View Single Post
Community Council | Posts: 680 | Thanked: 1,227 times | Joined on Sep 2010 @ Mbabane
#228
Hmm, noticed yesterday that I have problems with supl.nokia.com lately:

Code:
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=19
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB WARNING ** default - host: supl.nokia.com not verified, result: 19
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB WARNING ** default - Connection to h-slp.mnc002.mcc655.pub.3gppnetwork.org:7275 failed
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB WARNING ** default - error:2006A066:BIO routines:BIO_get_host_ip:bad hostname lookup
Feb  4 14:32:01 fremantle location-proxy[1297]: GLIB DEBUG default - Socket fd=12 closed on request
The device has CSSU-Thumb with openssl 0.9.8zh-1+maemo1+0m5+0cssu0

My other N900, with openssl 0.9.8zf-1+maemo1+0m5+0cssu0 gets quick fix, with exactly the same settings. Here's the log:
Code:
Feb  4 22:11:42 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=12, verify_res=0
Feb  4 22:11:43 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket to supl.nokia.com opened, fd=13, verify_res=0
Feb  4 22:11:43 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket fd=12 closed on request
Feb  4 22:11:43 Nokia-N900 location-proxy[1300]: GLIB DEBUG default - Socket fd=13 closed on request
An interesting thing is - the 2nd N900 never tries to contact h-slp.mncXXX.mccXXX.pub.3gppnetwork.org, whereas the 2nd one does. XXX depends on the operator whose SIM is in the device

cmcli output for both N900 is the same
Code:
cmcli -T common-ca -v supl.nokia.com:7275
1ad16dd494e161abd39bd94ed94bf8eafe4ede28 supl.nokia.com
 Verification failed: self signed certificate
and with both,
Code:
openssl s_client -connect supl.nokia.com:7275 -CApath /etc/certs/common-ca/

...
...
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
    Session-ID: ...
    Session-ID-ctx: 
    Master-Key: ...
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    Start Time: 1486242237
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)

Last edited by sicelo; 2017-02-04 at 21:05.
 

The Following User Says Thank You to sicelo For This Useful Post: