maemo.org - Talk

maemo.org - Talk (https://talk.maemo.org/index.php)
-   Nokia N900 (https://talk.maemo.org/forumdisplay.php?f=44)
-   -   Nokia N900 A-GPS Not Working Anymore (https://talk.maemo.org/showthread.php?t=90651)

pali 2017-02-05 14:54

Re: Nokia N900 A-GPS Not Working Anymore
 
jonwil: Cannot we just include "0 s:/C=NL/ST=Noord-Brabant/L=Veldhoven/O=HERE Global BV/CN=supl.nokia.com" cert into storage and establish connection without checking whole certificate chain?

That cert has CN=supl.nokia.com so is valid only for supl.nokia.com. And once you trust some certificate in chain, you do not have to validate other in chain...

pali 2017-02-05 15:03

Re: Nokia N900 A-GPS Not Working Anymore
 
Anyway, on Ubuntu 12.04 verification to supl.nokia.com:7275 pass:
Code:

$ openssl s_client -connect supl.nokia.com:7275 -CAfile /etc/ssl/certs/ca-certificates.crt
CONNECTED(00000003)
depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary Certification Authority
verify return:1
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
verify return:1
depth=1 C = US, O = Symantec Corporation, OU = Symantec Trust Network, CN = Symantec Class 3 Secure Server CA - G4
verify return:1
depth=0 C = NL, ST = Noord-Brabant, L = Veldhoven, O = HERE Global BV, CN = supl.nokia.com
verify return:1
---
Certificate chain
 0 s:/C=NL/ST=Noord-Brabant/L=Veldhoven/O=HERE Global BV/CN=supl.nokia.com
  i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
 1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
  i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
  i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
 3 s:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
  i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
subject=/C=NL/ST=Noord-Brabant/L=Veldhoven/O=HERE Global BV/CN=supl.nokia.com
issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
---
No client certificate CA names sent
---
SSL handshake has read 5304 bytes and written 421 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: FA31BE7E16B88AA4065D88CF78256C136596EFEA30667A7773FD7AF6403A4DE1
    Session-ID-ctx:
    Master-Key: 11D4F52DEA6E4324BD9276717F90F26FE76AE54F8FE65732244C22E080D11BFF537884DE502187F91FEA23580261842B
    Key-Arg  : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1486306871
    Timeout  : 300 (sec)
    Verify return code: 0 (ok)
---
DONE

On Debian 8 too:
Code:

$ openssl s_client -connect supl.nokia.com:7275 -CAfile /etc/ssl/certs/ca-certificates.crt
CONNECTED(00000003)
depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary Certification Authority
verify return:1
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
verify return:1
depth=1 C = US, O = Symantec Corporation, OU = Symantec Trust Network, CN = Symantec Class 3 Secure Server CA - G4
verify return:1
depth=0 C = NL, ST = Noord-Brabant, L = Veldhoven, O = HERE Global BV, CN = supl.nokia.com
verify return:1
---
Certificate chain
 0 s:/C=NL/ST=Noord-Brabant/L=Veldhoven/O=HERE Global BV/CN=supl.nokia.com
  i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
 1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
  i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
  i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
 3 s:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
  i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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                                                                                                                                                               
AQICMEwwIwYIKwYBBQUHAgEWF2h0dHBzOi8vZC5zeW1jYi5jb20vY3BzMCUGCCsG                                                                                                                                                               
AQUFBwICMBkaF2h0dHBzOi8vZC5zeW1jYi5jb20vcnBhMB8GA1UdIwQYMBaAFF9g                                                                                                                                                               
z2GQVd+EQxSKYCqy9Xr0QxjvMCsGA1UdHwQkMCIwIKAeoByGGmh0dHA6Ly9zcy5z                                                                                                                                                               
eW1jYi5jb20vc3MuY3JsMFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0                                                                                                                                                               
cDovL3NzLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL3NzLnN5bWNiLmNv                                                                                                                                                               
bS9zcy5jcnQwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AN3rHSt6DU+mIIuB                                                                                                                                                               
rYFocH4ujp0B1VyIjT0RxM227L7MAAABUvXU0HQAAAQDAEcwRQIhALnrb8gmpKob                                                                                                                                                               
6WD6R2NfNUDdxmEry6PbLdAgrYxoxd7YAiAq5oaIjTWuS7VvGOl7aSfxLxXKoX/H                                                                                                                                                               
afFyFY759kv4RQB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAAB                                                                                                                                                               
UvXU0LUAAAQDAEgwRgIhAIcx1pylH31cUgbUvXDu/Ue5DJwx2P187DQmxnPQIUmz                                                                                                                                                               
AiEA7oNhaU1u9jf27FbMQAAnpMuNV1MNy1XCLNUyr9vmTQEAdgBo9pj4H2SCvjqM                                                                                                                                                               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=
-----END CERTIFICATE-----
subject=/C=NL/ST=Noord-Brabant/L=Veldhoven/O=HERE Global BV/CN=supl.nokia.com
issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
---
No client certificate CA names sent
---
SSL handshake has read 5304 bytes and written 415 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 7B20D6346EE3595B55010B4DEAC1AF886A55CD48F0E7B380767E0D15B23F9DB0
    Session-ID-ctx:
    Master-Key: 3D9D14E0642329844E5FBDB5B0F95E915FB844C00A99BA1E70BA66CD33D24C58B38D52035DA67960429BDA0399941711
    Key-Arg  : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1486306958
    Timeout  : 300 (sec)
    Verify return code: 0 (ok)
---
DONE

