*** dafox has quit IRC | 00:42 | |
*** xy2_ has quit IRC | 01:37 | |
*** xy2_ has joined #maemo | 01:37 | |
*** Enrico__ has quit IRC | 01:43 | |
*** xy2_ has quit IRC | 01:54 | |
*** Wizzup has quit IRC | 02:09 | |
*** Wizzup has joined #maemo | 02:15 | |
*** florian has quit IRC | 02:23 | |
*** florian has joined #maemo | 02:48 | |
*** florian has quit IRC | 02:56 | |
*** infobot has quit IRC | 03:21 | |
*** infobot has joined #maemo | 03:22 | |
*** jonwil has joined #maemo | 03:53 | |
*** sunshavi has quit IRC | 05:31 | |
*** lxp has joined #maemo | 06:02 | |
*** lxp1 has quit IRC | 06:03 | |
*** povbot has joined #maemo | 06:34 | |
*** pagurus has quit IRC | 07:13 | |
*** DocScrutinizer05 has quit IRC | 07:16 | |
*** DocScrutinizer05 has joined #maemo | 07:16 | |
*** pagurus has joined #maemo | 07:19 | |
*** dafox has joined #maemo | 09:00 | |
*** rosseaux has quit IRC | 09:17 | |
*** rosseaux has joined #maemo | 09:18 | |
*** dafox has quit IRC | 09:30 | |
*** zGrr has joined #maemo | 09:41 | |
*** dmth|intevation has joined #maemo | 09:50 | |
*** ecloud_wfh is now known as ecloud | 10:12 | |
*** florian_kc has joined #maemo | 10:21 | |
*** geaaru has joined #maemo | 10:28 | |
*** florian_ has joined #maemo | 10:45 | |
*** florian_kc is now known as florian | 10:47 | |
*** spiiroin has quit IRC | 11:06 | |
*** HRH_H_Crab has quit IRC | 11:22 | |
*** HRH_H_Crab has joined #maemo | 11:24 | |
*** spiiroin has joined #maemo | 11:27 | |
*** eMHa_ has quit IRC | 11:35 | |
*** capitanocrunch has joined #maemo | 11:37 | |
*** capitanocrunch has quit IRC | 11:41 | |
*** jskarvad has joined #maemo | 11:53 | |
*** Sigyn has quit IRC | 11:55 | |
*** Sigyn has joined #maemo | 11:56 | |
*** CrKit has joined #maemo | 11:57 | |
*** N-Mi has joined #maemo | 12:01 | |
*** N-Mi has joined #maemo | 12:01 | |
*** sunshavi has joined #maemo | 12:06 | |
*** ecloud has quit IRC | 12:18 | |
*** ecloud has joined #maemo | 12:28 | |
*** jonwil has quit IRC | 12:37 | |
*** merlin1991 has quit IRC | 12:41 | |
*** merlin1991 has joined #maemo | 12:42 | |
*** DocScrutinizer51 has quit IRC | 12:43 | |
*** sixwheeledbeast has quit IRC | 12:43 | |
*** DocScrutinizer51 has joined #maemo | 12:44 | |
*** sixwheeledbeast has joined #maemo | 12:44 | |
*** CrKit has quit IRC | 13:10 | |
*** jonwil has joined #maemo | 13:37 | |
bencoh | hmm, looks like even 35.157.6.107 no longer pings ( http://talk.maemo.org/showthread.php?t=90651&page=25 ) | 13:55 |
---|---|---|
jonwil | But do any of the IP addresses given in that post actually answer SUPL requests anymore? | 14:00 |
jonwil | The 52.22.201.16 address does seem to be answering SUPL requests | 14:02 |
bencoh | I don't think any of those still answer | 14:05 |
Sicelo | uh oh | 14:24 |
jonwil | The 52.22.201.16 address seems to be answering to SUPL requests for me | 14:26 |
jonwil | If I put that into /etc/hosts | 14:26 |
Sicelo | yes that one is working for me too (wondering for how long .. ) | 14:41 |
bencoh | works with supl-client indeed | 14:55 |
jonwil | All I know is that at this point I can get fast accurate GPS lock | 15:02 |
jonwil | which is what matters to me | 15:02 |
jonwil | I can get that lock in both maps and fahrplan :) | 15:03 |
jonwil | Its unclear exactly what its doing (tcpdump capture shows no packets sent to the 52.22.201.16 address but that doesn't necessarily mean anything) but hey, it works so who cares :) | 15:07 |
jonwil | Obviously at some point a new supl server is needed, one that wont go away. | 15:07 |
*** jonwil has quit IRC | 15:08 | |
Sicelo | or if we are somehow able to make Google's work ...it used to work some long time ago | 15:21 |
sixwheeledbeast | I hope that maemo.org could host one. | 15:23 |
*** troulouliou_div2 has joined #maemo | 15:37 | |
*** spiiroin has quit IRC | 15:40 | |
bencoh | hmm | 15:51 |
bencoh | $ cmcli -c common-ca -v supl.nokia.com:7275 | 15:51 |
bencoh | 1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com Verification failed: self signed certificate | 15:51 |
KotCzarny | lol | 15:51 |
bencoh | using 52.22.201.16 in /etc/hosts | 15:51 |
bencoh | that's ... strange? | 15:52 |
KotCzarny | that 52... ip is old supl.nokia one? | 15:52 |
bencoh | supposed to be, yeah | 15:52 |
bencoh | was symantec CA removed at some point? | 15:53 |
bencoh | Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G4 | 15:53 |
KotCzarny | maybe it expired? | 15:53 |
bencoh | Not After : May 15 23:59:59 2017 GMT | 15:54 |
KotCzarny | will fail in 2 months anyway? lol2 | 15:55 |
KotCzarny | i would start migrating from nokia's infra to something current | 15:55 |
bencoh | we don't have "something current" | 15:56 |
bencoh | supl.sonyericsson.com should work as well, btw | 15:57 |
bencoh | apart from the unrecognized certificate | 15:57 |
bencoh | (same issue as google I think) | 15:57 |
KotCzarny | or start nudging maemo.org infra guys/council to create our own? | 15:58 |
bencoh | it's not that simple | 16:00 |
KotCzarny | nudging IS simple ;) | 16:00 |
bencoh | meh :) | 16:00 |
KotCzarny | observe! | 16:00 |
KotCzarny | xes: *poke* | 16:00 |
sixwheeledbeast | it may not be simple but it needs addressing somehow | 16:00 |
bencoh | we'd need to sync ephemerids/almanachs from relevant sources, find a way to parse it, and serve it in a suitable way | 16:01 |
bencoh | plus I don't know of any complete opensource supl server, so one would have to write it (supl-client/supl-proxy could serve as a base / reference) | 16:02 |
xes | KotCzarny: ? | 16:02 |
KotCzarny | xes, do you know who should we poke regarding new service on maemo.org ? | 16:02 |
xes | KotCzarny: warfare and me. Are you talking about supl server? | 16:03 |
KotCzarny | yup | 16:03 |
KotCzarny | should it go through council or not necessarily? | 16:03 |
warfare | I don't think it should go through council if it is something small like a supl server. | 16:04 |
xes | ... we have to evaluate how manage all the data collected by the server | 16:04 |
warfare | xes: easy: disable logging ;) | 16:05 |
KotCzarny | do you guys know of any already available servers or it would have to be written as bencoh's suggested? | 16:05 |
xes | warfare: this no logging must be clearly declared | 16:06 |
KotCzarny | or just declare that data stored on server is only for service needs and user agrees to it by chosing to use it? | 16:07 |
warfare | KotCzarny: none that I know of and a quick googling revealed none. | 16:08 |
xes | KotCzarny: i remember some supl proxy tool, but i don't know any other complete supl server | 16:08 |
KotCzarny | hmm, i have great idea, let's make the coding regatta winner code one! ;) | 16:09 |
xes | https://www.tajuma.com/supl/supl-proxy-ex.html | 16:09 |
KotCzarny | as a token of appreciation | 16:09 |
bencoh | yeah that's the supl-proxy I was talking about | 16:16 |
bencoh | but it's far from being a complete server | 16:17 |
*** SmilyOrg has quit IRC | 16:17 | |
*** SmilyOrg has joined #maemo | 16:18 | |
*** spiiroin has joined #maemo | 16:29 | |
bencoh | hmm, that's crazy | 16:29 |
bencoh | can't we force ssl or maemocert to just add an exception for a cert+domain?! | 16:29 |
freemangordon | bencoh: what is the problem? | 16:32 |
bencoh | freemangordon: I just fetched certificate from supl.sonyericsson.com (using openssl s_client -showcerts), added it to maemocert using sudo cmcli -c common-ca -a result.pem | 16:33 |
bencoh | cmcli -c common-ca -L |grep sony shows it | 16:34 |
bencoh | but then cmcli -c common-ca -v supl.sonyericsson.com:7275 still fails | 16:34 |
bencoh | hmm, woops | 16:34 |
bencoh | I might know why actually ... | 16:35 |
bencoh | cmcli -T common-ca -v supl.sonyericsson.com:7275 works | 16:35 |
freemangordon | mhm | 16:35 |
bencoh | funny how -T common-ca -L doesn't show cert | 16:35 |
bencoh | -c common-ca -L shows it | 16:35 |
bencoh | looks like a cmcli bug to me | 16:35 |
freemangordon | the question is - does supl works? | 16:35 |
freemangordon | *work | 16:36 |
bencoh | 65d16a388a3264df9d6624c9ac7f273a49644346 supl.sonyericsson.com Verification failed: unable to get local issuer certificate | 16:36 |
bencoh | nevermind the -T part, it still fails | 16:36 |
bencoh | (works on supl.nokia.com though) | 16:36 |
freemangordon | what happens if you try to openns connect? | 16:36 |
freemangordon | *openssl connect | 16:36 |
bencoh | doesn't work | 16:36 |
KotCzarny | did format change somehow? some newer revision in supl? | 16:36 |
freemangordon | KotCzarny: he is unable to connect :) | 16:37 |
KotCzarny | ahm | 16:37 |
bencoh | but ... I suppose openssl s_client doesn't use maemocert anyway | 16:37 |
KotCzarny | good ol' n900's cert fun | 16:37 |
freemangordon | bencoh: :nod: | 16:37 |
freemangordon | bencoh: are you on cssu? | 16:37 |
bencoh | -stable, but yeah | 16:37 |
freemangordon | well, it is not "yah" because your openssl is old | 16:38 |
KotCzarny | go thumb, it gives you quite a bit of free mem | 16:38 |
freemangordon | heh | 16:38 |
bencoh | OpenSSL 0.9.8zf 19 Mar 2015 | 16:38 |
bencoh | not that old | 16:38 |
freemangordon | hmm, should be ok then | 16:38 |
bencoh | ;) | 16:38 |
freemangordon | yeah | 16:38 |
bencoh | so ... cmcli does verify supl.nokia.com | 16:39 |
freemangordon | bencoh: could you try to connect via openssl wit dumpcerts option and pastebin the result | 16:39 |
freemangordon | I suspect we're missing some sony root cert | 16:39 |
bencoh | we are | 16:39 |
bencoh | my question is, why adding supl.sonyericsson.com cert (since I dont want to add their CA) doesn't work? | 16:40 |
freemangordon | looks like this is how it should be :) | 16:41 |
freemangordon | all the chain should be trusted | 16:41 |
bencoh | http://pastebin.notk.org/pastebin.php?show=m329e9536 | 16:41 |
freemangordon | and you're missing the root cert | 16:41 |
bencoh | and we're back to my first point | 16:41 |
bencoh | why can't we add a per-domain exception?! | 16:41 |
bencoh | why should I trust Sony's CA?! | 16:41 |
bencoh | it's a system-wide trust ... | 16:42 |
freemangordon | bencoh: because root certs are system-wide AFAIK | 16:42 |
freemangordon | bencoh: OR... | 16:42 |
bencoh | which is why I'd like to only add the domain cert itself, but... | 16:42 |
bencoh | or? | 16:43 |
Sicelo | bencoh: any reason you don't like to to trust sony's? :) | 16:43 |
freemangordon | we should add sony's root CA the same way we did for those insecure symantec certs | 16:43 |
bencoh | Sicelo: issuer=/C=SE/L=Lund/O=Sony Ericsson Mobile Communications AB/OU=Sony Ericsson Secure E2E | 16:43 |
bencoh | are you willing to widly trust this? | 16:43 |
bencoh | wildly* | 16:43 |
bencoh | freemangordon: how did you add it? | 16:43 |
freemangordon | bencoh: https://github.com/community-ssu/maemo-security-certman/commit/e2270fac46ad2da172b42d9bcbb7fe6806b2accb | 16:43 |
bencoh | freemangordon: are you referring to the CA used to sign supl.nokia.com? | 16:44 |
freemangordon | yes | 16:44 |
freemangordon | but, root cert, not the intermediate one | 16:44 |
bencoh | hmm | 16:44 |
Sicelo | question is though .. does sony's supl provide data in a way that Maemo understands? bencoh << | 16:44 |
freemangordon | just add sony's root cert in etc/certs/location-proxy/ | 16:44 |
bencoh | freemangordon: I don't have that here (since -stable) | 16:44 |
freemangordon | yes, it is new | 16:45 |
bencoh | so how comes it's still able to verify it? | 16:45 |
bencoh | did they fix their chain somehow? | 16:45 |
Sicelo | because iirc google's doesn't work due to something related to alamanc data being sent or not sent | 16:45 |
freemangordon | bencoh: at some point supl become broken for those using cssu-devel ;) | 16:45 |
bencoh | Sicelo: that's actually what I'm willing to check | 16:45 |
bencoh | freemangordon: I'm not using -devel :D | 16:45 |
freemangordon | Sicelo: we'll understand once we're able to connect to it | 16:46 |
bencoh | (well, only importing a few packets here and there :p) | 16:46 |
freemangordon | bencoh: and this was the fix, that will go into the next -testing | 16:46 |
freemangordon | the commit ^^^ | 16:46 |
bencoh | ah | 16:46 |
freemangordon | but you could use it as an example on how to add a root cert used only by location-proxy | 16:47 |
freemangordon | and not system-wide | 16:47 |
bencoh | I suppose location-proxy automatically uses the location-proxy store then? | 16:47 |
freemangordon | bencoh: got it? | 16:47 |
KotCzarny | nice | 16:47 |
freemangordon | yes | 16:47 |
bencoh | then I should be able to add sony root using cmcli | 16:47 |
bencoh | the thing is ... I don't have the root cert | 16:47 |
freemangordon | bencoh: it uses common-ca and appends location-proxy store | 16:47 |
bencoh | it's missing | 16:47 |
freemangordon | bencoh: yes, that's normal :) | 16:48 |
bencoh | it's absent from the cert chain | 16:48 |
freemangordon | we should find somebody woth a sony device :) | 16:48 |
bencoh | huhu | 16:48 |
freemangordon | *with | 16:48 |
bencoh | I guess we could do that | 16:48 |
KotCzarny | or browse old firmware images? | 16:48 |
freemangordon | mhm | 16:48 |
freemangordon | or ask google :D | 16:49 |
bencoh | Sicelo: http://talk.maemo.org/showpost.php?p=1468009&postcount=190 | 16:49 |
bencoh | you might be right | 16:49 |
freemangordon | bencoh: yes, we know Sicelo might be right, but we can't be sure until we try it | 16:50 |
Sicelo | i'm busy with somehting for the next few hours, but am on -devel and willing to test (with some guidance perhaps) ... if someone finds the sony cert let me know | 16:52 |
xes | warfare: it seems we were searching for the wrong words... "RRLP server" | 16:54 |
xes | http://genesysguru.com/blog/blog/2013/04/06/rrlp-and-openbts-rrlp-installation/ | 16:54 |
xes | freemangordon: have you any idea about how is current RRLP implementation in the N900? | 16:55 |
freemangordon | NFC | 16:55 |
freemangordon | but I was wondering - can't we buy a commercial product? | 16:56 |
bencoh | xes: nice | 16:57 |
