maemo.org - Talk - Nokia N900 A-GPS Not Working Anymore

maemo.org - Talk (https://talk.maemo.org/index.php)

- Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)

- - Nokia N900 A-GPS Not Working Anymore (https://talk.maemo.org/showthread.php?t=90651)

Re: Nokia N900 A-GPS Not Working Anymore

Though I am happy with supl.vodafone.com I took some time today fiddling around with supl-proxy from tajuma.com .

I checked against all working supl-server I know of:

sls1.sirf.com
supl.google.com
supl.nokia.com
supl.sonyericsson.com
supl.vodafone.com

Everytime with preceeding steps in N900:
- gconftool --recursive-unset /system/nokia/location
- reboot
- setting location server to my server with running supl-proxy (pointed to the next supl server from the five mentioned above)
- running location test tool with method ACWP (with OK to supl usage terms)

To my surprise I got a quick (less than 10sec) location result within some hundred meters around with three of the five servers:

sls1.sirf.com
supl.nokia.com
supl.vodafone.com

With the others I got quite more data exchanged, but didn't get a location result.
If anyone is interested, see my proxy logfiles attached.

Without supl-proxy , just pointing my N900 to the five servers directly (with all the preceeding steps), the only server working for me is supl.vodafone.com .

I set up supl-proxy on my own network gateway and when I was rechecking without proxy my N900 was on wifi in my own network. So all request from same IP to the supl servers.

Okay, this could mean that N900 has probs with the data coming from google and sonyericsson, but for sirf and nokia(!) the only cause for failing - left to see to me - is certificate issues.
peterleinchen, seems you where quite right with your assumptions ...

I verified certificate chain on N900 (should have done earlier):

Code:

[2|user@Nokia-N900|/] cmcli -T common-ca -v supl.vodafone.com:7275 

f73d6238917bbaeb04235d2219a1da31b4b68f4d supl.vodafone.com

 trust chain(1):

   f18ab43c6a02bfd8228c7965cf88f4abbc180aa6 Thawte Server CA

Verified OK

And for Nokia:

Code:

[2|user@Nokia-N900|/] cmcli -T common-ca -v supl.nokia.com:7275 

1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com

 Verification failed: self signed certificate

Too bad.
Checking the chain:

Code:

openssl s_client -connect supl.nokia.com:7275

I already had a short look into the cert chain , replacing VeriSign certs in certificate manager (via cmcli). But with no luck.
One can find all VeriSign root certs at http://www.symantec.com/page.jsp?id=roots .

Maybe someone has more abilities to digg deeper into it. Would be nice to have supl.nokia.com usable again. Until then supl.vodafone.com is good enough for my needs.

Cheers, Ulle

Re: Nokia N900 A-GPS Not Working Anymore

Superb research Ulle!
Could and should maemo.org run supl-proxy for us?
Was it easy to build? (for linux?).

How much traffic (kb/mb) in an exchange?

Re: Nokia N900 A-GPS Not Working Anymore

If you're going the (local or remote) supl-proxy route, which I intended to try as soon as I can get a Maemo dev environment set up, I strongly suggest you have a look at the open databases of cell IDs and wireless APs at http://openbmap.org/ and http://www.opencellid.org/ - I think prehaps with ephemeris data added, these could make a much better, more accurate, and open, SUPL server than we can currently get.

I think the Maemo app CellNet-info uses one of those sites to provide lat/long info for a cell, but I'm not entirely sure at the moment.

An open SUPL server would benefit not only the N900, but virtually any modern phone.

Re: Nokia N900 A-GPS Not Working Anymore

Code:

openssl s_client -connect supl.nokia.com:7275 -CApath /etc/certs/common-ca/

.

.

.

New, TLSv1/SSLv3, Cipher is RC4-MD5

Server public key is 2048 bit

Secure Renegotiation IS NOT supported

Compression: NONE

Expansion: NONE

SSL-Session:

    Protocol  : TLSv1

    Cipher    : RC4-MD5

    Session-ID: ..................

    Session-ID-ctx:

    Master-Key: ...................

    Key-Arg   : None

    PSK identity: None

    PSK identity hint: None

    Start Time: 1377673374

    Timeout   : 300 (sec)

    Verify return code: 0 (ok)

Re: Nokia N900 A-GPS Not Working Anymore

I know that (and openssl returns also error when not pointed to /etc/certs/common-ca).
But why on earth does cmcli return an error even when pointed explicitly to common-ca???
That made me thinking of hard-coded certs in GPS blob.

And why supl.nokia.com returns result for N900 when using proxy?

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by peterleinchen (Post 1369967)

hmm, seems you have misread my post, if given
"-CApath /etc/certs/common-ca/", it does not fail

Re: Nokia N900 A-GPS Not Working Anymore

No no, I read and understood correctly.
As I made same experience.

openssl fails when not pointed to common-ca
openssl succeeds when pointed to common-ca

cmcli fails when not pointed to common-ca
cmcli fails also even when pointed to common-ca

So that means we have all needed certs aboard, but mabe they are not used or ... ?
At least Nokia and Google changed their cert paths in the past.

And the proxy acts as a proxy? Or initiates a completely new connection to supl? In first case it would not work afaik as ssl/cert communication is just forwarded?

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by peterleinchen (Post 1369975)

...
So that means we have all needed certs aboard, but mabe they are not used or ... ?

...we have a bug in /usr/bin/location-proxy

I am thinking to RE that, it is not that big, but before I start, could someone try to confirm(somehow?) this is the binary to blame

EDIT: seems like it is libmaemosec.so to blame

EDIT2: microb doesn't have any problem connecting to supl.nokia.com:7275

Re: Nokia N900 A-GPS Not Working Anymore

Oh man you are the man!

Why we did not contact you directly? Maybe because I did not want to put everything on your shoulder.
Eagerly waiting for a result. Be it positive or negative.

BIG thanks in advance.
How to do you a favour (already declined donations)?

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by peterleinchen (Post 1369980)

How to do you a favour (already declined donations)?

Find why "cmcli fails also even when pointed to common-ca" :)