So... it is really problem with certificates?

freemangordon 2017-02-05 17:01

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by pali (Post 1522878)
Anyway, on Ubuntu 12.04 verification to supl.nokia.com:7275 pass:
Code:

...
So... it is really problem with certificates?

Yes, it is problem with certificates, Ubuntu and Debian seem to provide outdated certs.

jonwil 2017-02-05 17:15

Re: Nokia N900 A-GPS Not Working Anymore
 
I found a different fix that doesn't need any patches to location-proxy.
The latest maemo-security-certman tree contains that fix which is now working just fine on the N900 sitting in front of me.
Nice fast GPS lock.

The fix involves putting the old insecure VeriSign certificate into a separate certificate store that location-proxy will load but that microb and other things wont.

This is with supl.nokia.com btw.

pali 2017-02-05 17:50

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by freemangordon (Post 1522885)
Yes, it is problem with certificates, Ubuntu and Debian seem to provide outdated certs.

Ah... thats not good.


Quote:

Originally Posted by jonwil (Post 1522887)
I found a different fix that doesn't need any patches to location-proxy.
The latest maemo-security-certman tree contains that fix which is now working just fine on the N900 sitting in front of me.
Nice fast GPS lock.

The fix involves putting the old insecure VeriSign certificate into a separate certificate store that location-proxy will load but that microb and other things wont.

This is with supl.nokia.com btw.

How do you force location-proxy load certs from that new store?

jonwil 2017-02-05 23:04

Re: Nokia N900 A-GPS Not Working Anymore
 
location-proxy already has code in there that loads from the new store (added by Nokia for reasons unknown).

sicelo 2017-03-08 10:36

Re: Nokia N900 A-GPS Not Working Anymore
 
we might have reached the end. supl.nokia.com resolves to 127.0.0.1 at this time :-(

jonwil 2017-03-08 12:47

Re: Nokia N900 A-GPS Not Working Anymore
 
Google brought up this link showing the IP details for supl.nokia.com:
http://supl.nokia.com.ipaddress.com/

If I add 35.157.6.107 supl.nokia.com to /etc/hosts on my N900, it seems to work (nokia maps works and finds accurate location, location-test gets fast connection to satellite etc)
So until/unless the SUPL server running on the Amazon AWS instance answering at that IP address goes away, this should be a good short term fix.

That IP address is probably the best one to use since its the actual last known IP address of supl.nokia.com.

Going forward, maemo should run its own SUPL server as recently suggested by DocScrutinizer05 and freemangordon...

EDIT:
I found this other link
http://www.ip-tracker.org/locator/ip...Supl.nokia.com
which lists an IP address of 52.22.201.16 (also an AWS instance)
along with https://www.robtex.com/dns-lookup/supl.nokia.com that lists a bunch of IP addresses.

The first one I found seems to work though so I will stick with it until something else happens (supl.nokia.com DNS returns a valid IP again, alternative SUPL server is set up or whatever)

EDIT 2:
Its possible the different IP addresses all point to different instances running the same SUPL code (i.e. distributing the load over multiple Amazon AWS instances) or something (I dont know how Amazon AWS works)

Ulle 2017-03-08 15:24

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by jonwil (Post 1525036)
...
along with https://www.robtex.com/dns-lookup/supl.nokia.com that lists a bunch of IP addresses.

Via http://geoip.ubuntu.com/lookup/?ip=52.22.201.16 and the others listed in that bunch I got the following result:

35.157.6.107 : <TimeZone>Europe/Berlin
52.213.194.13 : <TimeZone>Europe/Dublin
52.220.245.140 : <TimeZone>Asia/Singapore
52.22.201.16 : <TimeZone>America/New_York
52.3.37.45 : <TimeZone>America/New_York
52.74.234.216 : <TimeZone>Asia/Singapore
54.171.105.63 : <TimeZone>Europe/Dublin

So everyone could set the one next to its main location in /etc/hosts with a new line like for example
Code:

52.22.201.16 supl.nokia.com
EDIT:
I can't ping none of the above except the one from Berlin 35.157.6.107 .
52.213.194.13 , 52.220.245.140 , 52.74.234.216 don't seem to answer supl requests. So the remaining list should be

35.157.6.107 : <TimeZone>Europe/Berlin
52.22.201.16 : <TimeZone>America/New_York
52.3.37.45 : <TimeZone>America/New_York
54.171.105.63 : <TimeZone>Europe/Dublin

No Asia anymore ...

EDIT 2:
And unfortunately the certificate for supl.nokia.com ist only valid until May 15 23:59:59 2017 GMT . Hope it will be renewed again ...

Cheers, Ulle

random_user 2017-04-25 19:33

Re: Nokia N900 A-GPS Not Working Anymore
 
Hi,

I added into my /etc/hosts
Code:

52.3.37.45 supl.nokia.com
However, it doesn't work for me. If I try supl.google.com, GPS doesn't work too. Why?
I am just a common ubuntu user from Czech Rep., not Maemo expert.

Quick check:
Code:

~$ openssl s_client -connect 52.3.37.45:7275
CONNECTED(00000003)
depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary Certification Authority
verify return:1
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
verify return:1
depth=1 C = US, O = Symantec Corporation, OU = Symantec Trust Network, CN = Symantec Class 3 Secure Server CA - G4
verify return:1
depth=0 C = NL, ST = Noord-Brabant, L = Veldhoven, O = HERE Global BV, CN = supl.nokia.com
verify return:1
---
Certificate chain
 0 s:/C=NL/ST=Noord-Brabant/L=Veldhoven/O=HERE Global BV/CN=supl.nokia.com
  i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
 1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
  i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
  i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
 3 s:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
  i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIQNUQLMS6rnzbNIfXt19aBADANBgkqhkiG9w0BAQsFADB+
MQswCQYDVQQGEwJVUzEdMBsGA1UEChMUU3ltYW50ZWMgQ29ycG9yYXRpb24xHzAd
BgNVBAsTFlN5bWFudGVjIFRydXN0IE5ldHdvcmsxLzAtBgNVBAMTJlN5bWFudGVj
IENsYXNzIDMgU2VjdXJlIFNlcnZlciBDQSAtIEc0MB4XDTE2MDIxODAwMDAwMFoX
.
.
.



How this issue can be easily fixed?

sicelo 2017-05-02 09:53

Re: Nokia N900 A-GPS Not Working Anymore
 
use
Code:

52.22.201.16

pichlo 2017-05-02 14:18

Re: Nokia N900 A-GPS Not Working Anymore
 
It's AWS, wouldn't the IP be dynamic?

sicelo 2017-05-02 14:26

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by pichlo (Post 1527585)
It's AWS, wouldn't the IP be dynamic?