Sicelo | hmm, isn't RRLP something different? that's basically location via cell id | 17:05 |
bencoh | Sicelo: not exactly | 17:05 |
Sicelo | which makes sense to be related to openbts .. | 17:05 |
Sicelo | ok | 17:05 |
Sicelo | ~rrlp | 17:06 |
infobot | RRLP is the Radio Resource LCS (Location Service) Protocol as specified first in GSM TS 04.31, or http://osmocom.org/projects/security/wiki/RRLP | 17:06 |
*** eMHa_ has joined #maemo | 17:37 | |
*** Kabouik has joined #maemo | 17:50 | |
*** geaaru has quit IRC | 18:06 | |
*** louisdk has joined #maemo | 18:09 | |
*** louisdk has quit IRC | 18:16 | |
*** dmth|intevation has quit IRC | 18:17 | |
*** geaaru has joined #maemo | 18:18 | |
*** louisdk has joined #maemo | 18:20 | |
*** zGrr has quit IRC | 18:28 | |
*** Pali has joined #maemo | 18:41 | |
*** louisdk has quit IRC | 18:44 | |
*** troulouliou_div2 has quit IRC | 18:49 | |
*** louisdk has joined #maemo | 19:00 | |
*** realitygaps has quit IRC | 19:21 | |
bencoh | hmm ... http://celestrak.com/GPS/almanac/Yuma/almanac.yuma.txt | 19:24 |
bencoh | (found on genesysguru.com blog in another rrlp article) | 19:25 |
bencoh | and ftp://ftp.trimble.com/pub/eph/ | 19:47 |
*** jskarvad has quit IRC | 19:56 | |
*** Kabouik has quit IRC | 19:56 | |
*** capitanocrunch has joined #maemo | 19:57 | |
*** DocScrutinizer05 has quit IRC | 19:57 | |
*** DocScrutinizer05 has joined #maemo | 19:58 | |
KotCzarny | drat, i love debugging obscure errors | 20:03 |
KotCzarny | for a future reference, remember to compile sublibs with the same cflags. /me nudges -D_FILE_OFFSET_BITS=64 | 20:04 |
*** NIN101_ has quit IRC | 20:06 | |
*** NIN101 has joined #maemo | 20:06 | |
bencoh | hmm, looks like cmt-reset (as root) really works on maemo ... it does resets modem properly | 20:08 |
bencoh | including GPS, since location-daemon then fetches SUPL data back from server | 20:08 |
KotCzarny | 'does reset' or 'do resets' | 20:08 |
bencoh | that's pretty handy to help debugging A-GPS | 20:08 |
bencoh | does reset | 20:09 |
bencoh | :) | 20:09 |
KotCzarny | :) | 20:09 |
bencoh | bottomline is, 52.22.201.16 supl.nokia.com really works | 20:09 |
bencoh | (for now ...) | 20:09 |
KotCzarny | oh? | 20:09 |
KotCzarny | why it wasnt working before? | 20:10 |
bencoh | I wasn't sure it worked before | 20:10 |
bencoh | now I know for sure | 20:10 |
bencoh | jonwil said he didn't see anything in tcpdump so I had to check ... hence cmt-reset | 20:10 |
*** geaaru has quit IRC | 20:11 | |
bencoh | well, at least I do see packets going through | 20:12 |
KotCzarny | make sure those aren't 404 ;) | 20:12 |
bencoh | with no enabled data connection it doesn't get a proper fix | 20:14 |
bencoh | it does as soon as I enable gprs data :) | 20:15 |
KotCzarny | nice | 20:15 |
bencoh | regarding having our own server, looks like we can easily get "live" ephemeris/almanac data and use the openbts rrlp server, but afaiui we're still missing the supl<->rrlp glue | 20:17 |
bencoh | not sure though | 20:17 |
KotCzarny | yay! it works, muahahhahahahhahaah | 20:20 |
KotCzarny | spent almost whole day debugging miscompiled library | 20:20 |
KotCzarny | at least it works now :) | 20:21 |
*** TheKit has joined #maemo | 20:40 | |
*** NeKit has quit IRC | 20:44 | |
*** realitygaps has joined #maemo | 20:44 | |
*** fuz_ has quit IRC | 20:44 | |
*** florian_ has joined #maemo | 20:52 | |
*** florian_ is now known as florian_kc | 20:53 | |
*** florian_kc has joined #maemo | 20:53 | |
*** florian has quit IRC | 20:54 | |
*** florian_kc is now known as florian | 20:54 | |
*** florian_kc has joined #maemo | 20:54 | |
*** fuz_ has joined #maemo | 21:05 | |
*** Enrico__ has joined #maemo | 21:06 | |
Enrico__ | Hello, I am trying to install NITDroid on a Nokia N900 from here: | 21:13 |
Enrico__ | https://archive.org/download/NitdroidNokiaN900 | 21:13 |
KotCzarny | unsupported, risky, wouldn't work | 21:14 |
KotCzarny | if you really need android tablet with kb there are better options | 21:14 |
Enrico__ | What do you mean? | 21:14 |
Enrico__ | Is there anything for the N900? | 21:15 |
KotCzarny | what will you be doing with nitdroid? | 21:15 |
Enrico__ | Well, I just would like to install some apps which are not available for Maemo. | 21:15 |
KotCzarny | but would telephony work? | 21:15 |
Enrico__ | Why not? | 21:16 |
Enrico__ | ? | 21:17 |
KotCzarny | because i have never heard of nitdroid supporting telephony on n900 | 21:18 |
KotCzarny | also, n900 has 256M of ram, which is TINY when it comes to android | 21:18 |
Enrico__ | I understand. Are there better options? | 21:18 |
KotCzarny | so just grab yourself some old native android phone with physical kb | 21:18 |
KotCzarny | some people were experimenting with apkenv to run droid apps on maemo, but it's not satisfactory as well | 21:19 |
Enrico__ | In any case, I would like to try, just for the sake of knowledge and to see what happens. | 21:21 |
KotCzarny | you like to hurt yourself, won't stop you then | 21:21 |
KotCzarny | but keep in mind that even old gingerbread on htc hero (380MB of ram) was slow | 21:22 |
Enrico__ | No problem. It's kind of a game. But I'd need to understand some things to try. | 21:26 |
*** drrz has joined #maemo | 21:28 | |
KotCzarny | if you want to play with android innards, better grab some development board (ie. one of allwinner ones). they are much more hacker friendly (more connectors, unbrickable, uart exposed etc) | 21:30 |
KotCzarny | or allwinner tablet (similarly unbrickable) | 21:30 |
KotCzarny | cheap too | 21:31 |
*** xy2_ has joined #maemo | 21:32 | |
*** Enrico__ has quit IRC | 21:40 | |
*** Enrico__ has joined #maemo | 21:41 | |
*** Kabouik has joined #maemo | 22:06 | |
*** capitanocrunch has quit IRC | 22:11 | |
*** Sicelo009N has joined #maemo | 22:15 | |
Sicelo009N | nice find bencoh, re - cmt-reset | 22:15 |
*** jonwil has joined #maemo | 22:30 | |
*** Kabouik has quit IRC | 22:43 | |
*** xy2_ has quit IRC | 22:45 | |
*** dafox has joined #maemo | 22:47 | |
*** Sicelo009N has quit IRC | 23:00 | |
DocScrutinizer05 | ~tell Enrico__ about maemo-multiboot | 23:17 |
DocScrutinizer05 | ~nitdroid | 23:18 |
infobot | extra, extra, read all about it, nitdroid is Nokia Internet Tablets with android OS. Support on nitdroid is provided in the channel #nitdroid and #nitdroid-help and Nokia does not officially support owners with android OS on their tablets. For more information read here: http://nitdroid.com/index.php?title=NITDroid_project. If you have bricked your N900 device and have installed nitdroid, flash with both eMMC and fiasco. | 23:18 |
Enrico__ | Hello, my N900 is not bricked any more. | 23:21 |
Enrico__ | I have u-boot working and Maemo as well. | 23:21 |
Enrico__ | Just playing around with NITDroid. | 23:22 |
*** florian has quit IRC | 23:33 | |
*** dafox has quit IRC | 23:35 | |
*** sunshavi has quit IRC | 23:54 | |
*** louisdk has quit IRC | 23:56 | |
*** sunshavi has joined #maemo | 23:57 |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!