IRC log of #maemo for Friday, 2017-08-25

*** Pali has quit IRC00:49
*** xy2_ has quit IRC00:54
*** xy2_ has joined #maemo01:53
*** Kabouik- has joined #maemo02:51
*** Kabouik_ has quit IRC02:53
*** Kabouik_ has joined #maemo04:26
*** Kabouik- has quit IRC04:28
*** florian_ has joined #maemo04:55
*** florian has quit IRC04:58
brolin_empeysicelo: OK.05:08
*** err0r3o3 has quit IRC05:47
*** sr71 has joined #maemo05:57
*** sr71 has quit IRC05:57
*** Kabouik_ has quit IRC06:52
*** infobot has quit IRC07:15
*** spiiroin has quit IRC07:34
*** drcode has joined #maemo07:53
*** spiiroin has joined #maemo08:29
*** dafox has joined #maemo08:58
*** florian_ has quit IRC09:12
*** dafox has quit IRC09:29
*** dmth|intevation has joined #maemo09:30
*** Pali has joined #maemo09:39
*** Pali has quit IRC09:52
*** jon_y has quit IRC09:55
*** jon_y_ has joined #maemo09:55
*** err0r3o3 has joined #maemo09:57
*** geaaru has joined #maemo09:57
*** jon_y_ has quit IRC10:14
*** jon_y has joined #maemo10:16
*** xy2_ has joined #maemo10:19
*** florian has joined #maemo10:26
*** xorly has joined #maemo10:53
*** xy2_ has quit IRC11:15
*** geaaru has quit IRC11:28
*** xy2_ has joined #maemo11:38
*** geaaru has joined #maemo11:40
*** geaaru has quit IRC11:57
*** xy2_ has quit IRC12:02
*** geaaru has joined #maemo12:13
*** eMHa has quit IRC12:16
*** xy2_ has joined #maemo12:23
*** xorly has quit IRC12:25
*** eMHa has joined #maemo12:56
*** freemangordon_ has quit IRC12:59
*** spiiroin has quit IRC13:14
*** NotKit has joined #maemo13:17
*** TheKit has quit IRC13:20
*** xorly has joined #maemo13:25
*** spiiroin has joined #maemo13:30
*** spiiroin has quit IRC13:59
*** capitanocrunch has joined #maemo14:01
*** capitanocrunch has quit IRC14:06
*** Kabouik_ has joined #maemo14:24
*** jonwil has joined #maemo14:30
jonwilhi14:30
*** spiiroin has joined #maemo14:43
*** RedM has quit IRC15:32
*** rysiek|pl has quit IRC15:32
*** dreamer has quit IRC15:32
*** wnd has quit IRC15:32
*** stryngs has quit IRC15:32
*** APic has quit IRC15:32
*** esaym153 has quit IRC15:32
*** ced117 has quit IRC15:32
*** ShadowJK has quit IRC15:32
*** ShadowJK_ has joined #maemo15:32
*** stryngs has joined #maemo15:32
*** APic has joined #maemo15:33
*** wnd has joined #maemo15:33
*** ced117 has joined #maemo15:33
*** rysiek|pl has joined #maemo15:33
*** RedW has joined #maemo15:33
*** esaym153 has joined #maemo15:33
*** stryngs is now known as Guest1776815:33
sicelohi jonwil15:33
*** xorly has quit IRC15:37
*** Wair1978 has joined #maemo15:49
*** Wair1978 has left #maemo15:50
*** KotCzarny has quit IRC16:15
jonwilsicelo, saw your post about AGPS16:18
jonwilAGPS works 100% for me with version 0.2.9 of maemosec-certman*16:19
jonwilI see nothing wrong with the output from the cmcli commands and nothing to suggest that something is broken with the certificates.16:21
jonwilsupl.nokia.com currently returns a 3-certificate chain, the root of which is VeriSign Universal Root Certification Authority16:22
jonwilThe VeriSign Universal Root Certification Authority certificate exists in the common-ca certificate store but NOT in the location-proxy certificate store16:22
jonwilwhich is why your cmcli -T location-proxy -v supl.nokia.com:7275 command thinks its a self-signed certificate and your cmcli -T common-ca -v supl.nokia.com:7275 command doesn't16:23
siceloweird then. wonder what's up on my device. absolutely no A-GPS16:23
jonwilIf you run it with both -T location-proxy and -T common-ca (in either order) it should correctly find the VeriSign Universal Root Certification Authority certificate16:23
jonwilWhat IP do you have in /etc/hosts for supl.nokia.com?16:23
jonwilI am using 52.22.201.1616:24
sicelome too16:24
jonwilvery weird that its not working16:24
jonwilCan you properly ping/tracert supl.nokia.com from your N900?16:25
jonwilwait never mind on that, the machine doesn't answer pings16:25
jonwilso its not going to work16:25
sicelosyslog:16:25
siceloAug 25 15:25:16 Nokia-N900 location-proxy[1332]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=1916:25
siceloAug 25 15:25:16 Nokia-N900 location-proxy[1332]: GLIB WARNING ** default - host: supl.nokia.com not verified, result: 1916:25
siceloand then,16:25
siceloAug 25 15:25:17 Nokia-N900 location-proxy[1332]: GLIB WARNING ** default - Connection to h-slp.mnc000.mcc653.pub.3gppnetwork.org:7275 failed16:26
siceloAug 25 15:25:17 Nokia-N900 location-proxy[1332]: GLIB WARNING ** default - error:2006A066:BIO routines:BIO_get_host_ip:bad hostname lookup16:26
*** KotCzarny has joined #maemo16:26
jonwilWhat output do you get if you type nslookup supl.nokia.com on your n900?16:28
siceloName:      supl.nokia.com16:29
siceloAddress 1: 52.22.201.16 supl.nokia.com16:29
jonwilThat's as it should be16:29
sicelothere's something causing me to get that "not verified" result, and it would seem to me cert-related. i should investigate further16:30
sicelodo you get the outcome in your logs?16:31
sicelo*that16:31
jonwilno, I get the correct output with verify_res=016:31
siceloexactly as i expected16:31
jonwilIts very weird that its printing "connection to h-slp.mnc000.mcc653.pub.3gppnetwork.org:7275 failed"16:32
sicelothat's expected .. seems when if fails to communicated with specified supl server, it then tries to resolve it via cellular operator16:32
siceloyou cn get that if you, for example, put in a wrong IP16:33
sicelomaybe i should try a different supl server. do you have the other IPs handy?16:34
jonwilWhat output do you get if you type openssl s_client -showcerts -connect supl.nokia.com:7275 ?16:35
jonwilrun on your N900 that is16:36
jonwilThat will display the entire certificate chain that the server is sending you16:36
sicelohttp://paste.debian.net/982994/16:38
bencohopenssl s_client and liblocation don't use the same store iirc16:40
bencohliblocation uses certman16:40
jonwilIf you run the same command but add -CAPath /etc/certs/common-ca what do you get for the "verifiy" lins?16:40
bencoh(yes, this whole ssl/tls stuff is a mess ... and gnutls has yet another one)16:40
*** ShadowJK_ is now known as ShadowJK16:40
jonwilopenssl s_client will use the same store as certman if you pass the right -CAPath (the one above)16:41
jonwilAs the current maintainer of certman, I do know how all this works :)16:41
jonwilReading the pastebin, it looks like sicelo gets identical certificates from supl.nokia.com as me.16:42
jonwilso that's not the problem.16:42
sicelomakes sense to get same, but my liblocation prefers the non-working one :-/16:43
sicelohttp://paste.debian.net/plain/98299516:43
jonwilWhat version does dpkg -l give for location-proxy?16:44
jonwilShould be 0.100-1+0m516:44
siceloyes i have that one16:45
jonwilwhat flavor of CSSU are you using?16:46
sicelothumb16:46
jonwiland is it up-to-date with the latest version?16:46
siceloyes,16:47
sicelo1Tmaemo11+thumb016:47
jonwilok, so community-thumb repo only has version 0.2.2 of maemosec-certman-common-ca, where did you get the 0.2.9 version you are running now?16:49
jonwilOr maybe I am looking at an obsolete commubity-thumb repo somehow...16:50
*** dmth|intevation has quit IRC16:50
sicelodevel .. i reported the problem that got solved by 0.2.916:52
jonwilok.16:52
jonwilAny chance you can send me a copy of your /etc/certs and /etc/secure folders so I can compare them with what they should be?16:55
sicelosure16:55
jonwilGreat.16:56
sicelodon't have somewhere to upload to (from N900) .. doesn't contain any confidential info afaict. could i post on the tmo post?16:58
jonwilyeahmaemosec-certman-common-ca16:58
jonwilyeah do that16:59
jonwilNo there is nothing sensitive in there16:59
jonwiloh yeah one more thing, what version do you get if you do dpkg -l libssl0.9.8?17:00
siceloii  libssl0.9.8                0.9.8zh-1+maemo1+0m5+0cssu SSL shared libraries17:01
jonwilOk, thats what I have17:03
jonwilOk so I can rule out a problem with supl.nokia.com address being wrong and a problem with supl.nokia.com not sending same certificates and a problem with having wrong version of any of the relavent packages17:04
sicelouploaded17:04
siceloincluded both dirs17:07
jonwilOk you have some differences in your CA store which might be the cause of your problem.17:08
jonwilcan you get me the output of dpkg -L maemosec-certman-common-ca?17:08
jonwiland also dpkg -s maemosec-certman-common-ca?17:08
*** dreamer has joined #maemo17:10
jonwilHow did you install maemosec-certman 0.2.9 btw, did you install it by adding cssu-testing to your repo list and then doing apt-get or did you install it by downloading the deb files and installing with dpkg?17:11
siceloit's a while ago, can't remember17:12
jonwilok.17:12
sicelohttp://paste.debian.net/983003/17:13
sicelohttp://paste.debian.net/plain/98300417:14
*** pcfe has quit IRC17:14
*** pcfe has joined #maemo17:21
*** pcfe has quit IRC17:21
*** pcfe has joined #maemo17:21
jonwilOk so the best thing to try now is to download http://maemo.merlin1991.at/cssu/community-devel/pool/free/m/maemo-security-certman/maemosec-certman-common-ca_0.2.9_all.deb and install it with dpkg -i17:25
jonwilDoes installing that fix your problem?17:30
*** xorly has joined #maemo17:31
sicelowithout reboot, same issue. let me reboot and see17:34
jonwilAny luck?17:40
siceloyay!17:44
sicelothanks jonwil17:44
siceloworking now17:44
jonwilgreat.17:44
jonwilGood to know that a reinstall seemes to have fixed whatever certificate was causing issues17:44
jonwilSome time when I get the chance (i.e. when its not "A.M. Very, very A.M" (as they said in Apollo 13) I will update maemosec-certman with the latest root CA certificates.17:49
jonwilIts too much work to try and remove the no-longer-needed special-case location-proxy root CA certificate and its not harming anything by leaving it there so I wont try and remove it :)17:49
*** err0r3o3 has quit IRC17:50
sicelothanks. i could see (from logs) that it was something to do with certs .. unfortunately it didn't occur to reinstall :-)17:54
jonwilPosted in the tmo thread with some tips (check the IP address matches the one I am using to be sure you have the right one, check that you are running 0.2.9 and if not, install 0.2.9 and if the IP is correct and you are running 0.2.9 and it still wont work, try reinstalling the certman-common-ca package)18:01
jonwilSo hopefully anyone else with problems will have some tips to try now18:01
siceloyes i saw it. marvellous18:02
*** Pali has joined #maemo18:42
*** Wizzup has quit IRC18:51
*** ab is now known as ab[out]18:55
*** ab[out] is now known as ab18:55
*** Wizzup has joined #maemo18:58
*** eMHa has quit IRC19:16
DocScrutinizer05isn't suppl SSL secured?19:18
DocScrutinizer05nevermind19:19
sixwheeledbeastSeems I have 0.2.319:27
*** dafox has joined #maemo19:36
*** dafox has quit IRC19:46
*** err0r3o3 has joined #maemo19:58
*** jonwil has quit IRC20:09
*** eMHa has joined #maemo20:30
*** drcode has quit IRC20:38
*** drcode has joined #maemo20:43
*** pcfe has quit IRC20:46
*** pcfe has joined #maemo20:46
*** pcfe has quit IRC20:46
*** pcfe has joined #maemo20:46
*** Wizzup has quit IRC20:53
*** Wizzup has joined #maemo20:56
*** drcode has quit IRC21:13
*** xy2_ has quit IRC21:16
*** geaaru has quit IRC21:22
*** xy2_ has joined #maemo21:25
*** Kabouik- has joined #maemo21:39
*** Kabouik_ has quit IRC21:42
Vajbi see there are few cli versions of facebook chat. Most written in javascript. Would any of them work with N900?21:44
*** drcode has joined #maemo22:17
sicelotry :-)22:40
Vajbsicelo: couldn't find any from repos ;)22:42
Vajband while i dug more of it, im pretty sure it is pointless to try oven22:42
sicelotry github22:43
Vajbit needs node.js 6 or 7 and we have 0.822:43
Vajbalso needs npm22:46
sicelothere's a messenger capable plugin for pidgin .. maybe check its dependencies22:51
* sicelo doesn't use facebook chat22:51
Vajbit needs newer glibc i recall22:53
Vajbor something newer anyways22:53
Vajbbut i think im gonna try cli version on my devuan n900. There it should work without problems22:54
*** pagurus has joined #maemo22:54
*** pagurus` has quit IRC22:56
*** Kabouik_ has joined #maemo22:59
sunshaviVajb: devuan-n900 has sms and phone-calls?23:00
sixwheeledbeastI wouldn't go near it either.23:00
sixwheeledbeastIsn't there a web interface?23:01
*** Kabouik- has quit IRC23:01
*** guerby has quit IRC23:02
*** guerby has joined #maemo23:04
*** guerby has joined #maemo23:04
Vajbsunshavi: i haven't managed to get even x yet. This also might explain my enthusiasm towards cli ;)23:08
Vajbsixwheeledbeast: it works well in opera browser, but it annoys me a lot. Because to get new messages i have to refresh the page. Probably if i knew how to, it would be possible to scrape together something with parts of opera and some stand alone app or cli.23:11
Vajbideal would be irss facebook plugin :D23:12
Vajbirssi*23:12
*** guerby_ has joined #maemo23:25
*** guerby has quit IRC23:25
*** xorly has quit IRC23:37
*** guerby_ is now known as guerby23:38
*** guerby has joined #maemo23:39
*** florian_ has joined #maemo23:39
*** florian has quit IRC23:42
*** florian_ is now known as florian23:42
*** florian_kc has joined #maemo23:42

Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!