![]() |
Re: Nokia N900 A-GPS Not Working Anymore
As per peterleinchen, I confirm I only noticed an issue after a reboot.
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
i ll be travelling at least 100 kms tmorrow from my current position i ll turn off my phone take the battrey out put it to charge and use modrana at a diff location will that suffice ? wi |
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
(against 0.9.8gn 24 Mar 2010 on N900) --edit Which seems far to new for stock OpenSSL, right? ;) So someone else with stock N9 please may also post output of Code:
openssl |
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
What kind of proof you like? ;)
I rebooted my N9 this morning, went to cellar and did not get a fix with WLAN connection. Then went to work and got a fix within seconds with GPRS and near to a window. |
Re: Nokia N900 A-GPS Not Working Anymore
openssl s_client -connect supl.google.com:7275 -CApath /etc/certs/common-ca
Edit: Oops.. i missed last freemangordon post. |
Re: Nokia N900 A-GPS Not Working Anymore
@xes, please see above ;)
@freemangordon I did some more (intensive) tests (during lunch time/walk ;) under clear sky). And I am sure N9 and google's supl do like it each other. :) Rebooted, no data connection, no fix within 30 seconds. Rebooted, GPRS data connection, got fix within a few seconds, And to be on the safe side: Rebooted again, no data connection, again no fix within 30 seconds. |
Re: Nokia N900 A-GPS Not Working Anymore
I remember now. How I was able to use google, while others Reported fail.
Back then, one diff was - actually - I was using my own build of openssl. Which I still have a copy of. In case. Its worth a try. http://talk.maemo.org/showpost.php?p...26&postcount=1 |
Re: Nokia N900 A-GPS Not Working Anymore
ok, I made some tests with supl-client (http://www.tajuma.com/supl/) and I think I am getting near - supl.nokia.com returns almanac even not requested, while supl.google.com does not return it unless requested.
That might explain why is "ssl_read_data: SSL_ERROR=5, ret=0, errno: Success" error spit - location proxy expects almanac, but server closes the connection. I will setup supl-proxy when I have some time, to see what request location-proxy sends to the supl server. EDIT: If someone wants to take it from here, I will publish the pre-compiled binaries on my webserver |
Re: Nokia N900 A-GPS Not Working Anymore
Hi freemangordon, thanks for looking into supl-proxy from tajuma.
Using the supl-client tool is one relatively easy way for showing that google an sonyericsson respond differently to SUPL requests (compared to nokia and vodafone). And thats the reason why some servers dont work with Maemo/N900 and others do work - if there are no cert issues. Other operation system obviously don't have that limitations for the responded data and work with all of the mentioned servers. Deploying supl-proxy as a real MITM is a bit more advanced, my results for this are in this earlier post http://talk.maemo.org/showpost.php?p...&postcount=101 (see attached zip there for logs) and http://talk.maemo.org/showpost.php?p...&postcount=114 May be you (or anyone else) are able to extend the supl-proxy source code to make it work as kind of a service, i.e. so it doesn't stop after each connection? That would make it possible to use it as a private proxy without any certificate trouble (maybe even locally on N900). Unfortunately I can't do it by myself with reasonable effort. |
Re: Nokia N900 A-GPS Not Working Anymore
I uploaded supl (supl-client, supl-proxy, ...) for fremantle to extras-devel for those who want to use it on device.
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
It took longer than expected, but since today I get a new certificate for supl.nokia.com
Code:
Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3 With Neo900 of course <wish>,running Maemo</wish> ;) |
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
Even there is a slef-signed cert error in the chain. Quote:
--edit Offtopic question: Any chance or contact for activating the navigation license on N95 once more? That one did not fall under the lifetime free navigation promise and it needed a 10€-fee each year paid by CC inside the navigation app itself. MS? na. Nokia? not anymore Here? |
Nokia N900 A-GPS Not working anymore
Does anyone else seem to have lost A-GPS from supl.nokia.com once again, or is it just me?
UPDATE:- Its working now? I opened GPSdata app and it locked on immiediately. Prior to that both camera geolocate and Ovi maps would not get a lock no matter what I tried? Bizarre |
Re: Nokia N900 A-GPS Not Working Anymore
oh. pinging today supl.nokia.com is working again. few days before supl.nokia.com was not responding
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
I started to use the N900 again after one year, upgraded to latest cssu stable 21.2011.38-1Smaemo8 (10.06.2016) but no A-gps fix with supl.nokia.com , certificate expired ?
|
Re: Nokia N900 A-GPS Not Working Anymore
supl.nokia.com is dead, just like nokia itself. Change the value to:
Code:
supl.google.com With google supl it's doing the same, mostly under 5 seconds. But yes, my previous n900 had problems with fixing, no matter if cellular data was enabled. It got partially broken stick on motherboard and broken antena (After hitting the ground really hard). |
Re: Nokia N900 A-GPS Not Working Anymore
dead? afaik it is NOT dead and still resolves to a valid address. On the other hand, I seem to remember N900 had problems with supl.google.com after the certificate problem was fixed for supl.nokia.com ... anyway, stopped using supl.google after supl.nokia started working again
as for the quick fixes on yours ... likely the result of ACWP and other variables (ephemeris data?). Take that N900 a long distance away, and not have a working SIM card ... and you'll probably be waiting for a fix for a long time too. @gianko - supl.nokia.com still gives me near-instant fixes. i am on CSSU-T however, although I believe the certificate fix was incorporated in Stable as well |
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
Quote:
Quote:
I'm not sure how it is all working, but it seems that slightly different configuration works differently on many devices. For now(and for me at least), if everything is fine with hardware there is only few if non problems at all |
Re: Nokia N900 A-GPS Not Working Anymore
very strange indeed. i also tried supl.google a few minutes ago, and because the gps data was mostly valid, the location was correct but 'coarse accuracy' - it didn't lock in 3 minutes. changed it back to 'supl.nokia' and as always, lock was done in less than 20s...
must be that your "it seems that slightly different configuration works differently on many devices" comment is correct, which actually sucks, haha EDIT: have to add i did these tests indoors |
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
Hi gianko, the current cert of supl.nokia.com is not expired. It has been renewed in February.
This is the bash oneliner I use to check: Code:
/usr/bin/openssl s_client -connect supl.nokia.com:7275 2>&1 | /bin/grep -A40 BEGIN | /usr/bin/openssl x509 -noout -text | /bin/grep -i -A1 -B3 "Not After" For looking after other certificate problems see this post: https://talk.maemo.org/showpost.php?...&postcount=101 Try the cmcli commands with your N900 and see if you get "Verified OK". And for proper GPS-testing I suggest seeing the posts on this page: https://talk.maemo.org/showthread.php?t=90651&page=6 and this post: http://talk.maemo.org/showpost.php?p...5&postcount=31 I dont have any issues with GPS here currently. Using supl.nokia.com with fingers crossed ... Anyway, glad to see some of you still using their "Apparat" here ;) Cheers, Ulle |
Re: Nokia N900 A-GPS Not Working Anymore
Hmm, noticed yesterday that I have problems with supl.nokia.com lately:
Code:
Feb 4 14:32:01 fremantle location-proxy[1297]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=19 My other N900, with openssl 0.9.8zf-1+maemo1+0m5+0cssu0 gets quick fix, with exactly the same settings. Here's the log: Code:
Feb 4 22:11:42 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=0 cmcli output for both N900 is the same Code:
cmcli -T common-ca -v supl.nokia.com:7275 Code:
openssl s_client -connect supl.nokia.com:7275 -CApath /etc/certs/common-ca/ |
Re: Nokia N900 A-GPS Not Working Anymore
Found the problem
Downgraded all *maemosec* packages to versions 0.1.4+0m5 (had 0.1.5 from devel), and 0.2.3 (had 0.2.7 from devel, and my 2nd N900 has 2.4, but doesn't seem to be in any repos) Instant fix on my 1st N900 and no attempts to contact 3gppnetwork.org |
Re: Nokia N900 A-GPS Not Working Anymore
Can you update *maemosec-certman-applet* back to 0.1.5 and verify if those packages are not problematic?
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
|
Re: Nokia N900 A-GPS Not Working Anymore
I cant seem to get a fix on my N900 GPS at all.
