TLS handshake error - piaware not reporting

fuzytech · December 26, 2021, 3:00am

Stopped working Christmas Eve and hasn’t started again. Tried rebooting and updating the CA-Certs but this is all I get. Any ideas beside wiping and reloading?

pi@piaware:~ $ sudo systemctl status piaware
● piaware.service - FlightAware ADS-B uploader
Loaded: loaded (/lib/systemd/system/piaware.service; enabled; vendor preset: enabled)
Active: active (running) since Sun 2021-12-26 02:52:58 UTC; 4min 12s ago
Docs: PiAware - ADS-B and MLAT Receiver - FlightAware
Main PID: 1896 (piaware)
CGroup: /system.slice/piaware.service
├─1896 /usr/bin/piaware -p /run/piaware/piaware.pid -plainlog -statusfile /run/piaware/status.json
└─1920 /usr/lib/piaware/helpers/faup1090 --net-bo-ipaddr localhost --net-bo-port 30005 --stdout

Dec 26 02:56:12 piaware piaware[1896]: AkB+sh3+9Uw2aNXqNEAoq6ejDVm7bPkHacQy7SvWQr5xDUGFlV44rmiYcws06kty
Dec 26 02:56:12 piaware piaware[1896]: vhxYdRON+5hdNDNJI4AZ2AK/i5YfvT0UzH5gJVjQegz2QbTTu1igIgdfqRpg8WRF
Dec 26 02:56:12 piaware piaware[1896]: 2I4WNEwSg5NTwDtxNnTkIC94F/3MzXtm/x7/5OCmg/7reX58bV58kTJULLBZaigy
Dec 26 02:56:12 piaware piaware[1896]: AfNLeSYyPG0aWvMKTWPVedrj8rX2+DFALWylJllW1ibnQmUAirHSbc1+1rBOkOqm
Dec 26 02:56:12 piaware piaware[1896]: siSHESsHrp3DP7hsLrW/uRnn3C71Vhw0Gm1vMfrl1JGsBWyi9nQfLG8=
Dec 26 02:56:12 piaware piaware[1896]: -----END CERTIFICATE-----
Dec 26 02:56:12 piaware piaware[1896]: TLS alert (write): unknown CA
Dec 26 02:56:12 piaware piaware[1896]: TLS error: certificate verify failed
Dec 26 02:56:12 piaware piaware[1896]: TLS handshake with adept server at 206.253.84.198/1200 failed: handshake failed: certificate verify failed
Dec 26 02:56:12 piaware piaware[1896]: reconnecting in 70 seconds…

obj · December 26, 2021, 5:35am

Please provide more logging leading up to the error (see /var/log/piaware.log)

note that piaware uses CA information packaged directly in the piaware package, not the system-wide CA database.

fuzytech · December 26, 2021, 5:42am

Dec 24 11:23:37 piaware piaware[468]: 9577172 msgs recv'd from dump1090-fa (22 in last 5m); 5865657 msgs sent to FlightAware
Dec 24 11:28:37 piaware piaware[468]: 9577194 msgs recv'd from dump1090-fa (22 in last 5m); 5865679 msgs sent to FlightAware
Dec 24 11:33:37 piaware piaware[468]: 9577205 msgs recv'd from dump1090-fa (11 in last 5m); 5865690 msgs sent to FlightAware
Dec 24 11:37:31 piaware piaware[468]: timed out waiting for alive message from FlightAware, reconnecting...
Dec 24 11:37:31 piaware piaware[468]: reconnecting in 6 seconds...
Dec 24 11:37:37 piaware piaware[468]: Connecting to FlightAware adept server at piaware.flightaware.com/1200
Dec 24 11:37:37 piaware piaware[468]: Connection with adept server at piaware.flightaware.com/1200 established
Dec 24 11:37:37 piaware piaware[468]: TLS verify failed: unable to get local issuer certificate
Dec 24 11:37:37 piaware piaware[468]: Failing certificate:
Dec 24 11:37:37 piaware piaware[468]:   sha1_hash: B325049DC60254F7F0505B74A217F02D2FC5550C
Dec 24 11:37:37 piaware piaware[468]:   subject: CN=*.flightaware.com,OU=Operations,O=FlightAware LLC,L=Houston,ST=Texas,C=US
Dec 24 11:37:37 piaware piaware[468]:                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   \
Dec 24 11:37:37 piaware piaware[468]:   issuer: emailAddress=support@fortinet.com,CN=FG1K2D3I16801699,OU=Certificate Authority,O=Fortinet,L=Sunnyvale,ST=California,C=US
Dec 24 11:37:37 piaware piaware[468]:   notBefore: Sep  1 00:00:00 2018 GMT
Dec 24 11:37:37 piaware piaware[468]:   notAfter: Oct  2 00:23:26 2024 GMT
Dec 24 11:37:37 piaware piaware[468]:   serial: 11D189CB31E17ECA
Dec 24 11:37:37 piaware piaware[468]:   certificate: -----BEGIN CERTIFICATE-----
Dec 24 11:37:37 piaware piaware[468]: MIIRZTCCEE2gAwIBAgIIEdGJyzHhfsowDQYJKoZIhvcNAQELBQAwgakxCzAJBgNV
Dec 24 11:37:37 piaware piaware[468]: BAYTAlVTMRMwEQYDVQQIDApDYWxpZm9ybmlhMRIwEAYDVQQHDAlTdW5ueXZhbGUx
Dec 24 11:37:37 piaware piaware[468]: ETAPBgNVBAoMCEZvcnRpbmV0MR4wHAYDVQQLDBVDZXJ0aWZpY2F0ZSBBdXRob3Jp
Dec 24 11:37:37 piaware piaware[468]: dHkxGTAXBgNVBAMMEEZHMUsyRDNJMTY4MDE2OTkxIzAhBgkqhkiG9w0BCQEWFHN1
Dec 24 11:37:37 piaware piaware[468]: cHBvcnRAZm9ydGluZXQuY29tMB4XDTE4MDkwMTAwMDAwMFoXDTI0MTAwMjAwMjMy
Dec 24 11:37:37 piaware piaware[468]: Nlowgg38MYINizCCDYcGA1UEBhOCDX5VUyAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:37 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:37 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:37 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:37 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:37 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:37 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
Dec 24 11:37:38 piaware piaware[468]: ICAgICAgICAgICAgICAgICAgICAgMQ4wDAYDVQQIDAVUZXhhczEQMA4GA1UEBwwH
Dec 24 11:37:38 piaware piaware[468]: SG91c3RvbjEYMBYGA1UECgwPRmxpZ2h0QXdhcmUgTExDMRMwEQYDVQQLDApPcGVy
Dec 24 11:37:38 piaware piaware[468]: YXRpb25zMRowGAYDVQQDDBEqLmZsaWdodGF3YXJlLmNvbTCCASIwDQYJKoZIhvcN
Dec 24 11:37:38 piaware piaware[468]: AQEBBQADggEPADCCAQoCggEBAMdEdqieYGgpKEjnqcexXb7ZJt4tu44lwgr7h3oE
Dec 24 11:37:38 piaware piaware[468]: CKR2VzMbnhoye+WsYd0TdaP1H9qLRbxOW1BX0potRDLzSI92nSHbNA1RTYT2RsCX
Dec 24 11:37:38 piaware piaware[468]: U4bcjFkJi558c2WpoqEHVaWWn0jXwXSqkK9zWDvYxz+d7/eLqm8YOV8GteueQY3f
Dec 24 11:37:38 piaware piaware[468]: anut5m56wpZfTonVqb7KFsf55JURIASa7pKE8beWR3+aIgfJS+ElTglj1T/21p9l
Dec 24 11:37:38 piaware piaware[468]: DlNTEtM3Qx1wxYctbqiIeeYPESECXfE2kaPsQZlHvbJz9OGU7O+yfTTLlZN55nx/
Dec 24 11:37:38 piaware piaware[468]: 6LDXTaXVrugrzt/kJ0L1qkbg9x8Xe0EFZANj482dLOxUr98CAwEAAaM7MDkwCQYD
Dec 24 11:37:38 piaware piaware[468]: VR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHAYDVR0RBBUwE4IRKi5mbGlnaHRhd2Fy
Dec 24 11:37:38 piaware piaware[468]: ZS5jb20wDQYJKoZIhvcNAQELBQADggEBAB6ovxZOImdHMXXn7H9ScJvcADsWtZ81
Dec 24 11:37:38 piaware piaware[468]: AkB+sh3+9Uw2aNXqNEAoq6ejDVm7bPkHacQy7SvWQr5xDUGFlV44rmiYcws06kty
Dec 24 11:37:38 piaware piaware[468]: vhxYdRON+5hdNDNJI4AZ2AK/i5YfvT0UzH5gJVjQegz2QbTTu1igIgdfqRpg8WRF
Dec 24 11:37:38 piaware piaware[468]: 2I4WNEwSg5NTwDtxNnTkIC94F/3MzXtm/x7/5OCmg/7reX58bV58kTJULLBZaigy
Dec 24 11:37:38 piaware piaware[468]: AfNLeSYyPG0aWvMKTWPVedrj8rX2+DFALWylJllW1ibnQmUAirHSbc1+1rBOkOqm
Dec 24 11:37:38 piaware piaware[468]: siSHESsHrp3DP7hsLrW/uRnn3C71Vhw0Gm1vMfrl1JGsBWyi9nQfLG8=
Dec 24 11:37:38 piaware piaware[468]: -----END CERTIFICATE-----
Dec 24 11:37:38 piaware piaware[468]: TLS alert (write): unknown CA
Dec 24 11:37:38 piaware piaware[468]: TLS error: certificate verify failed
Dec 24 11:37:38 piaware piaware[468]: TLS handshake with adept server at piaware.flightaware.com/1200 failed: handshake failed: certificate verify failed
Dec 24 11:37:38 piaware piaware[468]: reconnecting in 4 seconds...
Dec 24 11:37:41 piaware piaware[468]: Connecting to FlightAware adept server at piaware.flightaware.com/1200
Dec 24 11:37:42 piaware piaware[468]: Connection with adept server at piaware.flightaware.com/1200 established
Dec 24 11:37:42 piaware piaware[468]: TLS verify failed: unable to get local issuer certificate
Dec 24 11:37:42 piaware piaware[468]: Failing certificate:
Dec 24 11:37:42 piaware piaware[468]:   sha1_hash: B325049DC60254F7F0505B74A217F02D2FC5550C
Dec 24 11:37:42 piaware piaware[468]:   subject: CN=*.flightaware.com,OU=Operations,O=FlightAware LLC,L=Houston,ST=Texas,C=US

obj · December 26, 2021, 5:43am

You have a firewall or similar (looks like the product is FortiGate?) that is doing a man-in-the-middle attack on the piaware → FlightAware connection (the failing certificate is not our certificate)

It may be your ISP doing this, rather than something you run yourself.

You may need to exempt piaware connections from SSL inspection (see e.g. https://checkthefirewall.com/blogs/fortinet/ssl-inspection)

fuzytech · December 26, 2021, 11:34pm

Thank you, that helped. I placed an exception on the firewall for this service. It’s connected again.

system · December 26, 2022, 11:35pm

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.

Topic		Replies	Views
It's failed, again :frowning: ADS-B Flight Tracking	55	2296	August 30, 2019
Pi-aware runs local, but not feeding (tls error?) ADS-B Flight Tracking	5	272	December 27, 2023
TLS Handshake failure ADS-B Flight Tracking	5	2619	February 17, 2017
Piaware seems to have stopped working ADS-B Flight Tracking	12	2947	December 9, 2022
About 2 weeks ago, my feeder stopped working. It still says connected to Flightaware ADS-B Flight Tracking	10	683	January 31, 2023

TLS handshake error - piaware not reporting

Related topics