| *** Pali has quit IRC | 00:49 | |
| *** xy2_ has quit IRC | 00:54 | |
| *** xy2_ has joined #maemo | 01:53 | |
| *** Kabouik- has joined #maemo | 02:51 | |
| *** Kabouik_ has quit IRC | 02:53 | |
| *** Kabouik_ has joined #maemo | 04:26 | |
| *** Kabouik- has quit IRC | 04:28 | |
| *** florian_ has joined #maemo | 04:55 | |
| *** florian has quit IRC | 04:58 | |
| brolin_empey | sicelo: OK. | 05:08 |
|---|---|---|
| *** err0r3o3 has quit IRC | 05:47 | |
| *** sr71 has joined #maemo | 05:57 | |
| *** sr71 has quit IRC | 05:57 | |
| *** Kabouik_ has quit IRC | 06:52 | |
| *** infobot has quit IRC | 07:15 | |
| *** spiiroin has quit IRC | 07:34 | |
| *** drcode has joined #maemo | 07:53 | |
| *** spiiroin has joined #maemo | 08:29 | |
| *** dafox has joined #maemo | 08:58 | |
| *** florian_ has quit IRC | 09:12 | |
| *** dafox has quit IRC | 09:29 | |
| *** dmth|intevation has joined #maemo | 09:30 | |
| *** Pali has joined #maemo | 09:39 | |
| *** Pali has quit IRC | 09:52 | |
| *** jon_y has quit IRC | 09:55 | |
| *** jon_y_ has joined #maemo | 09:55 | |
| *** err0r3o3 has joined #maemo | 09:57 | |
| *** geaaru has joined #maemo | 09:57 | |
| *** jon_y_ has quit IRC | 10:14 | |
| *** jon_y has joined #maemo | 10:16 | |
| *** xy2_ has joined #maemo | 10:19 | |
| *** florian has joined #maemo | 10:26 | |
| *** xorly has joined #maemo | 10:53 | |
| *** xy2_ has quit IRC | 11:15 | |
| *** geaaru has quit IRC | 11:28 | |
| *** xy2_ has joined #maemo | 11:38 | |
| *** geaaru has joined #maemo | 11:40 | |
| *** geaaru has quit IRC | 11:57 | |
| *** xy2_ has quit IRC | 12:02 | |
| *** geaaru has joined #maemo | 12:13 | |
| *** eMHa has quit IRC | 12:16 | |
| *** xy2_ has joined #maemo | 12:23 | |
| *** xorly has quit IRC | 12:25 | |
| *** eMHa has joined #maemo | 12:56 | |
| *** freemangordon_ has quit IRC | 12:59 | |
| *** spiiroin has quit IRC | 13:14 | |
| *** NotKit has joined #maemo | 13:17 | |
| *** TheKit has quit IRC | 13:20 | |
| *** xorly has joined #maemo | 13:25 | |
| *** spiiroin has joined #maemo | 13:30 | |
| *** spiiroin has quit IRC | 13:59 | |
| *** capitanocrunch has joined #maemo | 14:01 | |
| *** capitanocrunch has quit IRC | 14:06 | |
| *** Kabouik_ has joined #maemo | 14:24 | |
| *** jonwil has joined #maemo | 14:30 | |
| jonwil | hi | 14:30 |
| *** spiiroin has joined #maemo | 14:43 | |
| *** RedM has quit IRC | 15:32 | |
| *** rysiek|pl has quit IRC | 15:32 | |
| *** dreamer has quit IRC | 15:32 | |
| *** wnd has quit IRC | 15:32 | |
| *** stryngs has quit IRC | 15:32 | |
| *** APic has quit IRC | 15:32 | |
| *** esaym153 has quit IRC | 15:32 | |
| *** ced117 has quit IRC | 15:32 | |
| *** ShadowJK has quit IRC | 15:32 | |
| *** ShadowJK_ has joined #maemo | 15:32 | |
| *** stryngs has joined #maemo | 15:32 | |
| *** APic has joined #maemo | 15:33 | |
| *** wnd has joined #maemo | 15:33 | |
| *** ced117 has joined #maemo | 15:33 | |
| *** rysiek|pl has joined #maemo | 15:33 | |
| *** RedW has joined #maemo | 15:33 | |
| *** esaym153 has joined #maemo | 15:33 | |
| *** stryngs is now known as Guest17768 | 15:33 | |
| sicelo | hi jonwil | 15:33 |
| *** xorly has quit IRC | 15:37 | |
| *** Wair1978 has joined #maemo | 15:49 | |
| *** Wair1978 has left #maemo | 15:50 | |
| *** KotCzarny has quit IRC | 16:15 | |
| jonwil | sicelo, saw your post about AGPS | 16:18 |
| jonwil | AGPS works 100% for me with version 0.2.9 of maemosec-certman* | 16:19 |
| jonwil | I see nothing wrong with the output from the cmcli commands and nothing to suggest that something is broken with the certificates. | 16:21 |
| jonwil | supl.nokia.com currently returns a 3-certificate chain, the root of which is VeriSign Universal Root Certification Authority | 16:22 |
| jonwil | The VeriSign Universal Root Certification Authority certificate exists in the common-ca certificate store but NOT in the location-proxy certificate store | 16:22 |
| jonwil | which is why your cmcli -T location-proxy -v supl.nokia.com:7275 command thinks its a self-signed certificate and your cmcli -T common-ca -v supl.nokia.com:7275 command doesn't | 16:23 |
| sicelo | weird then. wonder what's up on my device. absolutely no A-GPS | 16:23 |
| jonwil | If you run it with both -T location-proxy and -T common-ca (in either order) it should correctly find the VeriSign Universal Root Certification Authority certificate | 16:23 |
| jonwil | What IP do you have in /etc/hosts for supl.nokia.com? | 16:23 |
| jonwil | I am using 52.22.201.16 | 16:24 |
| sicelo | me too | 16:24 |
| jonwil | very weird that its not working | 16:24 |
| jonwil | Can you properly ping/tracert supl.nokia.com from your N900? | 16:25 |
| jonwil | wait never mind on that, the machine doesn't answer pings | 16:25 |
| jonwil | so its not going to work | 16:25 |
| sicelo | syslog: | 16:25 |
| sicelo | Aug 25 15:25:16 Nokia-N900 location-proxy[1332]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=19 | 16:25 |
| sicelo | Aug 25 15:25:16 Nokia-N900 location-proxy[1332]: GLIB WARNING ** default - host: supl.nokia.com not verified, result: 19 | 16:25 |
| sicelo | and then, | 16:25 |
| sicelo | Aug 25 15:25:17 Nokia-N900 location-proxy[1332]: GLIB WARNING ** default - Connection to h-slp.mnc000.mcc653.pub.3gppnetwork.org:7275 failed | 16:26 |
| sicelo | Aug 25 15:25:17 Nokia-N900 location-proxy[1332]: GLIB WARNING ** default - error:2006A066:BIO routines:BIO_get_host_ip:bad hostname lookup | 16:26 |
| *** KotCzarny has joined #maemo | 16:26 | |
| jonwil | What output do you get if you type nslookup supl.nokia.com on your n900? | 16:28 |
| sicelo | Name: supl.nokia.com | 16:29 |
| sicelo | Address 1: 52.22.201.16 supl.nokia.com | 16:29 |
| jonwil | That's as it should be | 16:29 |
| sicelo | there's something causing me to get that "not verified" result, and it would seem to me cert-related. i should investigate further | 16:30 |
| sicelo | do you get the outcome in your logs? | 16:31 |
| sicelo | *that | 16:31 |
| jonwil | no, I get the correct output with verify_res=0 | 16:31 |
| sicelo | exactly as i expected | 16:31 |
| jonwil | Its very weird that its printing "connection to h-slp.mnc000.mcc653.pub.3gppnetwork.org:7275 failed" | 16:32 |
| sicelo | that's expected .. seems when if fails to communicated with specified supl server, it then tries to resolve it via cellular operator | 16:32 |
| sicelo | you cn get that if you, for example, put in a wrong IP | 16:33 |
| sicelo | maybe i should try a different supl server. do you have the other IPs handy? | 16:34 |
| jonwil | What output do you get if you type openssl s_client -showcerts -connect supl.nokia.com:7275 ? | 16:35 |
| jonwil | run on your N900 that is | 16:36 |
| jonwil | That will display the entire certificate chain that the server is sending you | 16:36 |
| sicelo | http://paste.debian.net/982994/ | 16:38 |
| bencoh | openssl s_client and liblocation don't use the same store iirc | 16:40 |
| bencoh | liblocation uses certman | 16:40 |
| jonwil | If you run the same command but add -CAPath /etc/certs/common-ca what do you get for the "verifiy" lins? | 16:40 |
| bencoh | (yes, this whole ssl/tls stuff is a mess ... and gnutls has yet another one) | 16:40 |
| *** ShadowJK_ is now known as ShadowJK | 16:40 | |
| jonwil | openssl s_client will use the same store as certman if you pass the right -CAPath (the one above) | 16:41 |
| jonwil | As the current maintainer of certman, I do know how all this works :) | 16:41 |
| jonwil | Reading the pastebin, it looks like sicelo gets identical certificates from supl.nokia.com as me. | 16:42 |
| jonwil | so that's not the problem. | 16:42 |
| sicelo | makes sense to get same, but my liblocation prefers the non-working one :-/ | 16:43 |
| sicelo | http://paste.debian.net/plain/982995 | 16:43 |
| jonwil | What version does dpkg -l give for location-proxy? | 16:44 |
| jonwil | Should be 0.100-1+0m5 | 16:44 |
| sicelo | yes i have that one | 16:45 |
| jonwil | what flavor of CSSU are you using? | 16:46 |
| sicelo | thumb | 16:46 |
| jonwil | and is it up-to-date with the latest version? | 16:46 |
| sicelo | yes, | 16:47 |
| sicelo | 1Tmaemo11+thumb0 | 16:47 |
| jonwil | ok, so community-thumb repo only has version 0.2.2 of maemosec-certman-common-ca, where did you get the 0.2.9 version you are running now? | 16:49 |
| jonwil | Or maybe I am looking at an obsolete commubity-thumb repo somehow... | 16:50 |
| *** dmth|intevation has quit IRC | 16:50 | |
| sicelo | devel .. i reported the problem that got solved by 0.2.9 | 16:52 |
| jonwil | ok. | 16:52 |
| jonwil | Any chance you can send me a copy of your /etc/certs and /etc/secure folders so I can compare them with what they should be? | 16:55 |
| sicelo | sure | 16:55 |
| jonwil | Great. | 16:56 |
| sicelo | don't have somewhere to upload to (from N900) .. doesn't contain any confidential info afaict. could i post on the tmo post? | 16:58 |
| jonwil | yeahmaemosec-certman-common-ca | 16:58 |
| jonwil | yeah do that | 16:59 |
| jonwil | No there is nothing sensitive in there | 16:59 |
| jonwil | oh yeah one more thing, what version do you get if you do dpkg -l libssl0.9.8? | 17:00 |
| sicelo | ii libssl0.9.8 0.9.8zh-1+maemo1+0m5+0cssu SSL shared libraries | 17:01 |
| jonwil | Ok, thats what I have | 17:03 |
| jonwil | Ok so I can rule out a problem with supl.nokia.com address being wrong and a problem with supl.nokia.com not sending same certificates and a problem with having wrong version of any of the relavent packages | 17:04 |
| sicelo | uploaded | 17:04 |
| sicelo | included both dirs | 17:07 |
| jonwil | Ok you have some differences in your CA store which might be the cause of your problem. | 17:08 |
| jonwil | can you get me the output of dpkg -L maemosec-certman-common-ca? | 17:08 |
| jonwil | and also dpkg -s maemosec-certman-common-ca? | 17:08 |
| *** dreamer has joined #maemo | 17:10 | |
| jonwil | How did you install maemosec-certman 0.2.9 btw, did you install it by adding cssu-testing to your repo list and then doing apt-get or did you install it by downloading the deb files and installing with dpkg? | 17:11 |
| sicelo | it's a while ago, can't remember | 17:12 |
| jonwil | ok. | 17:12 |
| sicelo | http://paste.debian.net/983003/ | 17:13 |
| sicelo | http://paste.debian.net/plain/983004 | 17:14 |
| *** pcfe has quit IRC | 17:14 | |
| *** pcfe has joined #maemo | 17:21 | |
| *** pcfe has quit IRC | 17:21 | |
| *** pcfe has joined #maemo | 17:21 | |
| jonwil | Ok so the best thing to try now is to download http://maemo.merlin1991.at/cssu/community-devel/pool/free/m/maemo-security-certman/maemosec-certman-common-ca_0.2.9_all.deb and install it with dpkg -i | 17:25 |
| jonwil | Does installing that fix your problem? | 17:30 |
| *** xorly has joined #maemo | 17:31 | |
| sicelo | without reboot, same issue. let me reboot and see | 17:34 |
| jonwil | Any luck? | 17:40 |
| sicelo | yay! | 17:44 |
| sicelo | thanks jonwil | 17:44 |
| sicelo | working now | 17:44 |
| jonwil | great. | 17:44 |
| jonwil | Good to know that a reinstall seemes to have fixed whatever certificate was causing issues | 17:44 |
| jonwil | Some time when I get the chance (i.e. when its not "A.M. Very, very A.M" (as they said in Apollo 13) I will update maemosec-certman with the latest root CA certificates. | 17:49 |
| jonwil | Its too much work to try and remove the no-longer-needed special-case location-proxy root CA certificate and its not harming anything by leaving it there so I wont try and remove it :) | 17:49 |
| *** err0r3o3 has quit IRC | 17:50 | |
| sicelo | thanks. i could see (from logs) that it was something to do with certs .. unfortunately it didn't occur to reinstall :-) | 17:54 |
