View Single Post
Community Council | Posts: 680 | Thanked: 1,227 times | Joined on Sep 2010 @ Mbabane
#273
@jonwil - for some reason my A-GPS is not working again.
Installed package versions:
Code:
~ $ dpkg -l *maemosec*
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Cfg-files/Unpacked/Failed-cfg/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Hold/Reinst-required/X=both-problems (Status,Err: uppercase=bad)
||/ Name                        Version                     Description
+++-===========================-===========================-======================================================================
ii  libmaemosec-certman-applet0 0.1.5                       Certificate manager external UI library.
ii  libmaemosec-certman0        0.2.9                       Maemo certificate manager shared library
ii  libmaemosec0                0.2.9                       Maemo security base library
ii  maemosec-certman-applet     0.1.5                       Control Panel Certificate Manager plugin
ii  maemosec-certman-common-ca  0.2.9                       Common CA certificates
ii  maemosec-certman-tools      0.2.9                       Maemo certificate manager runtime tools
cmcli output:
Code:
~ $ cmcli -T common-ca -v supl.nokia.com:7275
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 trust chain(1):
   b677fa6948479f5312d5c2ea07327607d1970719 VeriSign Universal Root Certification Authority
Verified OK
~ $ cmcli -T location-proxy -v supl.nokia.com:7275
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 Verification failed: self signed certificate
I don't know what has happened here. Is it possible that somehow 'Nokia' has removed the old root cert which we worked around by using a different cert-store? My guess is that location-proxy checks in its cert store BEFORE it checks the common-ca store, since I assume it should succeed if it looked in common-ca as well, if the above cmcli output is anything to go by.

I'll downgrade the maemosec packages when I find time to see what happens.

Last edited by sicelo; 2017-09-04 at 08:31. Reason: adding [code] blocks
 

The Following 4 Users Say Thank You to sicelo For This Useful Post: