IRC log of #maemo for Thursday, 2017-03-09

*** dafox has quit IRC00:42
*** xy2_ has quit IRC01:37
*** xy2_ has joined #maemo01:37
*** Enrico__ has quit IRC01:43
*** xy2_ has quit IRC01:54
*** Wizzup has quit IRC02:09
*** Wizzup has joined #maemo02:15
*** florian has quit IRC02:23
*** florian has joined #maemo02:48
*** florian has quit IRC02:56
*** infobot has quit IRC03:21
*** infobot has joined #maemo03:22
*** jonwil has joined #maemo03:53
*** sunshavi has quit IRC05:31
*** lxp has joined #maemo06:02
*** lxp1 has quit IRC06:03
*** povbot has joined #maemo06:34
*** pagurus has quit IRC07:13
*** DocScrutinizer05 has quit IRC07:16
*** DocScrutinizer05 has joined #maemo07:16
*** pagurus has joined #maemo07:19
*** dafox has joined #maemo09:00
*** rosseaux has quit IRC09:17
*** rosseaux has joined #maemo09:18
*** dafox has quit IRC09:30
*** zGrr has joined #maemo09:41
*** dmth|intevation has joined #maemo09:50
*** ecloud_wfh is now known as ecloud10:12
*** florian_kc has joined #maemo10:21
*** geaaru has joined #maemo10:28
*** florian_ has joined #maemo10:45
*** florian_kc is now known as florian10:47
*** spiiroin has quit IRC11:06
*** HRH_H_Crab has quit IRC11:22
*** HRH_H_Crab has joined #maemo11:24
*** spiiroin has joined #maemo11:27
*** eMHa_ has quit IRC11:35
*** capitanocrunch has joined #maemo11:37
*** capitanocrunch has quit IRC11:41
*** jskarvad has joined #maemo11:53
*** Sigyn has quit IRC11:55
*** Sigyn has joined #maemo11:56
*** CrKit has joined #maemo11:57
*** N-Mi has joined #maemo12:01
*** N-Mi has joined #maemo12:01
*** sunshavi has joined #maemo12:06
*** ecloud has quit IRC12:18
*** ecloud has joined #maemo12:28
*** jonwil has quit IRC12:37
*** merlin1991 has quit IRC12:41
*** merlin1991 has joined #maemo12:42
*** DocScrutinizer51 has quit IRC12:43
*** sixwheeledbeast has quit IRC12:43
*** DocScrutinizer51 has joined #maemo12:44
*** sixwheeledbeast has joined #maemo12:44
*** CrKit has quit IRC13:10
*** jonwil has joined #maemo13:37
bencohhmm, looks like even 35.157.6.107 no longer pings ( http://talk.maemo.org/showthread.php?t=90651&page=25 )13:55
jonwilBut do any of the IP addresses given in that post actually answer SUPL requests anymore?14:00
jonwilThe 52.22.201.16 address does seem to be answering SUPL requests14:02
bencohI don't think any of those still answer14:05
Sicelouh oh14:24
jonwilThe 52.22.201.16 address seems to be answering to SUPL requests for me14:26
jonwilIf I put that into /etc/hosts14:26
Siceloyes that one is working for me too (wondering for how long .. )14:41
bencohworks with supl-client indeed14:55
jonwilAll I know is that at this point I can get fast accurate GPS lock15:02
jonwilwhich is what matters to me15:02
jonwilI can get that lock in both maps and fahrplan :)15:03
jonwilIts unclear exactly what its doing (tcpdump capture shows no packets sent to the 52.22.201.16 address but that doesn't necessarily mean anything) but hey, it works so who cares :)15:07
jonwilObviously at some point a new supl server is needed, one that wont go away.15:07
*** jonwil has quit IRC15:08
Siceloor if we are somehow able to make Google's work ...it used to work some long time ago15:21
sixwheeledbeastI hope that maemo.org could host one.15:23
*** troulouliou_div2 has joined #maemo15:37
*** spiiroin has quit IRC15:40
bencohhmm15:51
bencoh$ cmcli -c common-ca -v supl.nokia.com:727515:51
bencoh1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com Verification failed: self signed certificate15:51
KotCzarnylol15:51
bencohusing 52.22.201.16 in /etc/hosts15:51
bencohthat's ... strange?15:52
KotCzarnythat 52... ip is old supl.nokia one?15:52
bencohsupposed to be, yeah15:52
bencohwas symantec CA removed at some point?15:53
bencoh        Issuer: C=US, O=Symantec Corporation, OU=Symantec Trust Network, CN=Symantec Class 3 Secure Server CA - G415:53
KotCzarnymaybe it expired?15:53
bencoh            Not After : May 15 23:59:59 2017 GMT15:54
KotCzarnywill fail in 2 months anyway? lol215:55
KotCzarnyi would start migrating from nokia's infra to something current15:55
bencohwe don't have "something current"15:56
bencohsupl.sonyericsson.com should work as well, btw15:57
bencohapart from the unrecognized certificate15:57
bencoh(same issue as google I think)15:57
KotCzarnyor start nudging maemo.org infra guys/council to create our own?15:58
bencohit's not that simple16:00
KotCzarnynudging IS simple ;)16:00
bencohmeh :)16:00
KotCzarnyobserve!16:00
KotCzarnyxes: *poke*16:00
sixwheeledbeastit may not be simple but it needs addressing somehow16:00
bencohwe'd need to sync ephemerids/almanachs from relevant sources, find a way to parse it, and serve it in a suitable way16:01
bencohplus I don't know of any complete opensource supl server, so one would have to write it (supl-client/supl-proxy could serve as a base / reference)16:02
xesKotCzarny: ?16:02
KotCzarnyxes, do you know who should we poke regarding new service on maemo.org ?16:02
xesKotCzarny: warfare and me. Are you talking about supl server?16:03
KotCzarnyyup16:03
KotCzarnyshould it go through council or not necessarily?16:03
warfareI don't think it should go through council if it is something small like a supl server.16:04
xes... we have to evaluate how manage all the data collected by the server16:04
warfarexes: easy: disable logging ;)16:05
KotCzarnydo you guys know of any already available servers or it would have to be written as bencoh's suggested?16:05
xeswarfare: this no logging must be clearly declared16:06
KotCzarnyor just declare that data stored on server is only for service needs and user agrees to it by chosing to use it?16:07
warfareKotCzarny: none that I know of and a quick googling revealed none.16:08
xesKotCzarny: i remember some supl proxy tool, but i don't know any other complete supl server16:08
KotCzarnyhmm, i have great idea, let's make the coding regatta winner code one! ;)16:09
xeshttps://www.tajuma.com/supl/supl-proxy-ex.html16:09
KotCzarnyas a token of appreciation16:09
bencohyeah that's the supl-proxy I was talking about16:16
bencohbut it's far from being a complete server16:17
*** SmilyOrg has quit IRC16:17
*** SmilyOrg has joined #maemo16:18
*** spiiroin has joined #maemo16:29
bencohhmm, that's crazy16:29
bencohcan't we force ssl or maemocert to just add an exception for a cert+domain?!16:29
freemangordonbencoh: what is the problem?16:32
bencohfreemangordon: I just fetched certificate from supl.sonyericsson.com (using openssl s_client -showcerts), added it to maemocert using sudo cmcli -c common-ca -a result.pem16:33
bencohcmcli -c common-ca -L |grep sony shows it16:34
bencohbut then cmcli -c common-ca -v  supl.sonyericsson.com:7275 still fails16:34
bencohhmm, woops16:34
bencohI might know why actually ...16:35
bencohcmcli -T common-ca -v supl.sonyericsson.com:7275 works16:35
freemangordonmhm16:35
bencohfunny how -T common-ca -L doesn't show cert16:35
bencoh-c common-ca -L shows it16:35
bencohlooks like a cmcli bug to me16:35
freemangordonthe question is - does supl works?16:35
freemangordon*work16:36
bencoh65d16a388a3264df9d6624c9ac7f273a49644346 supl.sonyericsson.com Verification failed: unable to get local issuer certificate16:36
bencohnevermind the -T part, it still fails16:36
bencoh(works on supl.nokia.com though)16:36
freemangordonwhat happens if you try to openns connect?16:36
freemangordon*openssl connect16:36
bencohdoesn't work16:36
KotCzarnydid format change somehow? some newer revision in supl?16:36
freemangordonKotCzarny: he is unable to connect :)16:37
KotCzarnyahm16:37
bencohbut ... I suppose openssl s_client doesn't use maemocert anyway16:37
KotCzarnygood ol' n900's cert fun16:37
freemangordonbencoh: :nod:16:37
freemangordonbencoh: are you on cssu?16:37
bencoh-stable, but yeah16:37
freemangordonwell, it is not "yah" because your openssl is old16:38
KotCzarnygo thumb, it gives you quite a bit of free mem16:38
freemangordonheh16:38
bencohOpenSSL 0.9.8zf 19 Mar 201516:38
bencohnot that old16:38
freemangordonhmm, should be ok then16:38
bencoh;)16:38
freemangordonyeah16:38
bencohso ... cmcli does verify supl.nokia.com16:39
freemangordonbencoh: could you try to connect via openssl wit dumpcerts option and pastebin the result16:39
freemangordonI suspect we're missing some sony root cert16:39
bencohwe are16:39
bencohmy question is, why adding supl.sonyericsson.com cert (since I dont want to add their CA) doesn't work?16:40
freemangordonlooks like this is how it should be :)16:41
freemangordonall the chain should be trusted16:41
bencohhttp://pastebin.notk.org/pastebin.php?show=m329e953616:41
freemangordonand you're missing the root cert16:41
bencohand we're back to my first point16:41
bencohwhy can't we add a per-domain exception?!16:41
bencohwhy should I trust Sony's CA?!16:41
bencohit's a system-wide trust ...16:42
freemangordonbencoh: because root certs are system-wide AFAIK16:42
freemangordonbencoh: OR...16:42
bencohwhich is why I'd like to only add the domain cert itself, but...16:42
bencohor?16:43
Sicelobencoh: any reason you don't like to to trust sony's? :)16:43
freemangordonwe should add sony's root CA the same way we did for those insecure symantec certs16:43
bencohSicelo: issuer=/C=SE/L=Lund/O=Sony Ericsson Mobile Communications AB/OU=Sony Ericsson Secure E2E16:43
bencohare you willing to widly trust this?16:43
bencohwildly*16:43
bencohfreemangordon: how did you add it?16:43
freemangordonbencoh: https://github.com/community-ssu/maemo-security-certman/commit/e2270fac46ad2da172b42d9bcbb7fe6806b2accb16:43
bencohfreemangordon: are you referring to the CA used to sign supl.nokia.com?16:44
freemangordonyes16:44
freemangordonbut, root cert, not the intermediate one16:44
bencohhmm16:44
Siceloquestion is though .. does sony's supl provide data in a way that Maemo understands? bencoh <<16:44
freemangordonjust add sony's root cert in etc/certs/location-proxy/16:44
bencohfreemangordon: I don't have that here (since -stable)16:44
freemangordonyes, it is new16:45
bencohso how comes it's still able to verify it?16:45
bencohdid they fix their chain somehow?16:45
Sicelobecause iirc google's doesn't work due to something related to alamanc data being sent or not sent16:45
freemangordonbencoh: at some point supl become broken for those using cssu-devel ;)16:45
bencohSicelo: that's actually what I'm willing to check16:45
bencohfreemangordon: I'm not using -devel :D16:45
freemangordonSicelo: we'll understand once we're able to connect to it16:46
bencoh(well, only importing a few packets here and there :p)16:46
freemangordonbencoh: and this was the fix, that will go into the next -testing16:46
freemangordonthe commit ^^^16:46
bencohah16:46
freemangordonbut you could use it as an example on how to add a root cert used only by location-proxy16:47
freemangordonand not system-wide16:47
bencohI suppose location-proxy automatically uses the location-proxy store then?16:47
freemangordonbencoh: got it?16:47
KotCzarnynice16:47
freemangordonyes16:47
bencohthen I should be able to add sony root using cmcli16:47
bencohthe thing is ... I don't have the root cert16:47
freemangordonbencoh: it uses common-ca and appends location-proxy store16:47
bencohit's missing16:47
freemangordonbencoh: yes, that's normal :)16:48
bencohit's absent from the cert chain16:48
freemangordonwe should find somebody woth a sony device :)16:48
bencohhuhu16:48
freemangordon*with16:48
bencohI guess we could do that16:48
KotCzarnyor browse old firmware images?16:48
freemangordonmhm16:48
freemangordonor ask google :D16:49
bencohSicelo: http://talk.maemo.org/showpost.php?p=1468009&postcount=19016:49
bencohyou might be right16:49
freemangordonbencoh: yes, we know Sicelo might be right, but we can't be sure until we try it16:50
Siceloi'm busy with somehting for the next few hours, but am on -devel and willing to test (with some guidance perhaps) ... if someone finds the sony cert let me know16:52
xeswarfare: it seems we were searching for the wrong words... "RRLP server"16:54
xeshttp://genesysguru.com/blog/blog/2013/04/06/rrlp-and-openbts-rrlp-installation/16:54
xesfreemangordon: have you any idea about how is current RRLP implementation in the N900?16:55
freemangordonNFC16:55
freemangordonbut I was wondering - can't we buy a commercial product?16:56
bencohxes: nice16:57
Sicelohmm, isn't RRLP something different? that's basically location via cell id17:05
bencohSicelo: not exactly17:05
Sicelowhich makes sense to be related to openbts ..17:05
Sicelook17:05
Sicelo~rrlp17:06
infobotRRLP is the Radio Resource LCS (Location Service) Protocol as specified first in GSM TS 04.31, or http://osmocom.org/projects/security/wiki/RRLP17:06
*** eMHa_ has joined #maemo17:37
*** Kabouik has joined #maemo17:50
*** geaaru has quit IRC18:06
*** louisdk has joined #maemo18:09
*** louisdk has quit IRC18:16
*** dmth|intevation has quit IRC18:17
*** geaaru has joined #maemo18:18
*** louisdk has joined #maemo18:20
*** zGrr has quit IRC18:28
*** Pali has joined #maemo18:41
*** louisdk has quit IRC18:44
*** troulouliou_div2 has quit IRC18:49
*** louisdk has joined #maemo19:00
*** realitygaps has quit IRC19:21
bencohhmm ... http://celestrak.com/GPS/almanac/Yuma/almanac.yuma.txt19:24
bencoh(found on genesysguru.com blog in another rrlp article)19:25
bencohand ftp://ftp.trimble.com/pub/eph/19:47
*** jskarvad has quit IRC19:56
*** Kabouik has quit IRC19:56
*** capitanocrunch has joined #maemo19:57
*** DocScrutinizer05 has quit IRC19:57
*** DocScrutinizer05 has joined #maemo19:58
KotCzarnydrat, i love debugging obscure errors20:03
KotCzarnyfor a future reference, remember to compile sublibs with the same cflags. /me nudges  -D_FILE_OFFSET_BITS=6420:04
*** NIN101_ has quit IRC20:06
*** NIN101 has joined #maemo20:06
bencohhmm, looks like cmt-reset (as root) really works on maemo ... it does resets modem properly20:08
bencohincluding GPS, since location-daemon then fetches SUPL data back from server20:08
KotCzarny'does reset' or 'do resets'20:08
bencohthat's pretty handy to help debugging A-GPS20:08
bencohdoes reset20:09
bencoh:)20:09
KotCzarny:)20:09
bencohbottomline is, 52.22.201.16 supl.nokia.com really works20:09
bencoh(for now ...)20:09
KotCzarnyoh?20:09
KotCzarnywhy it wasnt working before?20:10
bencohI wasn't sure it worked before20:10
bencohnow I know for sure20:10
bencohjonwil said he didn't see anything in tcpdump so I had to check ... hence cmt-reset20:10
*** geaaru has quit IRC20:11
bencohwell, at least I do see packets going through20:12
KotCzarnymake sure those aren't 404 ;)20:12
bencohwith no enabled data connection it doesn't get a proper fix20:14
bencohit does as soon as I enable gprs data :)20:15
KotCzarnynice20:15