| jonwil | Posted in the tmo thread with some tips (check the IP address matches the one I am using to be sure you have the right one, check that you are running 0.2.9 and if not, install 0.2.9 and if the IP is correct and you are running 0.2.9 and it still wont work, try reinstalling the certman-common-ca package) | 18:01 |
| jonwil | So hopefully anyone else with problems will have some tips to try now | 18:01 |
| sicelo | yes i saw it. marvellous | 18:02 |
| *** Pali has joined #maemo | 18:42 | |
| *** Wizzup has quit IRC | 18:51 | |
| *** ab is now known as ab[out] | 18:55 | |
| *** ab[out] is now known as ab | 18:55 | |
| *** Wizzup has joined #maemo | 18:58 | |
| *** eMHa has quit IRC | 19:16 | |
| DocScrutinizer05 | isn't suppl SSL secured? | 19:18 |
| DocScrutinizer05 | nevermind | 19:19 |
| sixwheeledbeast | Seems I have 0.2.3 | 19:27 |
| *** dafox has joined #maemo | 19:36 | |
| *** dafox has quit IRC | 19:46 | |
| *** err0r3o3 has joined #maemo | 19:58 | |
| *** jonwil has quit IRC | 20:09 | |
| *** eMHa has joined #maemo | 20:30 | |
| *** drcode has quit IRC | 20:38 | |
| *** drcode has joined #maemo | 20:43 | |
| *** pcfe has quit IRC | 20:46 | |
| *** pcfe has joined #maemo | 20:46 | |
| *** pcfe has quit IRC | 20:46 | |
| *** pcfe has joined #maemo | 20:46 | |
| *** Wizzup has quit IRC | 20:53 | |
| *** Wizzup has joined #maemo | 20:56 | |
| *** drcode has quit IRC | 21:13 | |
| *** xy2_ has quit IRC | 21:16 | |
| *** geaaru has quit IRC | 21:22 | |
| *** xy2_ has joined #maemo | 21:25 | |
| *** Kabouik- has joined #maemo | 21:39 | |
| *** Kabouik_ has quit IRC | 21:42 | |
| Vajb | i see there are few cli versions of facebook chat. Most written in javascript. Would any of them work with N900? | 21:44 |
| *** drcode has joined #maemo | 22:17 | |
| sicelo | try :-) | 22:40 |
| Vajb | sicelo: couldn't find any from repos ;) | 22:42 |
| Vajb | and while i dug more of it, im pretty sure it is pointless to try oven | 22:42 |
| sicelo | try github | 22:43 |
| Vajb | it needs node.js 6 or 7 and we have 0.8 | 22:43 |
| Vajb | also needs npm | 22:46 |
| sicelo | there's a messenger capable plugin for pidgin .. maybe check its dependencies | 22:51 |
| * sicelo doesn't use facebook chat | 22:51 | |
| Vajb | it needs newer glibc i recall | 22:53 |
| Vajb | or something newer anyways | 22:53 |
| Vajb | but i think im gonna try cli version on my devuan n900. There it should work without problems | 22:54 |
| *** pagurus has joined #maemo | 22:54 | |
| *** pagurus` has quit IRC | 22:56 | |
| *** Kabouik_ has joined #maemo | 22:59 | |
| sunshavi | Vajb: devuan-n900 has sms and phone-calls? | 23:00 |
| sixwheeledbeast | I wouldn't go near it either. | 23:00 |
| sixwheeledbeast | Isn't there a web interface? | 23:01 |
| *** Kabouik- has quit IRC | 23:01 | |
| *** guerby has quit IRC | 23:02 | |
| *** guerby has joined #maemo | 23:04 | |
| *** guerby has joined #maemo | 23:04 | |
| Vajb | sunshavi: i haven't managed to get even x yet. This also might explain my enthusiasm towards cli ;) | 23:08 |
| Vajb | sixwheeledbeast: it works well in opera browser, but it annoys me a lot. Because to get new messages i have to refresh the page. Probably if i knew how to, it would be possible to scrape together something with parts of opera and some stand alone app or cli. | 23:11 |
| Vajb | ideal would be irss facebook plugin :D | 23:12 |
| Vajb | irssi* | 23:12 |
| *** guerby_ has joined #maemo | 23:25 | |
| *** guerby has quit IRC | 23:25 | |
| *** xorly has quit IRC | 23:37 | |
| *** guerby_ is now known as guerby | 23:38 | |
| *** guerby has joined #maemo | 23:39 | |
| *** florian_ has joined #maemo | 23:39 | |
| *** florian has quit IRC | 23:42 | |
| *** florian_ is now known as florian | 23:42 | |
| *** florian_kc has joined #maemo | 23:42 | |
Generated by irclog2html.py 2.15.1 by Marius Gedminas - find it at mg.pov.lt!