maemo.org - Talk
Page 15 of 33 « First 51314 15 161725 Last »
Show 40 post(s) from this thread on one page

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   Nokia N900 A-GPS Not Working Anymore (https://talk.maemo.org/showthread.php?t=90651)

freemangordon 2013-08-29 13:33
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by sixwheeledbeast (Post 1370377)
Sorry, I was under the impression the bug was located.
Thanks again. :)
No, we found what the real problem is and which is the package to blame. The code chunk that is misbehaving is yet to be found ;) .

freemangordon 2013-08-29 13:34
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by michaaa62 (Post 1370402)
Any suggestions, what i am doing wrong???
Removing the certificates does not work, adding fails because the files exist...
Code:
Nokia-N900:/tmp/supl# cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem
Nokia-N900:/tmp/supl# cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61.pem
Nokia-N900:/tmp/supl# perl /usr/bin/c_rehash /etc/certs/common-ca | grep 00d8
00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem => 7651b327.0
00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61.pem => 7651b327.1
My PR
Code:
Nokia-N900:/tmp/supl#  apt-cache policy mp-fremantle-community-pr
mp-fremantle-community-pr:
  Installed: 21.2011.38-1Tmaemo8.2+thumb1
  Candidate: 21.2011.38-1Tmaemo8.2+thumb1
it is cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1 - without .pem extension

Ulle 2013-08-29 13:48
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by michaaa62 (Post 1370402)
Any suggestions, what i am doing wrong???
Removing the certificates does not work, adding fails because the files exist...
Or consider using my bash one-liner in http://talk.maemo.org/showpost.php?p=1370357

peterleinchen 2013-08-29 16:26
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by freemangordon (Post 1370404)
No, we found what the real problem is and which is the package to blame. The code chunk that is misbehaving is yet to be found ;) .
freemangordon,
here you refer to the google problem, or?
As I see the Nokia problem solved due to mixed up certs!?

I noticed that I can only get ACWP data, but not AGNSS data from Nokia server (also Vodafone). Should nokia provide that info also?
If yes, there is still above mentioned code chunk to be found (either for Google or Nokia).
Only thing I may think of causing this is some change in Google supl data still in the specification, but not correctly handled in N900 (like it was for tinymail).
Do you have another idea?

--edit
Okay, just reread.
And of course you refer with your code chunk to some problem in libmaemosec not handling the presence of two certificates with same fingerprint, right?
Nevertheless above problem with Google is still present, but not that urgent anymore (still I'd like to know/solve ...)

--editedit
Or, another thought:
could it be that Google changed their supl server to deliver only AGNSS data and no ACWP data anymore. And our N900 is only able to collect/use ACWP? This would explain the SSL-trusty successful (and bigger) data exchange with Google and Sirf supl servers.

Ulle 2013-08-29 16:54
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by peterleinchen (Post 1370462)
I noticed that I can only get ACWP data, but not AGNSS data from Nokia server (also Vodafone).
...
could it be that Google changed their supl server to deliver only AGNSS data and no ACWP data anymore. And our N900 is only able to collect/use ACWP? This would explain the SSL-trusty successful (and bigger) data exchange with Google and Sirf supl servers.
Thank you peterleinchen, for bringing this up! I actually have no clue whats going on with ACWP and AGNSS, but it could be the difference in what the servers are delivering.
So following this:
ACWP is returned from nokia, vodafone and sirf with just a pair of long/lat data (or kind of),
AGNSS ist returned from google and sonyericsson (not sirf) with quite some PDU/RLP and ephemeris data.
Both in XML-like style.

joerg_rw 2013-08-29 17:04
Re: Nokia N900 A-GPS Not Working Anymore
 
wireshark is your friend ;-)

Ulle 2013-08-29 17:09
Re: Nokia N900 A-GPS Not Working Anymore
 
If someone wants to test supl.sonyericsson.com with N900 there is still the first show stopper to solve: Certificate verification fails due to missing issuer cert.

I found this http://pastebin.com/2dNbJ79L , which was mentioned in an android gps discussion somewhere, and copied line 8. to 28. (the content of cacert.txt) into a file on my N900 .

Then after
Code:
cmcli -c common-ca -a /path/to/that/file
I get with
Code:
cmcli -T common-ca -v supl.sonyericsson.com:7275
a nice "Verified OK".

Edit: I couldn't find the root/issuer cert for sls1.sirf.com and sls2.sirf.com . I sent an email to slssupport@sirf.com (does not exist anymore) and webmaster@csr.com, asking for that. No answer so far ...

Ulle 2013-08-29 17:18
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by joerg_rw (Post 1370483)
wireshark is your friend ;-)
wiresharky is my friend, indeed :) ! But doesn't help much with TLS encrypted data ...

misiak 2013-08-29 17:26
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by Ulle (Post 1370488)
wiresharky is my friend, indeed :) ! But doesn't help much with TLS encrypted data ...
Are you saying about a certificate or about the actual data exchanged with server-side location software? I recently came across this article while acomplishing something at work, maybe mitmproxy could be used to "fool" N900 that your computer is location server (may require fake certificate generation via mitmproxy and installation on N900) and passing all traffic through your set-up proxy? That could help in debugging the internals of raw unciphered data exchanged between N900 and location server... I hope that's helpful (but I'm awake for 20-something-th hour now, so please excuse me if I got you wrong).

Ulle 2013-08-29 17:57
Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:
Originally Posted by misiak (Post 1370490)
maybe mitmproxy could be used to "fool" N900
Thanks for sharing, but I already tried to "proxy" with socat until eccerr0r was pointing to supl-* at tajuma.com. Thats the only practicable way for watching TLS encrypted SUPL data exchange.
The tool is just exellent. Deploying MITM a big waste of time (for that).


All times are GMT. The time now is 04:05.
Page 15 of 33 « First 51314 15 161725 Last »
Show 40 post(s) from this thread on one page

vBulletin® Version 3.8.8