The same problem occurred with the C201 after upgrading to version 1.3.1.

  @Solla-topee I also ran into this problem, only I began with home assistant after the update and never had the C230 working. A number of C200, C210 and C500 work like a charm.

I found out that the C230 reports an SSL/TLS error because of the 1024 RSA key of the certificate, which is considered to be to short:

 

$ openssl s_client -connect <address-of-c230>:443 -showcerts
CONNECTED(00000003)
---
Certificate chain
 0 s:CN=TPRI-DEVICE, O=TPRI, C=US
   i:CN=TPRI-DEVICE, O=TPRI, C=US
   a:PKEY: RSA, 1024 (bit); sigalg: sha256WithRSAEncryption
   v:NotBefore: Jan  1 00:00:00 2001 GMT; NotAfter: Dec 31 23:59:59 2070 GMT
-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----
---
Server certificate
subject=CN=TPRI-DEVICE, O=TPRI, C=US
issuer=CN=TPRI-DEVICE, O=TPRI, C=US
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: rsa_pkcs1_sha256
Peer Temp Key: X25519, 253 bits
---
SSL handshake has read 839 bytes and written 1661 bytes
Verification error: EE certificate key too weak
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES128-GCM-SHA256
Protocol: TLSv1.2
Server public key is 1024 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES128-GCM-SHA256
    Session-ID: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    Session-ID-ctx: 
    Master-Key: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1772061990
    Timeout   : 7200 (sec)
    Verify return code: 66 (EE certificate key too weak)
    Extended master secret: yes
---

For comparison: from a C500 I get the following answer (there is still complaints, but only because of the self-signed certificate and the camera works, also with home assistant):

$ openssl s_client -connect <address-of-c500>:443 -showcerts
Certificate chain
0 s:CN=TPRI-DEVICE, O=TPRI, C=US
   i:CN=TPRI-DEVICE, O=TPRI, C=US
   a:PKEY: EC, (prime256v1); sigalg: ecdsa-with-SHA256
   v:NotBefore: Jan  1 00:00:00 2001 GMT; NotAfter: Dec 31 23:59:59 2070 GMT
-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----
---
Server certificate
subject=CN=TPRI-DEVICE, O=TPRI, C=US
issuer=CN=TPRI-DEVICE, O=TPRI, C=US
---
No client certificate CA names sent
Peer signing digest: SHA256
Peer signature type: ecdsa_secp256r1_sha256
Peer Temp Key: ECDH, secp521r1, 521 bits
---
SSL handshake has read 755 bytes and written 1756 bytes
Verification error: self-signed certificate
---
New, TLSv1.2, Cipher is ECDHE-ECDSA-AES128-GCM-SHA256
Protocol: TLSv1.2
Server public key is 256 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-ECDSA-AES128-GCM-SHA256
    Session-ID: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    Session-ID-ctx:
    Master-Key: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1772062301
    Timeout   : 7200 (sec)
    Verify return code: 18 (self-signed certificate)
    Extended master secret: yes

 

Is there any way (factory reset, firmware update) to get a new server certificate for the camera with a better cipher algorithm, a larger key or —even better— can I install my own certificate?

 

Best Regards

  @u-ber same here. On both a C210 and C220 2.0 release. The C220 1.0 release still works. 
 

hope tp link comes with a solution soon. 

  @gex Im having the same issue with the latest Firmware. 

HA info

• Core2026.3.0
• Supervisor2026.02.3
• Operating System17.1
• Frontend20260304.0
  
  It can see the cameras when It searches for them but fails connecting.