View Single Post
Posts: 46 | Thanked: 160 times | Joined on Jun 2010 @ Germany, Berlin
#101
Though I am happy with supl.vodafone.com I took some time today fiddling around with supl-proxy from tajuma.com .

I checked against all working supl-server I know of:

sls1.sirf.com
supl.google.com
supl.nokia.com
supl.sonyericsson.com
supl.vodafone.com

Everytime with preceeding steps in N900:
- gconftool --recursive-unset /system/nokia/location
- reboot
- setting location server to my server with running supl-proxy (pointed to the next supl server from the five mentioned above)
- running location test tool with method ACWP (with OK to supl usage terms)

To my surprise I got a quick (less than 10sec) location result within some hundred meters around with three of the five servers:

sls1.sirf.com
supl.nokia.com
supl.vodafone.com

With the others I got quite more data exchanged, but didn't get a location result.
If anyone is interested, see my proxy logfiles attached.

Without supl-proxy , just pointing my N900 to the five servers directly (with all the preceeding steps), the only server working for me is supl.vodafone.com .

I set up supl-proxy on my own network gateway and when I was rechecking without proxy my N900 was on wifi in my own network. So all request from same IP to the supl servers.

Okay, this could mean that N900 has probs with the data coming from google and sonyericsson, but for sirf and nokia(!) the only cause for failing - left to see to me - is certificate issues.
peterleinchen, seems you where quite right with your assumptions ...

I verified certificate chain on N900 (should have done earlier):
Code:
[2|user@Nokia-N900|/] cmcli -T common-ca -v supl.vodafone.com:7275 
f73d6238917bbaeb04235d2219a1da31b4b68f4d supl.vodafone.com
 trust chain(1):
   f18ab43c6a02bfd8228c7965cf88f4abbc180aa6 Thawte Server CA
Verified OK
And for Nokia:
Code:
[2|user@Nokia-N900|/] cmcli -T common-ca -v supl.nokia.com:7275 
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 Verification failed: self signed certificate
Too bad.
Checking the chain:
Code:
openssl s_client -connect supl.nokia.com:7275
I already had a short look into the cert chain , replacing VeriSign certs in certificate manager (via cmcli). But with no luck.
One can find all VeriSign root certs at http://www.symantec.com/page.jsp?id=roots .

Maybe someone has more abilities to digg deeper into it. Would be nice to have supl.nokia.com usable again. Until then supl.vodafone.com is good enough for my needs.

Cheers, Ulle
Attached Files
File Type: zip supl-proxy_logs_n900.zip (12.1 KB, 200 views)
 

The Following 15 Users Say Thank You to Ulle For This Useful Post: