maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   Nokia N900 A-GPS Not Working Anymore (https://talk.maemo.org/showthread.php?t=90651)

sixwheeledbeast 2015-04-22 07:08

Re: Nokia N900 A-GPS Not Working Anymore
 
As per peterleinchen, I confirm I only noticed an issue after a reboot.

freemangordon 2015-04-22 07:30

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by peterleinchen (Post 1468056)
Absolutely right. Just used same command as Niel for better comparison.

Output of N9:
Code:

SSL-Session:
    Protocol  : TLSv1.2


Wait, what? What version is openssl on N9?

nokiabot 2015-04-22 08:16

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by pichlo (Post 1468051)
I vaguely recall having this discussion before. Google not working for anyone except nokiabot. I don't think we ever got to the bottom of it.

well tell me what to post also how to
i ll be travelling at least 100 kms tmorrow from my current position
i ll turn off my phone take the battrey out put it to charge and use modrana at a diff location
will that suffice ?
wi

nokiabot 2015-04-22 08:19

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by peterleinchen (Post 1468036)
Nope.
But also N9 does not have it in common-ca. Both have GeoTrust Global installed.
Output looks pretty similar on both devices (below from N900)
Code:

~#  openssl s_client -connect supl.google.com:7275
CONNECTED(00000003)
depth=2 /C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
verify error:num=20:unable to get local issuer certificate
verify return:0
---
Certificate chain
 0 s:/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com
  i:/C=US/O=Google Inc/CN=Google Internet Authority G2
 1 s:/C=US/O=Google Inc/CN=Google Internet Authority G2
  i:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
 2 s:/C=US/O=GeoTrust Inc./CN=GeoTrust Global CA
  i:/C=US/O=Equifax/OU=Equifax Secure Certificate Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Mountain View/O=Google Inc/CN=*.google.com
issuer=/C=US/O=Google Inc/CN=Google Internet Authority G2
---
No client certificate CA names sent
---
SSL handshake has read 3999 bytes and written 435 bytes
---
New, TLSv1/SSLv3, Cipher is RC4-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : RC4-SHA
    Session-ID: A7E8414ECDB2BF239AF1352CB1E4C4B5B388FDFDBD00155956ABBE9F808F68FB
    Session-ID-ctx:
    Master-Key: 520D6FBFCB6FC0E077B38F7FB8F9F3C79E9DE10DFB34643350565EE05429C7F185B005A59972C7C9F638317A2BA3133B
    Key-Arg  : None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1429649116
    Timeout  : 300 (sec)
    Verify return code: 20 (unable to get local issuer certificate)

Certs was also my first thought. But iirc I could not spot it down to a missing cert.

--
just thinking loud:
ssl3 / tls (not enabled for supl requests)? Even we see good results with OpenSSL, could it be the location service uses only ssl3 where google switched supl to tls?

how you manage output thease gibberish ? i want to post too :D

peterleinchen 2015-04-22 08:28

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by freemangordon (Post 1468061)
Wait, what? What version is openssl on N9?

OpenSSL 1.0.1g 7 April 2014
(against 0.9.8gn 24 Mar 2010 on N900)


--edit
Which seems far to new for stock OpenSSL, right? ;)
So someone else with stock N9 please may also post output of
Code:

openssl
version


freemangordon 2015-04-22 09:48

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by peterleinchen (Post 1468068)
OpenSSL 1.0.1g 7 April 2014
(against 0.9.8gn 24 Mar 2010 on N900)

well, in CSSU it is 0.9.8zf 19 Mar 2015 :P

Quote:

--edit
Which seems far to new for stock OpenSSL, right? ;)
So someone else with stock N9 please may also post output of
Code:

openssl
version


What I still miss is if supl.google.com works on n9.

peterleinchen 2015-04-22 10:05

Re: Nokia N900 A-GPS Not Working Anymore
 
What kind of proof you like? ;)

I rebooted my N9 this morning, went to cellar and did not get a fix with WLAN connection. Then went to work and got a fix within seconds with GPRS and near to a window.

xes 2015-04-22 10:46

Re: Nokia N900 A-GPS Not Working Anymore
 
openssl s_client -connect supl.google.com:7275 -CApath /etc/certs/common-ca

Edit:
Oops.. i missed last freemangordon post.

peterleinchen 2015-04-22 18:24

Re: Nokia N900 A-GPS Not Working Anymore
 
@xes, please see above ;)

@freemangordon
I did some more (intensive) tests (during lunch time/walk ;) under clear sky).
And I am sure N9 and google's supl do like it each other. :)

Rebooted, no data connection, no fix within 30 seconds.
Rebooted, GPRS data connection, got fix within a few seconds,
And to be on the safe side:
Rebooted again, no data connection, again no fix within 30 seconds.

nieldk 2015-04-22 18:56

Re: Nokia N900 A-GPS Not Working Anymore
 
I remember now. How I was able to use google, while others Reported fail.

Back then, one diff was - actually - I was using my own build of openssl. Which I still have a copy of.

In case. Its worth a try.

http://talk.maemo.org/showpost.php?p...26&postcount=1

freemangordon 2015-04-23 06:20

Re: Nokia N900 A-GPS Not Working Anymore
 
ok, I made some tests with supl-client (http://www.tajuma.com/supl/) and I think I am getting near - supl.nokia.com returns almanac even not requested, while supl.google.com does not return it unless requested.

That might explain why is "ssl_read_data: SSL_ERROR=5, ret=0, errno: Success" error spit - location proxy expects almanac, but server closes the connection. I will setup supl-proxy when I have some time, to see what request location-proxy sends to the supl server.

EDIT:
If someone wants to take it from here, I will publish the pre-compiled binaries on my webserver

Ulle 2015-04-23 08:04

Re: Nokia N900 A-GPS Not Working Anymore
 
Hi freemangordon, thanks for looking into supl-proxy from tajuma.

Using the supl-client tool is one relatively easy way for showing that google an sonyericsson respond differently to SUPL requests (compared to nokia and vodafone). And thats the reason why some servers dont work with Maemo/N900 and others do work - if there are no cert issues. Other operation system obviously don't have that limitations for the responded data and work with all of the mentioned servers.

Deploying supl-proxy as a real MITM is a bit more advanced, my results for this are in this earlier post
http://talk.maemo.org/showpost.php?p...&postcount=101
(see attached zip there for logs) and
http://talk.maemo.org/showpost.php?p...&postcount=114

May be you (or anyone else) are able to extend the supl-proxy source code to make it work as kind of a service, i.e. so it doesn't stop after each connection?
That would make it possible to use it as a private proxy without any certificate trouble (maybe even locally on N900).

Unfortunately I can't do it by myself with reasonable effort.

bencoh 2015-04-23 22:29

Re: Nokia N900 A-GPS Not Working Anymore
 
I uploaded supl (supl-client, supl-proxy, ...) for fremantle to extras-devel for those who want to use it on device.

wicket 2015-04-24 04:19

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by peterleinchen (Post 1468118)
@xes, please see above ;)

@freemangordon
I did some more (intensive) tests (during lunch time/walk ;) under clear sky).
And I am sure N9 and google's supl do like it each other. :)

Rebooted, no data connection, no fix within 30 seconds.
Rebooted, GPRS data connection, got fix within a few seconds,
And to be on the safe side:
Rebooted again, no data connection, again no fix within 30 seconds.

How did you change the supl server on Harmattan? Unlike on the N900, I couldn't find an option to configure it anywhere. I even grepped through a recursive listing of the gconf tree but I still couldn't find it.

peterleinchen 2015-04-24 05:33

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by wicket (Post 1468289)
How did you change the supl server on Harmattan? ...

