies, but less often than problems generally occur with individual servers. And, if additional project maintainers are brought on board, hosting on Github would allow others to help out when necessary.

jvasileff avatar Nov 08 '24 18:11 jvasileff

Until the SSL issue is resolved, the Package JSON file can be accessed here: https://web.archive.org/web/20240701151914/https://drazzy.com/package_drazzy.com_index.json

kiwi64ajs avatar Nov 13 '24 09:11 kiwi64ajs

@kiwi64ajs did you test it? That won't work for multiple reasons:

The first is that is the URL of the Wayback Machine web page for the file, not for the JSON file alone. Arduino IDE needs to download a JSON file it can parse, but if it downloads the page from that URL it will have a bunch of HTML in addition to the JSON content.

We can get around that by using this feature of Wayback Machine:

The following flags can be appended to the datetime field to modify the format in which the archived content is displayed

[...]

  • if_ or fw_ Iframe - return document formatted normally, but without the navigational toolbar.

so the URL would be:

https://web.archive.org/web/20240701151914if_/https://drazzy.com/package_drazzy.com_index.json

(note the added if_)

Unfortunately we now run into yet another problem, which is that Wayback Machine has replaced all the original URLs in the file with the Wayback Machine equivalent URLs. For example, this line in the original file:

https://github.com/SpenceKonde/ReleaseScripts/blob/611e716c61335c1315cf83acff738b4d2eb67525/package_drazzy.com_index.json#L1765

"url": "https://azduino.com/bin/micronucleus/micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2"

Has been changed to this:

"url": "https://web.archive.org/web/20240701151914/https://azduino.com/bin/micronucleus/micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2"

That would be great, except that these URLs download the Wayback Machine web page for the file instead of the file itself, causing the installation of ATTinyCore to fail with an error like this:

Installing ATTinyCore:[email protected]
Failed to install platform: 'ATTinyCore:avr:1.5.2'.
Error: 13 INTERNAL: Cannot install tool ATTinyCore:[email protected]: testing local archive integrity: testing archive size: fetched archive size differs from size specified in index: 12940 != 431381

(because the ATTinyCore:[email protected] download URL pointed to a 12940 byte web page instead of the 431381 byte micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2 file)

It is possible to avoid the modification of URLs in the file by using this feature of Wayback Machine:

id_ Identity - perform no alterations of the original resource, return it as it was archived.

so the URL would be:

https://web.archive.org/web/20240701151914id_/https://drazzy.com/package_drazzy.com_index.json

(note the added id_)

But now the installation of ATTinyCore just fails with a different error. For example, installing on Linux:

ATTinyCore:[email protected]
Failed to install platform: 'ATTinyCore:avr:1.5.2'.
Error: 2 UNKNOWN: Get "https://azduino.com/bin/micronucleus/micronucleus-cli-2.5-azd1-x86_64-linux-gnu.tar.bz2": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: current time 2024-11-13T05:06:35-08:00 is after 2024-10-22T18:59:06Z

The reason is that now the URLs in the file point to the original locations and this file is hosted on azduino.com, which has the same problem of an expired certificate as drazzy.com. And anyway, if all we needed was another source for the hosted JSON file alone we could just use the "raw" URL for the source file in the SpenceKonde/ReleaseScripts GitHub repository:

https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

per1234 avatar Nov 13 '24 13:11 per1234

@kiwi64ajs did you test it? That won't work for multiple reasons:

The test I did was to put that Web Archive URL for the JSON into my Arduino IDE, then I restarted it, and it didn't complain.

However, because I was already on the latest version, it didn't offer to upgrade, which didn't surprise me.

What I didn't do was force a downgrade to a previous version and then upgrade to the latest.

I mistakenly thought that solution might have been a low-effort workaround until you could resolve the core SSL issue on https://drazzy.com/.

And anyway, if all we needed was another source for the hosted JSON file alone we could just use the "raw" URL for the source file in the SpenceKonde/ReleaseScripts GitHub repository:

https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

Yes, awesome, that works - why didn't I think of that... ;)

I can downgrade and upgrade that package and it all seems to work fine - thanks

Regards Alex Shepherd

kiwi64ajs avatar Nov 13 '24 22:11 kiwi64ajs

Hello, hoping for a pointer as I'm new to Arduino...