bencohregarding having our own server, looks like we can easily get "live" ephemeris/almanac data and use the openbts rrlp server, but afaiui we're still missing the supl<->rrlp glue20:17
bencohnot sure though20:17
KotCzarnyyay! it works, muahahhahahahhahaah20:20
KotCzarnyspent almost whole day debugging miscompiled library20:20
KotCzarnyat least it works now :)20:21
*** TheKit has joined #maemo20:40
*** NeKit has quit IRC20:44
*** realitygaps has joined #maemo20:44
*** fuz_ has quit IRC20:44
*** florian_ has joined #maemo20:52
*** florian_ is now known as florian_kc20:53
*** florian_kc has joined #maemo20:53
*** florian has quit IRC20:54
*** florian_kc is now known as florian20:54
*** florian_kc has joined #maemo20:54
*** fuz_ has joined #maemo21:05
*** Enrico__ has joined #maemo21:06
Enrico__Hello, I am trying to install NITDroid on a Nokia N900 from here:21:13
Enrico__https://archive.org/download/NitdroidNokiaN90021:13
KotCzarnyunsupported, risky, wouldn't work21:14
KotCzarnyif you really need android tablet with kb there are better options21:14
Enrico__What do you mean?21:14
Enrico__Is there anything for the N900?21:15
KotCzarnywhat will you be doing with nitdroid?21:15
Enrico__Well, I just would like to install some apps which are not available for Maemo.21:15
KotCzarnybut would telephony work?21:15
Enrico__Why not?21:16
Enrico__?21:17
KotCzarnybecause i have never heard of nitdroid supporting telephony on n90021:18
KotCzarnyalso, n900 has 256M of ram, which is TINY when it comes to android21:18
Enrico__I understand. Are there better options?21:18
KotCzarnyso just grab yourself some old native android phone with physical kb21:18
KotCzarnysome people were experimenting with apkenv to run droid apps on maemo, but it's not satisfactory as well21:19
Enrico__In any case, I would like to try, just for the sake of knowledge and to see what happens.21:21
KotCzarnyyou like to hurt yourself, won't stop you then21:21
KotCzarnybut keep in mind that even old gingerbread on htc hero (380MB of ram) was slow21:22
Enrico__No problem. It's kind of a game. But I'd need to understand some things to try.21:26
*** drrz has joined #maemo21:28
KotCzarnyif you want to play with android innards, better grab some development board (ie. one of allwinner ones). they are much more hacker friendly (more connectors, unbrickable, uart exposed etc)21:30
KotCzarnyor allwinner tablet (similarly unbrickable)21:30
KotCzarnycheap too21:31
*** xy2_ has joined #maemo21:32
*** Enrico__ has quit IRC21:40
*** Enrico__ has joined #maemo21:41
*** Kabouik has joined #maemo22:06
*** capitanocrunch has quit IRC22:11
*** Sicelo009N has joined #maemo22:15
Sicelo009Nnice find bencoh, re - cmt-reset22:15
*** jonwil has joined #maemo22:30
*** Kabouik has quit IRC22:43
*** xy2_ has quit IRC22:45
*** dafox has joined #maemo22:47
*** Sicelo009N has quit IRC23:00
DocScrutinizer05~tell Enrico__ about maemo-multiboot23:17
DocScrutinizer05~nitdroid23:18
infobotextra, extra, read all about it, nitdroid is Nokia Internet Tablets with android OS. Support on nitdroid is provided in the channel #nitdroid and #nitdroid-help and Nokia does not officially support owners with android OS on their tablets. For more information read here: http://nitdroid.com/index.php?title=NITDroid_project. If you have bricked your N900 device and have installed nitdroid, flash with both eMMC and fiasco.23:18
Enrico__Hello, my N900 is not bricked any more.23:21
Enrico__I have u-boot working and Maemo as well.23:21
Enrico__Just playing around with NITDroid.23:22
*** florian has quit IRC23:33
*** dafox has quit IRC23:35
*** sunshavi has quit IRC23:54
*** louisdk has quit IRC23:56
*** sunshavi has joined #maemo23:57

Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!