/etc/xdg/nokia/location-settings.conf

Ulle 2015-05-15 14:58

Re: Nokia N900 A-GPS Not Working Anymore
 
It took longer than expected, but since today I get a new certificate for supl.nokia.com
Code:

Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3
Validity
    Not Before: May 14 00:00:00 2015 GMT
    Not After : May 14 23:59:59 2016 GMT
Subject: C=NL, ST=Noord-Brabant, L=Veldhoven, O=HERE Global BV, CN=supl.nokia.com

Hope to see you all here again in a year!
With Neo900 of course <wish>,running Maemo</wish> ;)

peterleinchen 2015-05-15 17:44

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by Ulle (Post 1470397)
It took longer than expected, but since today I get a new certificate for supl.nokia.com

And A-GPS is working again on N900 (and older Symbians)! :)
Even there is a slef-signed cert error in the chain.

Quote:

Hope to see you all here again in a year!
With Neo900 of course <wish>,running Maemo</wish> ;)
For sure. About Neo, we will see...


--edit
Offtopic question:
Any chance or contact for activating the navigation license on N95 once more? That one did not fall under the lifetime free navigation promise and it needed a 10€-fee each year paid by CC inside the navigation app itself.
MS? na.
Nokia? not anymore
Here?

glo-worm 2016-03-10 14:09

Nokia N900 A-GPS Not working anymore
 
Does anyone else seem to have lost A-GPS from supl.nokia.com once again, or is it just me?

UPDATE:- Its working now? I opened GPSdata app and it locked on immiediately. Prior to that both camera geolocate and Ovi maps would not get a lock no matter what I tried? Bizarre

chilango 2016-03-10 15:31

Re: Nokia N900 A-GPS Not Working Anymore
 
oh. pinging today supl.nokia.com is working again. few days before supl.nokia.com was not responding

glo-worm 2016-03-10 15:55

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by chilango (Post 1501096)
oh. pinging today supl.nokia.com is working again. few days before supl.nokia.com was not responding

Yeah, I tested it with a ping, when playing around, so I knew there was something there. Just wouldnt work for some reason until I used the gpsapp.

gianko 2016-09-27 11:40

Re: Nokia N900 A-GPS Not Working Anymore
 
I started to use the N900 again after one year, upgraded to latest cssu stable 21.2011.38-1Smaemo8 (10.06.2016) but no A-gps fix with supl.nokia.com , certificate expired ?

Ridd92 2016-09-27 12:20

Re: Nokia N900 A-GPS Not Working Anymore
 
supl.nokia.com is dead, just like nokia itself. Change the value to:

Code:

supl.google.com
But I still can't figure out what is it all about? Mine n900 got fix under a minute everytime, with no cellular data, only gps, even when I only stick it through the window.

With google supl it's doing the same, mostly under 5 seconds.

But yes, my previous n900 had problems with fixing, no matter if cellular data was enabled. It got partially broken stick on motherboard and broken antena (After hitting the ground really hard).

sicelo 2016-09-27 12:38

Re: Nokia N900 A-GPS Not Working Anymore
 
dead? afaik it is NOT dead and still resolves to a valid address. On the other hand, I seem to remember N900 had problems with supl.google.com after the certificate problem was fixed for supl.nokia.com ... anyway, stopped using supl.google after supl.nokia started working again

as for the quick fixes on yours ... likely the result of ACWP and other variables (ephemeris data?). Take that N900 a long distance away, and not have a working SIM card ... and you'll probably be waiting for a fix for a long time too.

@gianko - supl.nokia.com still gives me near-instant fixes. i am on CSSU-T however, although I believe the certificate fix was incorporated in Stable as well

Ridd92 2016-09-27 13:04

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by sicelo (Post 1515712)
dead? afaik it is NOT dead and still resolves to a valid address. On the other hand, I seem to remember N900 had problems with supl.google.com after the certificate problem was fixed for supl.nokia.com ... anyway, stopped using supl.google after supl.nokia started working again

Ok, not dead, but I'm not sure about the functionality of supl.nokia. Just tested, with cellular data fix takes about a minute, like with no gsm at all. After switching to supl.google got fix in few second in slightly different position.