Nop. I've been using it consistently. wondering what will happen when the cert expires in two weeks from now :rolleyes:

nieldk 2017-05-02 14:47

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by sicelo (Post 1527586)
Nop. I've been using it consistently. wondering what will happen when the cert expires in two weeks from now :rolleyes:

1. Yes, IP is dynamic, it might change.
2. When cert expires it will stop working.

sicelo 2017-05-18 14:47

Re: Nokia N900 A-GPS Not Working Anymore
 
whoa!
we've got a friend in 'higher places' evidently...

just tested fix on my N900 and it was instant. Someone renewed the cert, and now it expires May 16, 2018

tcbl50 2017-06-27 13:52

Re: Nokia N900 A-GPS Not Working Anymore
 
does this still work? tried the ip address but cant get a location lock.

sicelo 2017-06-27 14:11

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by tcbl50 (Post 1529734)
does this still work? tried the ip address but cant get a location lock.

yes, works fine for me.
do you: (1) have the updated certman packages? (2) have set supl.nokia.com in location settings?

tcbl50 2017-06-27 14:49

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by sicelo (Post 1529736)
yes, works fine for me.
do you: (1) have the updated certman packages? (2) have set supl.nokia.com in location settings?

where can i find those packages? maybe i am using the wrong maps application. which one do you use please?

sicelo 2017-06-27 15:12

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by tcbl50 (Post 1529740)
where can i find those packages? maybe i am using the wrong maps application. which one do you use please?

Ovi Maps ...
the packages are in cssu-devel

sicelo 2017-06-29 07:50

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by tcbl50 (Post 1529740)
... wrong maps application. which one do you use ...

By the way, A-GPS (even just plain GNSS/non-assisted) is not related to the maps application in use.

(of course Ovi Maps did have a bug in which it timed out too soon waiting for a fix, but that was evidently fixed as well)

tcbl50 2017-06-29 22:39

Re: Nokia N900 A-GPS Not Working Anymore
 
im still not getting a fix. updated the packages. set supl.nokia.com in settings. changed etc/hosts...nothing

even tried location-test- gui n no fix. however ive noticed that when i ping supl.nokia.com i dont get anything so must be something wrong with my phone

sicelo 2017-06-30 06:50

Re: Nokia N900 A-GPS Not Working Anymore
 
if you have syslog, check for any logging related to location.
sounds strange

tcbl50 2017-06-30 21:51

Re: Nokia N900 A-GPS Not Working Anymore
 
Jun 30 21:47:29 Nokia-N900 nokia-maps[7924]: GLIB DEBUG default - com.nokia.Navigation.MapProvider init complete
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: GLIB DEBUG default - wb-new:0x24f000:maps-ui
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: GLIB DEBUG default - wb-new:0x24f0a8:maps-eal
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: New e:0x2a1038, g:0x37360, ctx:(nil)
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: GLIB CRITICAL ** Gtk - gtk_widget_set_sensitive: assertion `GTK_IS_WIDGET (widget)' failed
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - :1.339 now having 1 connections
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - Starting a new LAS session with method = 0xa, interval = 0xa, reason = 0
Jun 30 21:47:48 Nokia-N900 nokia-maps[7924]: GLIB DEBUG liblocation - Loading initial values from com.nokia.Location::las
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - Tracking ongoing, status: 1, npe_id: 5
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - :1.342 now having 1 connections
Jun 30 21:47:48 Nokia-N900 nokia-maps[7924]: GLIB DEBUG liblocation - Object path: /com/nokia/location/las
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - :1.342 now having 0 connections
Jun 30 21:47:49 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - GPS STATE: search
Jun 30 21:48:19 Nokia-N900 nokia-maps[7924]: FullSusp:1, web active:1->0

thats my syslog

misiak 2017-07-01 12:56

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by tcbl50 (Post 1529948)
Jun 30 21:47:29 Nokia-N900 nokia-maps[7924]: GLIB DEBUG default - com.nokia.Navigation.MapProvider init complete
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: GLIB DEBUG default - wb-new:0x24f000:maps-ui
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: GLIB DEBUG default - wb-new:0x24f0a8:maps-eal
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: New e:0x2a1038, g:0x37360, ctx:(nil)
Jun 30 21:47:31 Nokia-N900 nokia-maps[7924]: GLIB CRITICAL ** Gtk - gtk_widget_set_sensitive: assertion `GTK_IS_WIDGET (widget)' failed
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - :1.339 now having 1 connections
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - Starting a new LAS session with method = 0xa, interval = 0xa, reason = 0
Jun 30 21:47:48 Nokia-N900 nokia-maps[7924]: GLIB DEBUG liblocation - Loading initial values from com.nokia.Location::las
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - Tracking ongoing, status: 1, npe_id: 5
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - :1.342 now having 1 connections
Jun 30 21:47:48 Nokia-N900 nokia-maps[7924]: GLIB DEBUG liblocation - Object path: /com/nokia/location/las
Jun 30 21:47:48 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - :1.342 now having 0 connections
Jun 30 21:47:49 Nokia-N900 location-daemon[7940]: GLIB DEBUG default - GPS STATE: search
Jun 30 21:48:19 Nokia-N900 nokia-maps[7924]: FullSusp:1, web active:1->0

thats my syslog

By the way, what IP address do you get when resolving "supl.nokia.com" on your N900 (if you don't know how to check, feel free to ask)? Are you sure you don't have any obsolete entries in /etc/hosts that try to pinpoint it to some hardcoded IP that might be wrong?

tcbl50 2017-07-02 07:19

Re: Nokia N900 A-GPS Not Working Anymore
 
i actually put 52.22.201.16 in /etc/hosts for supl.nokia.com

without doing that i get supl.nokia.com resolving to localhost (127.0.0.1)

sicelo 2017-07-02 08:08

Re: Nokia N900 A-GPS Not Working Anymore
 
there is no indication that you have an A-GPS attempt in that log. did you actually enable it? or provide a more detailed log ...

since you have location-test-gui, maybe use that when testing instead of Ovi Maps to avoid too much 'noise' in the logs. Choose the AGNSS method

tcbl50 2017-07-03 09:10

Re: Nokia N900 A-GPS Not Working Anymore
 
wow!! i got a fix. Im so happy. i used the location-test-gui and left the phone alone. it took ages tho! 33 minutes!

here is the log:

2017-07-03T07:13:28.882299Z: on_start
2017-07-03T07:13:29.065648Z: on_connected
2017-07-03T07:13:29.369207Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:13:29.372136Z: Satellites in view: 0, in use: 0
2017-07-03T07:13:30.584447Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:13:30.588506Z: Satellites in view: 0, in use: 0
2017-07-03T07:13:40.573155Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:13:40.576970Z: Satellites in view: 1, in use: 0
2017-07-03T07:15:35.573979Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:35.577916Z: Satellites in view: 0, in use: 0
2017-07-03T07:15:36.578191Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:36.583257Z: Satellites in view: 1, in use: 0
2017-07-03T07:15:45.575231Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:45.580144Z: Satellites in view: 2, in use: 0
2017-07-03T07:15:47.577062Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:47.581883Z: Satellites in view: 3, in use: 0
2017-07-03T07:16:36.578130Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:36.582555Z: Satellites in view: 2, in use: 0
2017-07-03T07:16:38.578984Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:38.584111Z: Satellites in view: 3, in use: 0
2017-07-03T07:16:45.577184Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:45.581914Z: Satellites in view: 2, in use: 0
2017-07-03T07:16:47.576879Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:47.581700Z: Satellites in view: 1, in use: 0
2017-07-03T07:16:57.577245Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:57.581945Z: Satellites in view: 2, in use: 0
2017-07-03T07:17:26.577886Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:17:26.581945Z: Satellites in view: 3, in use: 0
2017-07-03T07:17:38.579259Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:17:38.583684Z: Satellites in view: 2, in use: 0
2017-07-03T07:15:35.573979Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:35.577916Z: Satellites in view: 0, in use: 0
2017-07-03T07:15:36.578191Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:36.583257Z: Satellites in view: 1, in use: 0
2017-07-03T07:15:45.575231Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:45.580144Z: Satellites in view: 2, in use: 0
2017-07-03T07:15:47.577062Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:15:47.581883Z: Satellites in view: 3, in use: 0
2017-07-03T07:16:36.578130Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:36.582555Z: Satellites in view: 2, in use: 0
2017-07-03T07:16:38.578984Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:38.584111Z: Satellites in view: 3, in use: 0
2017-07-03T07:16:45.577184Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:45.581914Z: Satellites in view: 2, in use: 0
2017-07-03T07:16:47.576879Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:47.581700Z: Satellites in view: 1, in use: 0
2017-07-03T07:16:57.577245Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:16:57.581945Z: Satellites in view: 2, in use: 0
2017-07-03T07:17:26.577886Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:17:26.581945Z: Satellites in view: 3, in use: 0
2017-07-03T07:17:38.579259Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:17:38.583684Z: Satellites in view: 2, in use: 0
2017-07-03T07:17:48.577336Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:17:48.582341Z: Satellites in view: 3, in use: 0
2017-07-03T07:17:56.578649Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:17:56.583715Z: Satellites in view: 4, in use: 0
2017-07-03T07:21:24.560948Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:21:24.565007Z: Satellites in view: 6, in use: 0
2017-07-03T07:22:14.564000Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:22:14.568425Z: Satellites in view: 7, in use: 0
2017-07-03T07:28:14.564550Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:28:14.568334Z: Satellites in view: 8, in use: 0
2017-07-03T07:30:39.564702Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:30:39.569005Z: Satellites in view: 9, in use: 0
2017-07-03T07:37:14.538339Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:37:14.542365Z: Satellites in view: 10, in use: 0
2017-07-03T07:42:11.445231Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:42:11.628275Z: Satellites in view: 9, in use: 0
2017-07-03T07:42:12.444529Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:42:12.449565Z: Satellites in view: 10, in use: 0
2017-07-03T07:43:16.443217Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:43:16.448039Z: Satellites in view: 9, in use: 0
2017-07-03T07:43:17.447062Z: ept = nan, eph = nan, epv = nan, epd = nan, eps = nan, epc = nan
2017-07-03T07:43:17.452586Z: Satellites in view: 10, in use: 0
2017-07-03T07:46:17.847819Z: lat = 5.660851, long = -0.153998;
2017-07-03T07:46:17.848857Z: alt = 111.500000;
2017-07-03T07:46:17.849772Z: time = 1499067977.000000;
2017-07-03T07:46:17.850962Z: ept = 0.000000e+00, eph = 5.657000e+03, epv = 1.135000e+02, epd = nan, eps = nan, epc = nan
2017-07-03T07:46:17.852519Z: Satellites in view: 10, in use: 4
2017-07-03T07:46:18.455821Z: lat = 5.660840, long = -0.154009;
2017-07-03T07:46:18.458018Z: alt = 112.500000;
2017-07-03T07:46:18.459818Z: time = 1499067978.000000;
2017-07-03T07:46:18.461436Z: speed = 0.288000;
2017-07-03T07:46:18.463053Z: track = 336.630000;
2017-07-03T07:46:18.464640Z: climb = 0.000000;
2017-07-03T07:46:18.467204Z: ept = 0.000000e+00, eph = 5.442000e+03, epv = 2.110000e+02, epd = 3.599900e+02, eps = 9.108000e+00, epc = 3.000000e-02
2017-07-03T07:46:18.471079Z: Satellites in view: 10, in use: 4
2017-07-03T07:46:19.463297Z: lat = 5.660820, long = -0.154009;
2017-07-03T07:46:19.466349Z: alt = 114.500000;
2017-07-03T07:46:19.468180Z: time = 1499067979.000000;
2017-07-03T07:46:19.469798Z: speed = 0.864000;
2017-07-03T07:46:19.471629Z: track = 188.460000;
2017-07-03T07:46:19.475047Z: climb = 0.000000;
2017-07-03T07:46:19.478312Z: ept = 0.000000e+00, eph = 5.715000e+03, epv = 1.960000e+02, epd = 3.599900e+02, eps = 3.924000e+00, epc = 3.000000e-02
2017-07-03T07:46:19.481730Z: Satellites in view: 10, in use: 4
2017-07-03T07:46:20.499705Z: lat = 5.660787, long = -0.154028;
2017-07-03T07:46:20.502604Z: alt = 116.000000;
2017-07-03T07:46:20.504618Z: time = 1499067980.000000;
2017-07-03T07:46:20.506358Z: speed = 13.428000;
2017-07-03T07:46:20.508036Z: track = 206.080000;
2017-07-03T07:46:20.509593Z: climb = 0.000000;
2017-07-03T07:46:20.513926Z: ept = 0.000000e+00, eph = 1.137500e+04, epv = 2.575000e+02, epd = 1.772000e+01, eps = 4.788000e+00, epc = 3.000000e-02
2017-07-03T07:46:20.517924Z: Satellites in view: 10, in use: 4
2017-07-03T07:46:21.475321Z: lat = 5.660862, long = -0.154045;
2017-07-03T07:46:21.478190Z: alt = 117.000000;
2017-07-03T07:46:21.480021Z: time = 1499067981.000000;
2017-07-03T07:46:21.481883Z: speed = 25.884000;
2017-07-03T07:46:21.483561Z: track = 344.120000;
2017-07-03T07:46:21.485118Z: climb = 0.000000;
2017-07-03T07:46:21.489390Z: ept = 0.000000e+00, eph = 1.043300e+04, epv = 2.120000e+02, epd = 4.000000e+00, eps = 7.776000e+00, epc = 3.000000e-02
2017-07-03T07:46:21.493479Z: Satellites in view: 10, in use: 4
2017-07-03T07:46:22.477671Z: lat = 5.660878, long = -0.154046;
2017-07-03T07:46:22.480723Z: alt = 116.500000;
2017-07-03T07:46:22.482615Z: time = 1499067982.000000;
2017-07-03T07:46:22.484233Z: speed = 4.392000;
2017-07-03T07:46:22.485880Z: track = 342.790000;
2017-07-03T07:46:22.487467Z: climb = 0.000000;
2017-07-03T07:46:22.491801Z: ept = 0.000000e+00, eph = 8.385000e+03, epv = 1.765000e+02, epd = 1.442100e+02, eps = 7.884000e+00, epc = 3.000000e-02
2017-07-03T07:46:22.495799Z: Satellites in view: 10, in use: 4
2017-07-03T07:46:23.462168Z: lat = 5.660901, long = -0.154046;
2017-07-03T07:46:23.465251Z: alt = 115.000000;
2017-07-03T07:46:23.467143Z: time = 1499067983.000000;
2017-07-03T07:46:23.468821Z: speed = 5.940000;
2017-07-03T07:46:23.470439Z: track = 346.180000;

sicelo 2017-07-03 09:41

Re: Nokia N900 A-GPS Not Working Anymore
 
not A-GPS at all :)

tcbl50 2017-07-03 09:42

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by sicelo (Post 1530047)
not A-GPS at all :)

meaning the AGPS is not working?

Edit: oh i see. No AGPS connection in logs

panjgoori 2017-07-13 14:12

Re: Nokia N900 A-GPS Not Working Anymore
 
1 Attachment(s)
I checked my N900's gps and it took around 5-6 minutes to get a fix. i dont know whether AGPS is working or not but its set to Nokia.

sicelo 2017-07-13 15:03

Re: Nokia N900 A-GPS Not Working Anymore
 
more than 1 minute if you have good/working networking = no A-GPS

pali 2017-07-15 08:59

Re: Nokia N900 A-GPS Not Working Anymore
 
You need to update certificates from last cssu-devel|testing as supl server has problems...

sicelo 2017-08-20 16:15

Re: Nokia N900 A-GPS Not Working Anymore
 
@jonwil - for some reason my A-GPS is not working again.
Installed package versions:
Code:

~ $ dpkg -l *maemosec*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name                        Version                    Description
+++-===========================-===========================-======================================================================
ii  libmaemosec-certman-applet0 0.1.5                      Certificate manager external UI library.
ii  libmaemosec-certman0        0.2.9                      Maemo certificate manager shared library
ii  libmaemosec0                0.2.9                      Maemo security base library
ii  maemosec-certman-applet    0.1.5                      Control Panel Certificate Manager plugin
ii  maemosec-certman-common-ca  0.2.9                      Common CA certificates
ii  maemosec-certman-tools      0.2.9                      Maemo certificate manager runtime tools

cmcli output:
Code:

~ $ cmcli -T common-ca -v supl.nokia.com:7275
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 trust chain(1):
  b677fa6948479f5312d5c2ea07327607d1970719 VeriSign Universal Root Certification Authority
Verified OK
~ $ cmcli -T location-proxy -v supl.nokia.com:7275
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 Verification failed: self signed certificate

I don't know what has happened here. Is it possible that somehow 'Nokia' has removed the old root cert which we worked around by using a different cert-store? My guess is that location-proxy checks in its cert store BEFORE it checks the common-ca store, since I assume it should succeed if it looked in common-ca as well, if the above cmcli output is anything to go by.

