Suggested features/services/options to be added to HC3 and HC3L

[Gabor Varga 2]

Hi,

 

From my side I suggest to add the following features to HC3/HC3L controllers:

- Allow to upload custom certificate for HTTPS connection

- Add a connection matrix page for Z-Wave devices

- Possibilty to manually configure parameters to unknown, but working Z-wave devices (currently I can add parameters, but cannot add proper names to parameters, which is very strange...)

- Add a packet tracer option (with turning on/off possibility) for looking after sent/received Z-Wave packet traffics

- Adding option to preconfigure DSK keys for S2 security. However HC3 and HC3L support S2 security, but I already added many devices with DSK key, none of controllers asked this key from me. So it is just supported theoretically. But if the keys could be added before the inclusion process, the controller can find the right DSK key from the database, and can implement S2 security.

- Adding AES128 and AES256 support for LUA custom QuickApp

 

Thanks!

Gabor

Edited December 30, 2021 by Gabor Varga
Update question

[tinman 1,028]

3 hours ago, Gabor Varga said:

- Allow to upload custom certificate for HTTPS connection

 

and that certificate will be certified for what hostname? What is behind such request?

 

 

 

3 hours ago, Gabor Varga said:

- Add a connection matrix page for Z-Wave devices

 

this function is impemented into FIBARO Installer App, so one can see neighbours and the route matrix

 

Please login or register to see this attachment.

Please login or register to see this image.

/monthly_2021_12/image.png.d070db8ff8c9f779841a191bc6ef153c.png" />

 

 

I think FIBARO has implemented it into their Installer App for reason, to help installers to provide better support, and to not "scary" customers with information which can be easily misunderstood.

 

 

 

3 hours ago, Gabor Varga said:

- Possibilty to manually configure parameters to unknown, but working Z-wave devices (currently I can add parameters, but cannot add proper names to parameters, which is very strange...)

 

i think you still on zw 2 engine, especially when i look your text below (DSK questions).

 

Anyway, with the zw 3 engine, which is currently beta (but the way to go sooner or later), you can upload xml templates, with description for params

 

 

Soon there will be migration wizard, to switch from zw2 to zw3,, so you will able to use it without factory reset and installation from scratch (which is the case currently)

 

 

 

3 hours ago, Gabor Varga said:

- Add a packet tracer option (with turning on/off possibility) for looking after sent/received Z-Wave packet traffics

 

for what? I mean i know what one can do with this, but i don't think typical user need it. 

 

Currently there are zwave logs, which contains some informations, additionally you can always use zniffer - which is anyway better option than tracer (because tracer is already after device has been included, and it is what the controlle see, not what the netwrok does)

 

 

 

3 hours ago, Gabor Varga said:

- Adding option to preconfigure DSK keys for S2 security. However HC3 and HC3L support S2 security, but I already added many devices with DSK key, none of controllers asked this key from me. So it is just supported theoretically. But if the keys could be added before the inclusion process, the controller can find the right DSK key from the database, and can implement S2 security.

 

zw3 engine can this, DSK List

 

 

 

DSK key request while including

 

 

 

 

 

 

 

3 hours ago, Gabor Varga said:

- Adding AES128 and AES256 support for LUA custom QuickApp

 

 

Please login or register to see this link.

 

check the links, you will find AES lib or QuickApp there

 

 

 

[petrkl12 214]

6 hours ago, tinman said:

 

and that certificate will be certified for what hostname? What is behind such request?

for customer web domain (myHC3.xxxxxx.xx) with auto renewal function (Let's encrypt) - similar like in Synology or can have possibility to add own certificate

 

6 hours ago, tinman said:

 

 What is behind such request?

annoying announcements from chrome/edge/... - Not valid certificate - do you want to continue to unsecured web pages 

 

6 hours ago, tinman said:

this function is impemented into FIBARO Installer App, so one can see neighbours and the route matrix

I think FIBARO has implemented it into their Installer App for reason, to help installers to provide better support, and to not "scary" customers with information which can be easily misunderstood.

it could be perfect to unlock these functions for advanced users

[Gabor Varga 2]

Why the domain is important? This is why needs the availability for custom certificate. I can configure my custom domain for it. E.g.: I have a Certificate Authority at my home. I can generate a certificate accepted by all my machines and I could upload here into HC3 for use it for HTTPS. 

Now I should upload the original self-signed certificate for all my machines in order to browsers appears them as valid. Of course, if some does not want using that, they will not do it. No problem. They still can use the old self-signed one. But in many cases this is a good opportunity.

Edited December 31, 2021 by Gabor Varga

[Gabor Varga 2]

8 hours ago, tinman said:

 

and that certificate will be certified for what hostname? What is behind such request?

 

 

 

 

this function is impemented into FIBARO Installer App, so one can see neighbours and the route matrix

 

Please login or register to see this attachment.

Please login or register to see this link.

 

 

I think FIBARO has implemented it into their Installer App for reason, to help installers to provide better support, and to not "scary" customers with information which can be easily misunderstood.

 

 

 

 

i think you still on zw 2 engine, especially when i look your text below (DSK questions).

 

Anyway, with the zw 3 engine, which is currently beta (but the way to go sooner or later), you can upload xml templates, with description for params

 

Please login or register to see this link.

 

Soon there will be migration wizard, to switch from zw2 to zw3,, so you will able to use it without factory reset and installation from scratch (which is the case currently)

 

 

 

 

for what? I mean i know what one can do with this, but i don't think typical user need it. 

 

Currently there are zwave logs, which contains some informations, additionally you can always use zniffer - which is anyway better option than tracer (because tracer is already after device has been included, and it is what the controlle see, not what the netwrok does)

 

 

 

 

zw3 engine can this, DSK List

 

Please login or register to see this link.

 

Please login or register to see this link.

 

DSK key request while including

 

 

Please login or register to see this link.

 

Please login or register to see this link.

 

 

 

 

 

Please login or register to see this link.

 

check the links, you will find AES lib or QuickApp there

 

 

 

So ZW3 supports S2 security. Which is in Beta status now, so can be used by testers (mostly).

For matrix: the Fibaro Installer app is available only for certified system installers. I guess, I should pay much more money to become certified installer. That's crazy. 

For zniffer: it is not working with all z-wave controller devices. You need to have a special firmware on the device for using the software. E.g.: in Z-Way, there were an internal packet tracer which displayed all packets sent/received by controller and it was possible to check some problems with packet transportation.

 

Of course, these requests normally are not coming from a standard user. But would be very useful in many cases to avoid using any 3rd party tool for getting the same result.

[tinman 1,028]

4 hours ago, Gabor Varga said:

For zniffer: it is not working with all z-wave controller devices.

 

 

actually you can take almost any zw300/zw500 and solder/build your own, if you don't buy it.

But honestly, 25EUR is not that much money in compare for what tool you get.

 

 

4 hours ago, Gabor Varga said:

You need to have a special firmware on the device for using the software.

 

Please login or register to see this link.

 

4 hours ago, Gabor Varga said:

E.g.: in Z-Way, there were an internal packet tracer which displayed all packets sent/received by controller and it was possible to check some problems with packet transportation.

 

packages sent/recieved by controller are packages within same homeid, and they routed and as already mentioned "recieved by controller, not somewhere in mesh". Such log option exists of course, for FIBARO support team.

 

Sure i would be happy to have such option as well, and even if that's only 25 clicks and one change request, FIBARO will probably not add it (see installer app) for customers. I and some other installers requested this for the installer app, 2yrs ago or something?