Quote:

Originally Posted by sicelo (Post 1515712)
as for the quick fixes on yours ... likely the result of ACWP and other variables (ephemeris data?). Take that N900 a long distance away, and not have a working SIM card ... and you'll probably be waiting for a fix for a long time too

If I got fix when staying in one spot, then I can turn off the gsm and will have it fixed, even traveling 100km (Checked few days ago) with proper directions and so.

Quote:

Originally Posted by sicelo (Post 1515712)
supl.nokia.com still gives me near-instant fixes. i am on CSSU-T however, although I believe the certificate fix was incorporated in Stable as well

I'm on CSSU Stable, there is no problems with supl.google.com on this platform

I'm not sure how it is all working, but it seems that slightly different configuration works differently on many devices. For now(and for me at least), if everything is fine with hardware there is only few if non problems at all

sicelo 2016-09-27 13:14

Re: Nokia N900 A-GPS Not Working Anymore
 
very strange indeed. i also tried supl.google a few minutes ago, and because the gps data was mostly valid, the location was correct but 'coarse accuracy' - it didn't lock in 3 minutes. changed it back to 'supl.nokia' and as always, lock was done in less than 20s...

must be that your "it seems that slightly different configuration works differently on many devices" comment is correct, which actually sucks, haha

EDIT: have to add i did these tests indoors

gianko 2016-09-27 17:07

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by Ulle (Post 1470397)
It took longer than expected, but since today I get a new certificate for supl.nokia.com
Code:

Issuer: C=US, O=VeriSign, Inc., OU=VeriSign Trust Network, OU=Terms of use at https://www.verisign.com/rpa (c)10, CN=VeriSign Class 3 Secure Server CA - G3
Validity
    Not Before: May 14 00:00:00 2015 GMT
    Not After : May 14 23:59:59 2016 GMT
Subject: C=NL, ST=Noord-Brabant, L=Veldhoven, O=HERE Global BV, CN=supl.nokia.com

Hope to see you all here again in a year!
With Neo900 of course <wish>,running Maemo</wish> ;)

According to this post the cert for Nokia is expired. I have no indoor fix with only wifi and A-gps. Tried both Google and Nokia supl but no fix. Btw if I ping supl.google.com I have replies but if I ping supl.nokia.com I got 100% packet lost but resolve the IP 54.93.209.220

Ulle 2016-09-27 19:52

Re: Nokia N900 A-GPS Not Working Anymore
 
Hi gianko, the current cert of supl.nokia.com is not expired. It has been renewed in February.
This is the bash oneliner I use to check:
Code:

/usr/bin/openssl s_client -connect supl.nokia.com:7275 2>&1 | /bin/grep -A40 BEGIN | /usr/bin/openssl x509 -noout -text | /bin/grep -i -A1 -B3 "Not After"
Works on N900 and most linux boxes.

For looking after other certificate problems see this post:
https://talk.maemo.org/showpost.php?...&postcount=101
Try the cmcli commands with your N900 and see if you get "Verified OK".
And for proper GPS-testing I suggest seeing the posts on this page:
https://talk.maemo.org/showthread.php?t=90651&page=6
and this post:
http://talk.maemo.org/showpost.php?p...5&postcount=31

I dont have any issues with GPS here currently. Using supl.nokia.com with fingers crossed ...

Anyway, glad to see some of you still using their "Apparat" here ;)
Cheers, Ulle

sicelo 2017-02-04 12:34

Re: Nokia N900 A-GPS Not Working Anymore
 
Hmm, noticed yesterday that I have problems with supl.nokia.com lately:

Code:

Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=19
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB WARNING ** default - host: supl.nokia.com not verified, result: 19
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB WARNING ** default - Connection to h-slp.mnc002.mcc655.pub.3gppnetwork.org:7275 failed
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB WARNING ** default - error:2006A066:BIO routines:BIO_get_host_ip:bad hostname lookup
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB DEBUG default - Socket fd=12 closed on request

The device has CSSU-Thumb with openssl 0.9.8zh-1+maemo1+0m5+0cssu0

My other N900, with openssl 0.9.8zf-1+maemo1+0m5+0cssu0 gets quick fix, with exactly the same settings. Here's the log:
Code:

Feb  4 22:11:42 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=0
Feb  4 22:11:43 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=13, verify_res=0
Feb  4 22:11:43 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket fd=12 closed on request
Feb  4 22:11:43 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket fd=13 closed on request

An interesting thing is - the 2nd N900 never tries to contact h-slp.mncXXX.mccXXX.pub.3gppnetwork.org, whereas the 2nd one does. XXX depends on the operator whose SIM is in the device

cmcli output for both N900 is the same
Code:

cmcli -T common-ca -v supl.nokia.com:7275
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 Verification failed: self signed certificate

and with both,
Code:

openssl s_client -connect supl.nokia.com:7275 -CApath /etc/certs/common-ca/

...
...
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
    Session-ID: ...
    Session-ID-ctx:
    Master-Key: ...
    Key-Arg  : None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1486242237
    Timeout  : 300 (sec)
    Verify return code: 0 (ok)


sicelo 2017-02-04 23:07

Re: Nokia N900 A-GPS Not Working Anymore
 
Found the problem

Downgraded all *maemosec* packages to versions 0.1.4+0m5 (had 0.1.5 from devel), and 0.2.3 (had 0.2.7 from devel, and my 2nd N900 has 2.4, but doesn't seem to be in any repos)

Instant fix on my 1st N900 and no attempts to contact 3gppnetwork.org

pali 2017-02-04 23:22

Re: Nokia N900 A-GPS Not Working Anymore
 
Can you update *maemosec-certman-applet* back to 0.1.5 and verify if those packages are not problematic?

sicelo 2017-02-04 23:54

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by pali (Post 1522851)
Can you update *maemosec-certman-applet* back to 0.1.5 and verify if those packages are not problematic?

Ok .. no problem with *maemosec-certman-applet* .. even with 0.1.5 I still have fix.

jonwil 2017-02-05 02:17

Re: Nokia N900 A-GPS Not Working Anymore
 
I cant seem to get a fix on my N900 GPS at all.
If I try "GNSS" or "AGNSS" in location-test-gui neither works. location-test-gui shows up to 5 satellites as "visible" but none as "in use" Tried rebooting the phone. Tried pulling the battery for a few minutes. Tried offline mode (with "GNSS"). Tried multiple versions of maemosec-certman-common-ca (including the 0.2.3 version with the "Fixes supl server not working." change in it). Tried the clear-gps-cache tool multiple times. Tried multiple SUPL servers (supl.nokia.com, supl.google.com, supl.vodafone.com). Tried going outside away from obstructions. Nothing works.

Anyone got any suggestions on what else to try? I dont see anything in syslog (but maybe I dont have it configured properly to capture useful logs)

jonwil 2017-02-05 02:26

Re: Nokia N900 A-GPS Not Working Anymore
 
The "sats" button in location-test-gui shows a bunch of SNR values for various satellites (up as high as 6 when I was standing further away from any buildings etc) with values ranging from high 20s through to 40 or more.

So its clearly actually talking to satellites in space (it woudn't be giving me SNR values if it wasn't) but for whatever reason it isn't working. Anyone know what SNR values I should be looking for and whether bigger or smaller values are good?

jonwil 2017-02-05 02:32

Re: Nokia N900 A-GPS Not Working Anymore
 
ok, wtf, now it got a lock somehow. I dont know what I did but it got a lock in location-test-GUI and now a lock in nokia-maps.

