View Single Post
Guest | Posts: n/a | Thanked: 0 times | Joined on
#152
Originally Posted by Ulle View Post
If someone wants to test supl.sonyericsson.com with N900 there is still the first show stopper to solve: Certificate verification fails due to missing issuer cert.

I found this http://pastebin.com/2dNbJ79L , which was mentioned in an android gps discussion somewhere, and copied line 8. to 28. (the content of cacert.txt) into a file on my N900 .

Then after
Code:
cmcli -c common-ca -a /path/to/that/file
I get with
Code:
cmcli -T common-ca -v supl.sonyericsson.com:7275
a nice "Verified OK".

Edit: I couldn't find the root/issuer cert for sls1.sirf.com and sls2.sirf.com . I sent an email to slssupport@sirf.com (does not exist anymore) and webmaster@csr.com, asking for that. No answer so far ...
Probably because they use self signed certificates


Code:
~ root# openssl s_client -connect sls2.sirf.com:7275
CONNECTED(00000003)
depth=0 /C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com
verify error:num=20:unable to get local issuer certificate
verify return:1
depth=0 /C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com
verify error:num=27:certificate not trusted
verify return:1
depth=0 /C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com
verify error:num=21:unable to verify the first certificate
verify return:1
---
Certificate chain
 0 s:/C=US/ST=California/L=San Jose/O=SiRF Technology Inc/OU=ISBU/CN=sls2.sirf.com
   i:/C=US/ST=California/L=San Jose/O=SiRF Technology Inc./OU=ISBU/emailAddress=slssupport@sirf.com
---
 

The Following 2 Users Say Thank You to For This Useful Post: