maemo.org - Talk - Nokia N900 A-GPS Not Working Anymore

Page 4 of 9

« First

< Prev

Next >

Last »

Show 40 post(s) from this thread on one page

maemo.org - Talk (https://talk.maemo.org/index.php)

- Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)

- - Nokia N900 A-GPS Not Working Anymore (https://talk.maemo.org/showthread.php?t=90651)

peterleinchen

2013-08-29 05:04

Re: Nokia N900 A-GPS Not Working Anymore

I believe he inserted/refreshed a cert in our store and then the cmcli also succeeded, which failed previously (and if I interprete it right, he succeeded in getting supl data from Nokia?). As I played also with a lot of certs/adding/deleting from common-ca and did not succeed at all, I am waiting eagerly for more details ...

freemangordon

2013-08-29 06:59

Re: Nokia N900 A-GPS Not Working Anymore

Well I actually removed one :)

The certificate in question is 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1. Not that there is something wrong with that certificate, but it seems maemo certman has a bug.

There are 2 verisign root certificates with the same public key:
00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61 and 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1. certificate chain of supl.nokia.com cert ends up with 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61, but it seems certman tries to use 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1 instead. So the verification fails.

I didn't debug it, so the actual thing that happens could be a slightly different, however, removing both 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61 and 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1 and reimporting 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61 workarounds the problem.

seems https://gitorious.org/community-ssu/...c074bfeef6a622 is not enough for multiple-keys-same-public to work on Fremantle. I'll debug the whole mess when I have some free time. Wouldn't try to stop anyone to do the same ofc :)

nieldk

2013-08-29 07:37

Re: Nokia N900 A-GPS Not Working Anymore

1 Attachment(s)

Hmm, I have created a PEM certificate file of the root certificate indicated when connecting to supl.nokia com, also in the zip, is the original crt file.

Code:

root@bt:~# openssl s_client -connect supl.nokia.com:7275                        CONNECTED(00000003)

depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary Certification Authority

verify error:num=19:self signed certificate in certificate chain

verify return:0

---

Certificate chain

 0 s:/C=FI/ST=Espoo/O=Nokia/CN=supl.nokia.com

   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

 1 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5

 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5

   i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority

 3 s:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority

   i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority

---

Server certificate

-----BEGIN CERTIFICATE-----

MIIFWTCCBEGgAwIBAgIQHpGupbIVFaSG2r4A10yDuzANBgkqhkiG9w0BAQUFADCB

tTELMAkGA1UEBhMCVVMxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQL

ExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2Ug

YXQgaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYSAoYykxMDEvMC0GA1UEAxMm

VmVyaVNpZ24gQ2xhc3MgMyBTZWN1cmUgU2VydmVyIENBIC0gRzMwHhcNMTIwNDE2

MDAwMDAwWhcNMTUwNDE2MjM1OTU5WjBGMQswCQYDVQQGEwJGSTEOMAwGA1UECBMF

RXNwb28xDjAMBgNVBAoUBU5va2lhMRcwFQYDVQQDFA5zdXBsLm5va2lhLmNvbTCC

ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN+Ge5eqh68YHvnlvwvJTX36

MJbIvxyqljUarJldINPbp2d2aabRFzr7B7GVbITFLC94djgUKj0TNFpHfTpffmSo

uSWYp8WYNQHCeNO2yezAOVvWhFwFixp2e3/hWi6bmVt+A7jfDN8pOnugZRIkgHxz

6czndRqDAWA/zIi8w5sBPRqQGKS8QnPqcYhtmqh8nVbzCp2JweV8sdg9SnvCyR1a

jIPjqiDXl6hjZQ1w0vckXivr0vB88tmm8ReTvP3plhZXub1ggL2wB7O+jHmRslJF

nlcRQMHc6vVwMWJobjzp8audHxZOX1sCKGVJCLC40MGnyIxIOObPizT3dHLfcQEC

AwEAAaOCAdEwggHNMAkGA1UdEwQCMAAwCwYDVR0PBAQDAgWgMEUGA1UdHwQ+MDww

OqA4oDaGNGh0dHA6Ly9TVlJTZWN1cmUtRzMtY3JsLnZlcmlzaWduLmNvbS9TVlJT

ZWN1cmVHMy5jcmwwRAYDVR0gBD0wOzA5BgtghkgBhvhFAQcXAzAqMCgGCCsGAQUF

BwIBFhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vcnBhMB0GA1UdJQQWMBQGCCsG

AQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQNRFwWU0TBgn4dIKsl9AFj2L55

pTB2BggrBgEFBQcBAQRqMGgwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLnZlcmlz

aWduLmNvbTBABggrBgEFBQcwAoY0aHR0cDovL1NWUlNlY3VyZS1HMy1haWEudmVy

aXNpZ24uY29tL1NWUlNlY3VyZUczLmNlcjBuBggrBgEFBQcBDARiMGChXqBcMFow

WDBWFglpbWFnZS9naWYwITAfMAcGBSsOAwIaBBRLa7kolgYMu9BSOJsprEsHiyEF

GDAmFiRodHRwOi8vbG9nby52ZXJpc2lnbi5jb20vdnNsb2dvMS5naWYwDQYJKoZI

hvcNAQEFBQADggEBABx2tb0EQch660oL98RMtEXCQtkCOLPfFQO5X2YS29Tw9a/f

xi/RcmyUN+XuCScgFzvT7tmnaCmuxd6SNqUo/cSF1XRx1m+23RNgA9APVm8uEZ5/

GSswd8DTKU0Gkh2xS8UDS6mqMtST8oFzWiQlinSlfiOvr51PZtQEiQZUzFqKJlbF

yC1BnlIyGokHTt3Izh4CXFrGbZRo4WZSybmu9O/+ziI1smArNIRnMdeinP8mi/y3

atok31Rw1+/qi3142GTVYilfvuJB5zVJu2lnvU7gSSaQr7tuerk47An5rZddMDuf

uzc0MT9HOXlAdTCyqhxEc7ymsSeRFmFGTyIap58=

-----END CERTIFICATE-----

subject=/C=FI/ST=Espoo/O=Nokia/CN=supl.nokia.com

issuer=/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=Terms of use at https://www.verisign.com/rpa (c)10/CN=VeriSign Class 3 Secure Server CA - G3

---

No client certificate CA names sent

---

SSL handshake has read 4857 bytes and written 631 bytes

---

New, TLSv1/SSLv3, Cipher is RC4-MD5

Server public key is 2048 bit

Secure Renegotiation IS supported

Compression: NONE

Expansion: NONE

SSL-Session:

    Protocol  : TLSv1

    Cipher    : RC4-MD5

    Session-ID: 8FB277CE00000000000000000000000000003570521EF965000000008F0240C0

    Session-ID-ctx:

    Master-Key: 5061BB36F33A7171F87DB1541E127EE58905A40D8463FE672B4349F1097DFD717D5E6DFED58E515A614719CAF8EEBF1F

    Key-Arg   : None

    PSK identity: None

    PSK identity hint: None

    SRP username: None

    Start Time: 1377760865

    Timeout   : 300 (sec)

    Verify return code: 19 (self signed certificate in certificate chain)

---

I will test later (my N900 needs a reflash :/)

freemangordon

2013-08-29 07:40

Re: Nokia N900 A-GPS Not Working Anymore

@nieldk: there is one more certificate on top of the one you bolded, do:

cmcli -s -T common-ca -v supl.nokia.com:7275

(this will save the whole certificate chain as .pem files) and you'll see there are 4 .pems saved, not 3.

EDIT: nevermind, seems I misread your post

peterleinchen

2013-08-29 07:41

Re: Nokia N900 A-GPS Not Working Anymore

YEP!

A THOUSAND THANKS !!!

One mistake above: it iks the second one (with the "-1") that needs to be readded.
And I needed a reboot to make location library aware.

I never thought of removing that one (verisign), actually both and reinstalling only the second one. I fiddled with exactly that cert, but failed miserable due to missing cert experience.

Will do now a second reboot for verification.

freemangordon

2013-08-29 07:43

Re: Nokia N900 A-GPS Not Working Anymore

@peterleinchen: "the mistake" could be related to the order of the hashes.

EDIT:

don't forget to "perl /usr/bin/c_rehash /etc/certs/common-ca" after every change to the certificate store

peterleinchen

2013-08-29 07:56

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by freemangordon (Post 1370315)

@peterleinchen: "the mistake" could be related to the order of the hashes.

Quote:

Originally Posted by freemangordon (Post 1370315)

EDIT:

don't forget to "perl /usr/bin/c_rehash /etc/certs/common-ca" after every change to the certificate store

edit to your edit:
WHAT?
Never knew/did that. What is this about?
It worked for without that rehashing (some kind of aegis here? ;))

--edit
Another edit aimed to nieldk
What PR version do you have?

Is it possibly "only" PR1.3 and not PR1.3.1 (with some cert updates/revocations)?
Idk when this problem arised, but could it be due to that one?

freemangordon

2013-08-29 07:59

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by peterleinchen (Post 1370318)

Could be, as I failed with reinserting both certs, but in reversed order!

Nevertheless:
after the second clearing cache (gconftool/reboot), I got a fix within 5-10 seconds from supl.nokia.com.

We ARE back, Nokia!

Thank you freemangordon

edit to your edit:
WHAT?
Never knew/did that. What is this about?
It worked for without that rehashing (some kind of aegis here? ;))

--edit
Another edit aimed to nieldk
What PR version do you have?

Is it possibly "only" PR1.3 and not PR1.3.1 (with some cert updates/revocations)?
Idk when this problem arised, but could it be due to that one?

http://www.tin.org/bin/man.cgi?section=1&topic=c_rehash

nieldk

2013-08-29 08:02

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by peterleinchen (Post 1370318)

Another edit aimed to nieldk
What PR version do you have?

I have pr1.3 (flashes too often and never bothers to do the 1.3.1)
With, KP52 as kernel.

Ulle	2013-08-29 10:42

Re: Nokia N900 A-GPS Not Working Anymore

Wow, I almost can't believe it: Nokia N900 can use supl.nokia.com again!!!

Anyway, I didn't have a file/cert 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem , just the one without the -1 .
What was workin for me was (as root):

Code:

mkdir /tmp/supl/ ; cd /tmp/supl/ ; cmcli -s -T common-ca -v supl.nokia.com:7275 ; for CERT in `ls -1 *.pem` ; do cmcli -c common-ca -r ${CERT%%.*} ; cmcli -c common-ca -r ${CERT%%.*}-1 ; cmcli -c common-ca -a ${CERT} ; done

With

Code:

cmcli -T common-ca -v supl.nokia.com:7275

I got a "Verified OK".
Setting location server to supl.nokia.com then gave me the nearby fix within 5 secs. Yey!

@freemangordon: Where did you find the -s flag for cmcli ? It is not shown as an option when called without any param.

Edit: typo ...

freemangordon

2013-08-29 11:00

Re: Nokia N900 A-GPS Not Working Anymore

@Ulle - in cmcli source code

sixwheeledbeast

2013-08-29 11:09

Re: Nokia N900 A-GPS Not Working Anymore

So can/will this be fixed in upcoming CSSU versions?

freemangordon

2013-08-29 11:47

Re: Nokia N900 A-GPS Not Working Anymore

This is CSSU material, that's for sure. But we need to find the bug first:). Anyway, I'll look at it when I find some spare time

sixwheeledbeast

2013-08-29 11:51

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by freemangordon (Post 1370375)

This is CSSU material, that's for sure. But we need to find the bug first:). Anyway, I'll look at it when I find some spare time

Sorry, I was under the impression the bug was located.
Thanks again. :)

peterleinchen

2013-08-29 12:04

Re: Nokia N900 A-GPS Not Working Anymore

Hey freemangordon,

besides 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61
I have another one with a "-1 extension", named
f3a27298eeb81b82801c4db69a3027990a2f72e2

And this one I do not get named, when printing
cmcli -T common-ca -L

My guess is really that this was introduced via a OTA update from PR1.3 to 1.3.1

To verify:
@nieldk and Ulle
Please give us your current PR (1.3 or 1.3.1) number and how you got there (direct flash, OTA or CSSU). CSSU is important to know, as that latest update is already integrated.
@freemangordon, just a wild guess. But maybe worth to check...

Quote:

Originally Posted by freemangordon (Post 1370320)

http://www.tin.org/bin/man.cgi?section=1&topic=c_rehash

Thanks, learned something more. and now I know what these symlinks were/are for. And why I had some dead symlinks (removed fraudulent certs from TÜRK and other).

Ulle	2013-08-29 12:57

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by peterleinchen (Post 1370380)

I have another one with a "-1 extension", named
f3a27298eeb81b82801c4db69a3027990a2f72e2

And this one I do not get named, when printing
cmcli -T common-ca -L

This one I also had with -1 . It is for the root/highest certificate in the certificate chain for supl.nokia.com. It doesn't have CN (common name) in it and therefor cmcli might not show it with cmcli -T common-ca -L ... (bug or feature ;) ).

As supl.nokia.com has stopped working years ago (was it 2011?), I think the cert store was already wrong before CSSU.

Quote:

Originally Posted by peterleinchen (Post 1370380)

To verify:
@nieldk and Ulle
Please give us your current PR (1.3 or 1.3.1) number and how you got there (direct flash, OTA or CSSU). CSSU is important to know, as that latest update is already integrated.

I currently have
Version: 21.2011.38-1Smaemo6.1 (Flavor: Stable)
Haven't looked for that for ages. Can't say exactly how I came to this. Probably Flashing Nokia stuff than CSSU OTA.
From wiki http://wiki.maemo.org/Community_SSU/ChangelogStable :
21.2011.38-1 is the latest official Nokia version. The number after it indicates the Community SSU release version.

And I played quite much with the VeriSign certs in the last days. Hard to say how their state was before that.

nieldk

2013-08-29 13:07

Re: Nokia N900 A-GPS Not Working Anymore

My firmware is flashed using maemo_flasher-3.5_2.5.2.2_i386.deb from tablets-dev.nokia.com

Flashing the images:
RX-51_2009SE_10.2010.13-2.VANILLA_PR_EMMC_MR0_ARM.bin
RX-51_2009SE_20.2010.36-2_PR_COMBINED_MR0_ARM.bin

from
http://skeiron.org/tablets-dev/nokia_N900/

Ulle	2013-08-29 13:11

Re: Nokia N900 A-GPS Not Working Anymore

Now that supl.nokia.com issues are teared down to TLS / certificates flaws inside N900, what about supl.google.com?

My tests with supl-proxy where showing that during (s)UPL sessions with google and sonyericsson much more data was exchanged (compared to nokia and vodafone). With no success at the end.
See my attached log files in post #101 http://talk.maemo.org/showpost.php?p=1369745

Why can't N900 use the data coming from supl.google.com for A-GPS / ACWP?

nieldk

2013-08-29 13:20

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by Ulle (Post 1370397)

Like stated before, Google's fine on my device.
Nokias, didnt work - until now.
I know nokiabot also at least seem to have a working google supl. Perhaps its related to firmware releases ?

michaaa62

2013-08-29 13:25

Re: Nokia N900 A-GPS Not Working Anymore

Any suggestions, what i am doing wrong???
Removing the certificates does not work, adding fails because the files exist...

Code:

Nokia-N900:/tmp/supl# cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem 

Nokia-N900:/tmp/supl# cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61.pem 

Nokia-N900:/tmp/supl# perl /usr/bin/c_rehash /etc/certs/common-ca | grep 00d8

00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem => 7651b327.0

00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61.pem => 7651b327.1

My PR

Code:

Nokia-N900:/tmp/supl#  apt-cache policy mp-fremantle-community-pr

mp-fremantle-community-pr:

  Installed: 21.2011.38-1Tmaemo8.2+thumb1

  Candidate: 21.2011.38-1Tmaemo8.2+thumb1

freemangordon

2013-08-29 13:33

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by sixwheeledbeast (Post 1370377)

Sorry, I was under the impression the bug was located.
Thanks again. :)

No, we found what the real problem is and which is the package to blame. The code chunk that is misbehaving is yet to be found ;) .

freemangordon

2013-08-29 13:34

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by michaaa62 (Post 1370402)

Any suggestions, what i am doing wrong???
Removing the certificates does not work, adding fails because the files exist...

Code:

Nokia-N900:/tmp/supl# cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem 

Nokia-N900:/tmp/supl# cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61.pem 

Nokia-N900:/tmp/supl# perl /usr/bin/c_rehash /etc/certs/common-ca | grep 00d8

00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem => 7651b327.0

00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61.pem => 7651b327.1

My PR

Code:

Nokia-N900:/tmp/supl#  apt-cache policy mp-fremantle-community-pr

mp-fremantle-community-pr:

  Installed: 21.2011.38-1Tmaemo8.2+thumb1

  Candidate: 21.2011.38-1Tmaemo8.2+thumb1

it is cmcli -c common-ca -r 00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1 - without .pem extension

Ulle	2013-08-29 13:48

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by michaaa62 (Post 1370402)

Any suggestions, what i am doing wrong???
Removing the certificates does not work, adding fails because the files exist...

Or consider using my bash one-liner in http://talk.maemo.org/showpost.php?p=1370357

peterleinchen

2013-08-29 16:26

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by freemangordon (Post 1370404)

No, we found what the real problem is and which is the package to blame. The code chunk that is misbehaving is yet to be found ;) .

freemangordon,
here you refer to the google problem, or?
As I see the Nokia problem solved due to mixed up certs!?

I noticed that I can only get ACWP data, but not AGNSS data from Nokia server (also Vodafone). Should nokia provide that info also?
If yes, there is still above mentioned code chunk to be found (either for Google or Nokia).
Only thing I may think of causing this is some change in Google supl data still in the specification, but not correctly handled in N900 (like it was for tinymail).
Do you have another idea?

--edit
Okay, just reread.
And of course you refer with your code chunk to some problem in libmaemosec not handling the presence of two certificates with same fingerprint, right?
Nevertheless above problem with Google is still present, but not that urgent anymore (still I'd like to know/solve ...)

--editedit
Or, another thought:
could it be that Google changed their supl server to deliver only AGNSS data and no ACWP data anymore. And our N900 is only able to collect/use ACWP? This would explain the SSL-trusty successful (and bigger) data exchange with Google and Sirf supl servers.

Ulle	2013-08-29 16:54

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by peterleinchen (Post 1370462)

I noticed that I can only get ACWP data, but not AGNSS data from Nokia server (also Vodafone).
...
could it be that Google changed their supl server to deliver only AGNSS data and no ACWP data anymore. And our N900 is only able to collect/use ACWP? This would explain the SSL-trusty successful (and bigger) data exchange with Google and Sirf supl servers.

Thank you peterleinchen, for bringing this up! I actually have no clue whats going on with ACWP and AGNSS, but it could be the difference in what the servers are delivering.
So following this:
ACWP is returned from nokia, vodafone and sirf with just a pair of long/lat data (or kind of),
AGNSS ist returned from google and sonyericsson (not sirf) with quite some PDU/RLP and ephemeris data.
Both in XML-like style.

joerg_rw

2013-08-29 17:04

Re: Nokia N900 A-GPS Not Working Anymore

wireshark is your friend ;-)

Ulle	2013-08-29 17:09

Re: Nokia N900 A-GPS Not Working Anymore

If someone wants to test supl.sonyericsson.com with N900 there is still the first show stopper to solve: Certificate verification fails due to missing issuer cert.

I found this http://pastebin.com/2dNbJ79L , which was mentioned in an android gps discussion somewhere, and copied line 8. to 28. (the content of cacert.txt) into a file on my N900 .

Then after

Code:

cmcli -c common-ca -a /path/to/that/file

I get with

Code:

cmcli -T common-ca -v supl.sonyericsson.com:7275

a nice "Verified OK".

Edit: I couldn't find the root/issuer cert for sls1.sirf.com and sls2.sirf.com . I sent an email to slssupport@sirf.com (does not exist anymore) and webmaster@csr.com, asking for that. No answer so far ...

Ulle	2013-08-29 17:18

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by joerg_rw (Post 1370483)

wireshark is your friend ;-)

wiresharky is my friend, indeed :) ! But doesn't help much with TLS encrypted data ...

misiak

2013-08-29 17:26

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by Ulle (Post 1370488)

wiresharky is my friend, indeed :) ! But doesn't help much with TLS encrypted data ...

Are you saying about a certificate or about the actual data exchanged with server-side location software? I recently came across this article while acomplishing something at work, maybe mitmproxy could be used to "fool" N900 that your computer is location server (may require fake certificate generation via mitmproxy and installation on N900) and passing all traffic through your set-up proxy? That could help in debugging the internals of raw unciphered data exchanged between N900 and location server... I hope that's helpful (but I'm awake for 20-something-th hour now, so please excuse me if I got you wrong).

Ulle	2013-08-29 17:57

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by misiak (Post 1370490)

maybe mitmproxy could be used to "fool" N900

Thanks for sharing, but I already tried to "proxy" with socat until eccerr0r was pointing to supl-* at tajuma.com. Thats the only practicable way for watching TLS encrypted SUPL data exchange.
The tool is just exellent. Deploying MITM a big waste of time (for that).

joerg_rw

2013-08-29 19:39

Re: Nokia N900 A-GPS Not Working Anymore

ok, strace then? ;-)

nieldk

2013-08-29 20:13

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by Ulle (Post 1370486)

Code:

cmcli -c common-ca -a /path/to/that/file

I get with

Code:

cmcli -T common-ca -v supl.sonyericsson.com:7275

Probably because they use self signed certificates

Code:

~ root# openssl s_client -connect sls2.sirf.com:7275

CONNECTED(00000003)

depth=0 /C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com

verify error:num=20:unable to get local issuer certificate

verify return:1

depth=0 /C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com

verify error:num=27:certificate not trusted

verify return:1

depth=0 /C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com

verify error:num=21:unable to verify the first certificate

verify return:1

---

Certificate chain

 0 s:/C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com

   i:/C=US/ST=California/L=San Jose/O=SiRF Technology Inc./OU=ISBU/emailAddress=slssupport@sirf.com

---

freemangordon

2013-08-30 13:11

Re: Nokia N900 A-GPS Not Working Anymore

A fix is on it's way to CSSU, please test: http://talk.maemo.org/showpost.php?p...&postcount=222

Those of you that have changed their certificates, make sure to revert to "stock" state, otherwise installation may fail/be incomplete, the files in /etc are treated by apt/dpkg as config files and are not auto overwritten on a new package version installed.

freemangordon

2013-08-30 15:26

Re: Nokia N900 A-GPS Not Working Anymore

@peterleinchen - followup to http://talk.maemo.org/showpost.php?p...&postcount=225

Not sure what you mean by "stock" but if it is PR1.3.1 I guess it makes sense to install everything *certman* , there are a couple of certificate fixes in CSSU not present in PR1.3.1.

Not to say I strongly recommend to install CSSU, be it -stabe, -testing or -thumb ;)

peterleinchen

2013-08-30 16:23

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by freemangordon (Post 1370657)

Thanks, just wanted to be sure you did not code anything into a lib or similar.
I checked packages and yeah they seem to be installable to non-CSSU devices (I know I know).

Furthermore I have seen you exchanged the certs, so content of one into the other file (seen by sha1sum). It is a bit late now, but I began to play with order also and I found that the c_rehash is the one to "blame" :( (not that I am good in reading/understanding perl)
It fetches all pem/crt from directory, but not in any order. That is the reason why the link 7651b327.0 points to the newer cert, while 7651b327.1 should do so. (That is also reason why f3a27298eeb81b82801c4db69a3027990a2f72e2-1.pem works, as the symlink *.1 points to newer cert.

I checked it by just re-symlinking *.0 to older and *.1 to newer cert. And it worked.

--EDIT
Checked once more. And it is really weird/confusing/erroneous ! :rolleyes:
Now I added certs again. First old one, then new one (as before). And guess what? It worked without changing anything! When checking the symlinks they showed to the correct locations *.0 to *-1.pem (without manually re-symlinking).
Conclusio? IDK. Seems like it could work on some devices and on some not. Just regarding the order of $flist...

--editedit
Okay, now I am confused. Strike above.
It seems after 'c_rehash /etc/certs/common-ca' everything is fine.
I removed, inserted (in different orders) and more. But it is working always.
So easiest is to
make a backup of 00d85*.pem and 00d85*-1.pem
remove 0085*, cmcli -c common-ca -r 00d85*
remove 7651*.*, rm 7651*
reinsert 00d85* (and 00d85*-1) in exactly this order
cmcli -c common-ca -a backup_of_00d85*.pem
cmcli -c common-ca -a backup_of_00d85*-1.pem
this should be enough.
If it is not working for you, then do a
c_rehash /etc/certs/common-ca
If still not working, then start all over, but readd in reversed order (first 00d85*-1.pem and then 00d85*.pem)

Or just use fmg's patch (before messing around!).

Quote:

Originally Posted by freemangordon (Post 1370657)

Not to say I strongly recommend to install CSSU, be it -stabe, -testing or -thumb ;)

I know I know, and the next device -be it a N900 from drawer or Neo900- will have for sure. But this device is so nicely running and customized, I just do not want to "spoil" it. ;)

Sandeep

2013-09-24 15:37

Re: Nokia N900 A-GPS Not Working Anymore

My GPS is not working for about a month. I use supl.google.com and tried a few others.
Ran this command to reset cache :
gconftool --recursive-unset /system/nokia/location

Reflash done(emmc+rootfs), still no help. It's keep on searching and never locks in. Please let me know how to fix this. Could this be a possible hardware issue?
Thanks

sixwheeledbeast

2013-09-24 16:48

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by Sandeep (Post 1376440)

If you read the thread carefully you will see that there is a patch in cssu-devel to fix this issue

handaxe

2013-09-24 17:36

Re: Nokia N900 A-GPS Not Working Anymore

Quote:

Originally Posted by Sandeep (Post 1376440)

AGPS makes acquiring a fix much faster than just using the gps receiver and doing a sky search. Without agps you will eventually get a fix. sO, if your n900 does not get a fix AT ALL (leave it for 20\30 mins using something besides Nokia Maps) then your device has a hw fault.

(Edit: thanks pichlo for the heads up. Never use Nokia Maps so who would know.....)

pichlo

2013-09-24 20:13

Re: Nokia N900 A-GPS Not Working Anymore

The problem is that the built-in Nokia Maps application times out after just 10 minutes - even though the time it takes to receive the full almanac under ideal conditions with no retries is 12.5 minutes - which means it will never acquire a lock without help.

This has been discussed countless times, just do a search. Nokia was aware of that and they marked it as "won't fix" ("10 minutes ought to be enough for everybody!").

Get a third-party GPS application such as Location Test discussed in this thread to help Nokia Maps with the lock. It will not make it any faster - for that you need the patch that sixwheeledbeast mentioned - but it will not time out and hence get the lock eventually without the supl server assistance.

Sandeep

2013-09-25 09:42

Re: Nokia N900 A-GPS Not Working Anymore

Thanks a lot sixwheeledbeast, handaxe and pichlo. I read about that fix(I think maemo-security-certman ??), but i believe it's a fix with CSSU. I don't use CSSU for some reasons. I would like to know whether it's possible to use that fix without CSSU installed. I don't use Nokia maps, i'm happy using the Marble maps which was so convenient for me.
Thank you

All times are GMT. The time now is 04:19.

Page 4 of 9

Show 40 post(s) from this thread on one page

vBulletin® Version 3.8.8