No ideas what might be going on now. Anyone got any ideas on what to try to figure out why it isn't getting a lock or why its taking so long or whatever? Being able to get reliable lock when I open maps app or whatever would be usefull :)

jonwil 2017-02-05 03:15

Re: Nokia N900 A-GPS Not Working Anymore
 
Looks like we do need to figure out what certificates are missing from the current maemo-security-certman root CA store (which matches the current mozilla root CA set) that are needed for the SUPL server and why they are missing. Or if they are there but the ordering is wrong, we need to figure out why and find a way to correct it by fixing the tools in maemo-security-certman somehow (even if it means adding some sort of hardcoded "these certificates need to be in this order" feature to the relavent tools or some changes to the instructions to manually add the correct certificate back)

Ilew 2017-02-05 03:49

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by sicelo (Post 1522819)
Code:

cmcli -T common-ca -v supl.nokia.com:7275
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 Verification failed: self signed certificate


Running the following can fix this issue by installing a missing certificate:
Code:

cmcli -c common-ca -a /etc/certs/common-ca/00d85a4c25c122e58b31ef6dbaf3cc5f29f10d61-1.pem
The cert should be on your device unless it was removed.

The cert was removed in this commit:
https://github.com/community-ssu/mae...0033bde5b16535

Can you try get a lock with the latest maemo-security-certman and the above cert?

jonwil 2017-02-05 04:57

Re: Nokia N900 A-GPS Not Working Anymore
 
It looks like we need to figure out why supl.nokia.com needs that specific old certificate (one that the smart people at Mozilla have stopped including for presumably good reasons) and whether we really need that cert or whether there is some other issue going on.

jonwil 2017-02-05 05:30

Re: Nokia N900 A-GPS Not Working Anymore
 
Oh and installing a random cert without understanding what cert it is and why its needed and why Mozilla don't ship it anymore and etc is a stupid idea (the set of certs distributed by Mozilla is chosen very carefully)

Ilew 2017-02-05 05:49

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by jonwil (Post 1522861)
Oh and installing a random cert without understanding what cert it is and why its needed and why Mozilla don't ship it anymore and etc is a stupid idea (the set of certs distributed by Mozilla is chosen very carefully)

Yes agreed.
With that said everyone with a n900 besides the people running the cssu-devel version of maemo-security-certman are using this cert and since sicelo has reverted back to the previous version to fix his issue he will be using that cert anyway.

jonwil 2017-02-05 14:43

Re: Nokia N900 A-GPS Not Working Anymore
 
Ok so it seems the real problem here is that supl.nokia.com has 2 obsolete VeriSign certificates in its chain, one with
Subject: "CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU="(c) 2006 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US"
and one with
Subject: "OU=Class 3 Public Primary Certification Authority,O="VeriSign, Inc.",C=US"

The current mozilla root CA store (and by extention the current maemo-security-certman git which I updated earlier) contains a newer certificate that matches
Subject: "CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU="(c) 2006 VeriSign, Inc. - For authorized use only",OU=VeriSign Trust Network,O="VeriSign, Inc.",C=US"
and will correctly validate the certificate
Subject: "CN=Symantec Class 3 Secure Server CA - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US"
which in turn will correctly validate the certificate
Subject: "CN=supl.nokia.com,O=HERE Global BV,L=Veldhoven,ST=Noord-Brabant,C=NL"

I have an idea how to fix this without security risk to other things (e.g. browser) involving the fact that location-proxy will read from a private certificate store named location-proxy. This will require a binary patch to location-proxy (to correct a bug in the code that accesses the private certificate store) and installing the necessary root certificate into the private certificate store via cmcli. Both should be fairly easy to do I suspect (we do binary patches for the cell broadcast SMS stuff, I see no reason we cant do the same for location-proxy)

The fix is working on my own N900 (I am running the modified location-proxy and with the relavent certificate installed, I cleared all the GPS caches, rebooted the phone to flush out anything in RAM and got a GPS fix in no time with a dozen or so satellites returning signal levels in location-test-gui)

With the current contents of maemo-security-certman Git plus the 2 byte change to location-proxy plus the extra certificate stored in the private certificate store, AGPS with supl.nokia.com will work and work great.

We just need to figure out how best to package up the fix :)


All times are GMT. The time now is 07:29.

vBulletin® Version 3.8.8