I'll downgrade the maemosec packages when I find time to see what happens.

sicelo 2017-08-25 14:04

Re: Nokia N900 A-GPS Not Working Anymore
 
1 Attachment(s)
uploading /etc/secure & /etc/certs for testing

jonwil 2017-08-25 15:00

Re: Nokia N900 A-GPS Not Working Anymore
 
If anyone else is having problems with AGPS, try 52.22.201.16 for the IP address in /etc/hosts and see if that works. If that doesn't fix it (or if 52.22.201.16 is already what you have in /etc/hosts), check what version of maemosec-certman-common-ca you are running (via dpkg -l). If you are running anything older than 0.2.9 you should upgrade to 0.2.9.

Easiest way to upgrade (with minimal risk) is to go to http://maemo.merlin1991.at/cssu/comm...curity-certman then download and install (via dpkg -i) libmaemosec-certman0_0.2.9_armel.deb, libmaemosec0_0.2.9_armel.deb, maemosec-certman-common-ca_0.2.9_all.deb and maemosec-certman-tools_0.2.9_armel.deb.

If you are already running 0.2.9 and have checked that your IP address is correct and its still not working, try downloading maemosec-certman-common-ca_0.2.9_all.deb from the above repository URL and reinstalling it with dpkg -i

In sicelo's case downloading and reinstalling maemosec-certman-common-ca_0.2.9_all.deb was what fixed it (he was already running 0.2.9)

sicelo 2017-09-04 08:22

Re: Nokia N900 A-GPS Not Working Anymore
 
I have found more information regarding the issue - it turns out that my certificates were NOT corrupted in any way. (for those not following IRC, a day or two after the fix mentioned above, the problem re-occurred).

TL;DR - if you have had a time update since the device was up, and A-GPS doesn't lock, while you have all the prerequisites mentioned by jonwil in previous post, stop and restart location-proxy
Code:

~# stop location-proxy
~# start location-proxy

I do not set time when my N900 boots up from battery out condition (I used the tweak that bypasses the prompt to set time). My time is then set via ntpdate as soon as I have a working network connection.

I know from syslog that location-proxy starts automatically when the device boots, and it would therefore seem that somehow location-proxy 'primes' itself ahead of time and having already decided (at bootup) that the time is incorrect, does not realize that the time is correct.

My conclusion might be wrong however, as it doesn't make sense to me how location-proxy manages to fail when running cmcli or openssl, when both of them report good certs when run manually. Either way, the behavior is reproducible.

In the meantime, stopping and restarting location-proxy works reliably for me thus far. And of course, the battery-out condition does not happen too often :)

peterleinchen 2017-09-04 20:04

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by sicelo (Post 1533892)
...
TL;DR - if you have had a time update since the device was up, and A-GPS doesn't lock, while you have all the prerequisites mentioned by jonwil in previous post, stop and restart location-proxy
Code:

~# stop location-proxy
~# start location-proxy

...
My conclusion might be wrong however, as it doesn't make sense to me how location-proxy manages to fail when running cmcli or openssl, when both of them report good certs when run manually. Either way, the behavior is reproducible.

:)

To you/me/us... :D

Well spotted, thanks!

sicelo 2018-04-16 17:35

Re: Nokia N900 A-GPS Not Working Anymore
 
a-gps seems non-functional again. working for you @jonwil, or anyone else?
i haven't the time to troubleshoot yet. will do proper tests soon as i get a chance.

sicelo 2018-04-18 06:55

Re: Nokia N900 A-GPS Not Working Anymore
 
Ok, for one thing, the IP address has changed,
https://www.whatsmydns.net/#A/supl.nokia.com

justmemory 2018-04-18 08:28

Re: Nokia N900 A-GPS Not Working Anymore
 
Quote:

Originally Posted by sicelo (Post 1543411)
Ok, for one thing, the IP address has changed,
https://www.whatsmydns.net/#A/supl.nokia.com

Hmm... recently I was using supl.google.com - don't ask why; I read somewhere this solution when I had trouble with positioning last time. Anyway I checked and it did not work either (I was in a house though)...


All times are GMT. The time now is 04:25.

vBulletin® Version 3.8.8