Login not working due to local issuer certificate

[ericpullen]

Describe The Bug:
Recently noticed that I could not modify temperature settings. Looked at logs and saw errors about login. Updated to the latest version, and still getting errors related to certificate and undefined locations.

To Reproduce:
Install plugin, set username password, and it won't connect. It used to work, and I was also able to verify logging in to the Carrier website works with the same username/password.

Expected behavior:
Connect and be able to get data from Carrier.

Logs:

[6/11/2025, 9:53:29 AM] [CarrierInfinity] Attempting login / token refresh.
[6/11/2025, 9:53:29 AM] [CarrierInfinity] undefined undefinedundefined undefined undefined
unable to get local issuer certificate
[6/11/2025, 9:53:29 AM] [CarrierInfinity] [API] Could not refresh access token:  MaxAttemptsError: unable to get local issuer certificate
    at Function.AxiosError.from (/opt/homebrew/lib/node_modules/homebridge-carrier-infinity/node_modules/axios/lib/core/AxiosError.js:92:14)
    at RedirectableRequest.handleRequestError (/opt/homebrew/lib/node_modules/homebridge-carrier-infinity/node_modules/axios/lib/adapters/http.js:620:25)
    at RedirectableRequest.emit (node:events:518:28)
    at ClientRequest.eventHandlers.<computed> (/opt/homebrew/lib/node_modules/homebridge-carrier-infinity/node_modules/follow-redirects/index.js:49:24)
    at ClientRequest.emit (node:events:518:28)
    at emitErrorEvent (node:_http_client:104:11)
    at TLSSocket.socketErrorListener (node:_http_client:518:5)
    at TLSSocket.emit (node:events:518:28)
    at emitErrorNT (node:internal/streams/destroy:170:8)
    at emitErrorCloseNT (node:internal/streams/destroy:129:3)
    at Axios.request (/opt/homebrew/lib/node_modules/homebridge-carrier-infinity/node_modules/axios/lib/core/Axios.js:45:41)
    at processTicksAndRejections (node:internal/process/task_queues:105:5)
    at InfinityRestClient.forceRefreshToken (/opt/homebrew/lib/node_modules/homebridge-carrier-infinity/src/api/rest_client.ts:108:22) {
  code: '429'
}
[6/11/2025, 9:53:29 AM] [CarrierInfinity] undefined undefinedundefined undefined undefined
[6/11/2025, 9:53:29 AM] [CarrierInfinity] [API] Failure sending activation signal:  unable to get local issuer certificate
[6/11/2025, 9:53:29 AM] [CarrierInfinity] undefined undefinedundefined undefined undefined
[6/11/2025, 9:53:29 AM] [CarrierInfinity] [API] Failed to fetch updates:  unable to get local issuer certificate
[6/11/2025, 9:53:29 AM] [CarrierInfinity] Could not discover devices: Cannot read properties of undefined (reading 'locations')

Plugin Config:

{
    "username": "MYEMAIL@gmail.com",
    "password": "PASSWORD",
    "holdBehavior": "forever",
    "showOutdoorTemperatureSensor": false,
    "showFanControl": false,
    "showIndoorHumiditySensors": false,
    "showZoneComfortActivityControls": false,
    "platform": "CarrierInfinity"
}

Environment:

• Plugin Version: 1.8.0
• Homebridge Version: 1.10.0
• Node.js Version: 22.16.0
• NPM Version: 10.9.2
• Operating System: macOS

[james7342]

Getting the same thing here.

[24/09/2025, 12:58:30] [homebridge-carrier-infinity] Launched child bridge with PID 19969
[24/09/2025, 12:58:30] [homebridge-carrier-infinity] Loaded homebridge-carrier-infinity v1.7.1 child bridge successfully
[24/09/2025, 12:58:30] [homebridge-carrier-infinity] [API] Could not refresh access token: unable to get local issuer certificate
[24/09/2025, 12:58:30] [homebridge-carrier-infinity] Login failed: unable to get local issuer certificate
[24/09/2025, 12:58:30] [homebridge-carrier-infinity] [API] Failure sending activation signal: unable to get local issuer certificate
[24/09/2025, 12:58:30] [homebridge-carrier-infinity] [API] Failed to fetch updates: unable to get local issuer certificate
[24/09/2025, 12:58:30] [homebridge-carrier-infinity] Could not discover devices: Cannot read properties of undefined (reading 'locations')
[24/09/2025, 13:28:30] [homebridge-carrier-infinity] [API] Failure sending activation signal: unable to get local issuer certificate
[24/09/2025, 13:58:30] [homebridge-carrier-infinity] [API] Failure sending activation signal: unable to get local issuer certificate
[24/09/2025, 14:28:30] [homebridge-carrier-infinity] [API] Failure sending activation signal: unable to get local issuer certificate
[24/09/2025, 14:32:08] [homebridge-carrier-infinity] Launched child bridge with PID 27848
[24/09/2025, 14:32:08] [homebridge-carrier-infinity] Loaded homebridge-carrier-infinity v1.7.1 child bridge successfully
[24/09/2025, 14:32:08] [homebridge-carrier-infinity] Login failed: unable to get local issuer certificate
[24/09/2025, 14:32:08] [homebridge-carrier-infinity] [API] Could not refresh access token: unable to get local issuer certificate
[24/09/2025, 14:32:08] [homebridge-carrier-infinity] [API] Failure sending activation signal: unable to get local issuer certificate
[24/09/2025, 14:32:08] [homebridge-carrier-infinity] [API] Failed to fetch updates: unable to get local issuer certificate
[24/09/2025, 14:32:08] [homebridge-carrier-infinity] Could not discover devices: Cannot read properties of undefined (reading 'locations')

[ericpullen]

If you are on a Mac, I found a quasi-workaround (until I can get some time to try and figure out a fix):
open the file /Library/LaunchDaemons/com.homebridge.server.plist (you will need to do so as root, so sudo with your favorite command line text editor)
Add the following under the EnvironmentVariables tag:

            <key>NODE_TLS_REJECT_UNAUTHORIZED</key>
		        <string>0</string>      

It should look something like this:

    <key>EnvironmentVariables</key>
        <dict>
            <key>PATH</key>
                <string>/opt/homebrew/bin:/opt/homebrew/sbin:/usr/local/bin</string>
            <key>HOME</key>
                <string>/Users/ericpullen</string>
            <key>UIX_STORAGE_PATH</key>
                <string>/Users/ericpullen/.homebridge</string>
            <key>HOMEBRIDGE_CONFIG_UI_TERMINAL</key>
                <string>1</string>
            <key>NODE_TLS_REJECT_UNAUTHORIZED</key>
		        <string>0</string>                
        </dict>

[james7342]

On RPi5 using the HomeBridge image so that won't work for me.

[csoto09]

On RPi5 using the HomeBridge image so that won't work for me.

If I'm understanding you correctly, you're running Homebridge in a docker image. If so, you can do the following:

1. ssh into your pi:

$ ssh <USERNAME>@<IP OR HOSTNAME>

2. locate your docker compose file. for me it was in the home directory:

$ ls
> docker-compose.yml  etc-pihole  volumes

3. use nano (or another editor) to make the following change:

services:
  homebridge:
    image: homebridge/homebridge:latest
+ environment:
+      - NODE_TLS_REJECT_UNAUTHORIZED=0
// the rest of your config here

4. save the file and restart homebridge.

everything picked right back up from there. you'll likely see some warnings in the homebridge logs about disabling TLS. those are expected. Setting this option is a fairly significant security risk, but it should get you back up and running 🤞🏼

[james7342]

Not in a docker. HB running in Raspbian. Just downloaded the HomeBridge image using Imager. In theory though I should be able to make the similar edits though.

[kfechner]

I have a Raspberry Pi 4 Model B Rev 1.5 with the corresponding Homebridge image installed. I'm getting this CarrierInfinity error as well a similar error with the Homebridge Google Nest Sdm plugin which had been working fine until a few weeks ago. Where would I look for the environment config file to add the temporary fix? It's not in the home directory.

[mattcostell]

I added

process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

to rest_client.js in ~/.homebridge/node_modules/homebridge-carrier-infinity/dist/api and that seemed to solve the problem.

That said I'm running it on a child bridge to keep it isolated from other plugins. Not sure what the long term fix would be or if there's a place to load a legit cert to make this go away?

[mbrande]

I added

process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

to rest_client.js in ~/.homebridge/node_modules/homebridge-carrier-infinity/dist/api and that seemed to solve the problem.

That said I'm running it on a child bridge to keep it isolated from other plugins. Not sure what the long term fix would be or if there's a place to load a legit cert to make this go away?

This totally worked for me! Thanks man! I hope your question is answered!

[arjunmehta]

I dug into this a bit and it has to do with nodejs 22.20 no longer trusting the root certificate of www.app-api.ing.carrier.com, Comodo AAA Services.

You can see when Node 22.20 removed by updating to NSS 3.114.

I believe this is wholly on carrier.com to fix and update their SSL certs.

For now a solution is to keep Homebridge at 22.19, and perhaps soon carrier will update their certs.

btw process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0'; leaves room for man in the middle attacks.

Another solution nearly as insecure is by changing rest_client.ts to use a custom httpsAgent that has rejectUnauthorized: false. At least that is limited to the specific https connection used by the plugin.

    const httpsAgent = new https.Agent({
      rejectUnauthorized: false, // Allow self-signed or untrusted certificates
    });

    this.axios = Axios.create({
      baseURL: INFINITY_API_BASE_URL,
      headers: {
        featureset: 'CONSUMER_PORTAL',
        Accept: 'application/xml',
      },
      httpsAgent: httpsAgent,
      timeout: 30000, // 30 second timeout
    });

[jlg89]

Same issue here. mattcostell's workaround got it going for me.

[james7342]

Mattcostell's workaround worked for me also. Just created a backup of the original and add process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';

to the first line in the rest_client.js

[ekalp]

@grivkees any chance you can look at this when you have some time? :)

[mattcostell]

Upgraded node.js to 24.11.0. Tried without the workaround above and getting the same behavior with different error messages:

[31/10/2025, 11:20:11] [homebridge-carrier-infinity] Attempting login / token refresh.
[31/10/2025, 11:20:36] [homebridge-carrier-infinity] Attempting login / token refresh.
[31/10/2025, 11:22:41] [homebridge-carrier-infinity] Attempting login / token refresh.

Sticking with the workaround for now...