I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json and then have gone to board manager to install it, and get an error. image Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated.

Chewhacker avatar Nov 14 '24 04:11 Chewhacker

You can also Download the JSON file to your local machine and change the URL in the preference to something like file:///home/USERNAME/foo/bar/package_drazzy.com_index.json. The drawback is that you have to manually update the file if it change. But it would work around any SSL verifcation problems.

fsievers avatar Nov 14 '24 07:11 fsievers

Hello, hoping for a pointer as I'm new to Arduino...

I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated. That is a local install error of some kind.

What Operating System and Version are you running? What version of Arduino IDE are you using?

kiwi64ajs avatar Nov 14 '24 08:11 kiwi64ajs

Hello, hoping for a pointer as I'm new to Arduino... I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json

Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated. That is a local install error of some kind.

What Operating System and Version are you running? What version of Arduino IDE are you using?

Thanks so much Alex, I'm using Windows 11 23H2 and I am able to install up to version 1.3.0. Anything above that (when I try to update) just gives an error message.

Chewhacker avatar Nov 14 '24 09:11 Chewhacker

Hello, hoping for a pointer as I'm new to Arduino...

I used https://raw.githubusercontent.com/SpenceKonde/ReleaseScripts/refs/heads/master/package_drazzy.com_index.json and then have gone to board manager to install it, and get an error. Is this because I need to select a lower version than 1.5.2? I can't work it out :-( Any advice appreciated.

This is happening to you because the certificate for azduino.com has expired, and the micronucleus toolchain is hosted on that website. Fixing the expired JSON won't help you.

nomakewan avatar Nov 17 '24 17:11 nomakewan

You can install manually without the boards-json-url.... see the second comment from Jaepe in this thread !

realvinx avatar Nov 17 '24 23:11 realvinx

I don't want to do it here because I don't think issue reports are an appropriate place for providing technical support to users, but if anyone wants help installing ATTinyCore you are welcome to post over on Arduino Forum:

https://forum.arduino.cc/c/software/ide-2-x/93

per1234 avatar Nov 22 '24 20:11 per1234

problem still exists. however, its expired. not missing. it seems like there's a misunderstanding. if it is missing, there would be a different error, I believe. if its expired like the error states, it needs renewal. but better yet would be to accept that machines fail and having more alternative options is always a good idea. even though you may not like putting the files here, that could be one of a few options. also, github is not the only git compatible repository site. there's one called git in fact. running a server solo is nearly impossible these days without using cloud compute. i do not expect anyone to do so without knowing what they're in for. doing so on the intra-net is different though. simply put, "don't put your eggs in one basket."

edit: is there a way for the community to move the ones on your server to a different place and still be accessible by the install? haven't looked yet, but maybe something in the .json...

jmerc77 avatar Nov 27 '24 01:11 jmerc77

I created a temporary solution by changing the package json file so that it doesn't use the https but rather http for the tools it needs to downoad. It is not the best solution but it can be used as a temporary fix: https://raw.githubusercontent.com/semir-t/attinycore/refs/heads/main/package_drazzy.com_index.json

I think that hosting this on github is a way to go forward!

semir-t avatar Nov 27 '24 15:11 semir-t

Still getting Error: 2 UNKNOWN: Get "https://azduino.com/bin/micronucleus/micronucleus-cli-2.5-azd1-x86_64-apple-darwin.tar.bz2": tls: failed to verify certificate: x509: certificate has expired or is not yet valid: “azduino.com” certificate is expired but https://raw.githubusercontent.com/per1234/ReleaseScripts/refs/heads/provisional-package-index/package_drazzy.com_index.json worked for me.

philippeowagner avatar Nov 27 '24 23:11 philippeowagner

anyone thought of forking and adding a fix? may work as a different workaround that would be more secure. i thought of doing this but can't be interrupted to do that now. plus, he's not the only one with down pc's. my main pc is literally scrap parts until i finish building my early Christmas present.

edit:

  1. its a pc :-)
  2. after forking it would need an entry to Arduino board db added.

jmerc77 avatar Nov 28 '24 03:11 jmerc77