If I try "GNSS" or "AGNSS" in location-test-gui neither works. location-test-gui shows up to 5 satellites as "visible" but none as "in use" Tried rebooting the phone. Tried pulling the battery for a few minutes. Tried offline mode (with "GNSS"). Tried multiple versions of maemosec-certman-common-ca (including the 0.2.3 version with the "Fixes supl server not working." change in it). Tried the clear-gps-cache tool multiple times. Tried multiple SUPL servers (supl.nokia.com, supl.google.com, supl.vodafone.com). Tried going outside away from obstructions. Nothing works. Anyone got any suggestions on what else to try? I dont see anything in syslog (but maybe I dont have it configured properly to capture useful logs) |
Re: Nokia N900 A-GPS Not Working Anymore
The "sats" button in location-test-gui shows a bunch of SNR values for various satellites (up as high as 6 when I was standing further away from any buildings etc) with values ranging from high 20s through to 40 or more.
So its clearly actually talking to satellites in space (it woudn't be giving me SNR values if it wasn't) but for whatever reason it isn't working. Anyone know what SNR values I should be looking for and whether bigger or smaller values are good? |
Re: Nokia N900 A-GPS Not Working Anymore
ok, wtf, now it got a lock somehow. I dont know what I did but it got a lock in location-test-GUI and now a lock in nokia-maps.
No ideas what might be going on now. Anyone got any ideas on what to try to figure out why it isn't getting a lock or why its taking so long or whatever? Being able to get reliable lock when I open maps app or whatever would be usefull :) |
Re: Nokia N900 A-GPS Not Working Anymore
Looks like we do need to figure out what certificates are missing from the current maemo-security-certman root CA store (which matches the current mozilla root CA set) that are needed for the SUPL server and why they are missing. Or if they are there but the ordering is wrong, we need to figure out why and find a way to correct it by fixing the tools in maemo-security-certman somehow (even if it means adding some sort of hardcoded "these certificates need to be in this order" feature to the relavent tools or some changes to the instructions to manually add the correct certificate back)
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
Code:
cmcli -c common-ca -a /etc/certs/common-ca/00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem The cert was removed in this commit: https://github.com/community-ssu/mae...0033bde5b16535 Can you try get a lock with the latest maemo-security-certman and the above cert? |
Re: Nokia N900 A-GPS Not Working Anymore
It looks like we need to figure out why supl.nokia.com needs that specific old certificate (one that the smart people at Mozilla have stopped including for presumably good reasons) and whether we really need that cert or whether there is some other issue going on.
|
Re: Nokia N900 A-GPS Not Working Anymore
Oh and installing a random cert without understanding what cert it is and why its needed and why Mozilla don't ship it anymore and etc is a stupid idea (the set of certs distributed by Mozilla is chosen very carefully)
|
Re: Nokia N900 A-GPS Not Working Anymore
Quote:
With that said everyone with a n900 besides the people running the cssu-devel version of maemo-security-certman are using this cert and since sicelo has reverted back to the previous version to fix his issue he will be using that cert anyway. |
Re: Nokia N900 A-GPS Not Working Anymore
Ok so it seems the real problem here is that supl.nokia.com has 2 obsolete VeriSign certificates in its chain, one with
Subject: "CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU="(c) 2006 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US" and one with Subject: "OU=Class 3 Public Primary Certification Authority,O="VeriSign, Inc.",C=US" The current mozilla root CA store (and by extention the current maemo-security-certman git which I updated earlier) contains a newer certificate that matches Subject: "CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU="(c) 2006 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US" and will correctly validate the certificate Subject: "CN=Symantec Class 3 Secure Server CA - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US" which in turn will correctly validate the certificate Subject: "CN=supl.nokia.com,O=HERE Global BV,L=Veldhoven,ST=Noord-Brabant,C=NL" I have an idea how to fix this without security risk to other things (e.g. browser) involving the fact that location-proxy will read from a private certificate store named location-proxy. This will require a binary patch to location-proxy (to correct a bug in the code that accesses the private certificate store) and installing the necessary root certificate into the private certificate store via cmcli. Both should be fairly easy to do I suspect (we do binary patches for the cell broadcast SMS stuff, I see no reason we cant do the same for location-proxy) The fix is working on my own N900 (I am running the modified location-proxy and with the relavent certificate installed, I cleared all the GPS caches, rebooted the phone to flush out anything in RAM and got a GPS fix in no time with a dozen or so satellites returning signal levels in location-test-gui) With the current contents of maemo-security-certman Git plus the 2 byte change to location-proxy plus the extra certificate stored in the private certificate store, AGPS with supl.nokia.com will work and work great. We just need to figure out how best to package up the fix :) |
All times are GMT. The time now is 07:29. |
vBulletin® Version 3.8.8