How to update Kindle 2/DX/DXG with YifanLu's firmware from 3.2.1 to 3.4.2

[knc1]

Originally Posted by donB006

I looked at the /usr/java/lib/security directory inside my K3G immediately after updating to 3.4.2 a few months ago and found this:

drwxr-xr-x 2 root root  1024 Jun  1  2012 .
drwxr-xr-x 7 root root  1024 Jun  1  2012 ..
-rw-r--r-- 1 1004 5000 48913 Oct  7 09:47 cacerts
-rwxr-xr-x 1 root root   250 Dec 27  2010 java_permissive.policy
-rwxr-xr-x 1 root root  3968 Dec 27  2010 java.policy
-rw-r--r-- 1 root root  8097 Jun  1  2012 java.security
-rwxr-xr-x 1 root root  2915 Jun  1  2012 local_policy.jar
-rwxr-xr-x 1 root root  2433 Jun  1  2012 US_export_policy.jar

The cacerts file seems newer than the rest and might have the certs from the critical update. The DXG stock at 2.5.8 looks like this:

drwxr-xr-x 2 root root  1024 Jan 13  2011 .
drwxr-xr-x 7 root root  1024 Jan 13  2011 ..
-rwxr-xr-x 1 root root 48913 Jan 13  2011 cacerts
-rwxr-xr-x 1 root root  3238 Jan 13  2011 java.policy
-rw-r--r-- 1 root root  7276 Jan 13  2011 java.security
-rwxr-xr-x 1 root root  2921 Jan 13  2011 local_policy.jar
-rwxr-xr-x 1 root root  2440 Jan 13  2011 US_export_policy.jar

The cacerts file is the same size for 2.5.8 and 3.4.2 at 48913 bytes except with different dates are probably not really the same.

I suppose I can try to transfer the new cacerts from K3G 3.4.2 to my DXG 3.1 and see what happens. Maybe I can figure this out.

the client certificates are plain text files, look at them in an editor.

[donB006]

OK knc1. I just found there is also a file /etc/ssl/ca-certificates.crt dated the same as the /usr/java/lib/security/cacerts file. Next I plan to transfer the ca-certificates.crt to my DXG and check the 3G connectivity. After lunch of course.

[knc1]

Originally Posted by donB006

OK knc1. I just found there is also a file /etc/ssl/ca-certificates.crt dated the same as the /usr/java/lib/security/cacerts file. Next I plan to transfer the ca-certificates.crt to my DXG and check the 3G connectivity. After lunch of course.

there is a required patch(es) to the client applications also -
they have to request TLS-1.x rather than SSL-v2/v3/whatever.

[donB006]

I installed the file /etc/ssl/certs/ca-certificates.crt dated 7 Oct 2015 from K3G 3.4.2 into the DXG with 3.1 along with the corresponding /usr/java/lib/security/cacerts file and still cannot connect to the Amazon store. There are still a few sites I can reach presumably with older more permissive protocols.

I doubt the Amazon critical update needed for the server changes due in March will include anything more than the Amazon store. I don't expect Amazon to enable full TLS for the 2.5.8 OS like they have for the 3.4.2 OS.

I should move my comments to the thread about the DXG 2.5.8 browser instead of clogging up this thread. The DXG with 3.4.2 is still a problem if the only way to get the critical updates is by OTA from Amazon. I am unsure if the March changes will affect only the Amazon Store or all of the internet browsing using the Amazon proxy. Hopefully there will be a way to manually update the older kindles in the future instead of just by over the air methods.

[knc1]

Originally Posted by donB006

- - - -
I don't expect Amazon to enable full TLS for the 2.5.8 OS like they have for the 3.4.2 OS.
- - - -

? ? ? ?
Please explain why.

[donB006]

I don't really know what Amazon has planned. My K3G only had the two files modified last October except the 3.4.2 already had TLS enabled so the needed changes could be minor in that case. I am not even sure the October update is the same as the critical fixes needed before Amazon breaks things in March.

Maybe there are more changes planned including TLS for the older kindles including the DXG except I am doubtful.
https://www.mobileread.com/forums/sho...&postcount=349

[donB006]

I have the critical update for the 2.5.8 DXG except this might not work for a DXG at 3.4.2. I don't know if this is enough to allow full internet access like the 3.4.2 of this thread. I doubt this update is enough and the 3+ series browser is way better than the 2.5.8 browser. I expect somebody would need to grab the 3.4.2 critical update to fix the changes expected in March 2016. For the changes limited to 2.5.8 see here:
https://www.mobileread.com/forums/sho...5&postcount=30

[knc1]

I added some notes to the post linked to above (in another forum).

[e-ghost]

Because of the Amazon's notification, I falled back to 2.5.8 (555370010) and then select "sync content" through wireless to trigger the update. But after few days of overnight waiting, the version number still the same. Haven't seen any download update (storage usage no change) and it hasn't performed any reboot at all. But at least I still can access Amazon Store....

So basically I don't know did Amazon actually did anything at all.

[donB006]

Originally Posted by e-ghost

So basically I don't know did Amazon actually did anything at all.

My 2.5.8 version stayed the same after the update at 555370010. Check the /usr/java/lib/security/cacerts file to see if the date has been changed:

drwxr-xr-x    2 root     root         1024 Jan 13  2011 .
drwxr-xr-x    7 root     root         1024 Jan 13  2011 ..
-rwxr-xr-x    1 root     root         2440 Jan 13  2011 US_export_policy.jar
-rwxr-xr-x    1 root     root        48913 Feb 27 06:53 cacerts
-rwxr-xr-x    1 root     root         3238 Jan 13  2011 java.policy
-rw-r--r--    1 root     root         7276 Jan 13  2011 java.security
-rwxr-xr-x    1 root     root         2921 Jan 13  2011 local_policy.jar

[plaisthos]

I upgraded my Kindle DXG according to this guide to 3.4.2 and it seem that my login to amazon isn't working anymore.

When I entered my username/password and press submit I see the spinning circle a few seconds in upper left corner and then it does not nothing, not closing the login screen or anything else.

Did anyone else have similar experience or any idea how I could fix that?

[newman]

Where did you put the login credentials? To the settings "window"?

I suggest you have a look to logs (/var/log/messages) to see what's happening (mine KDX' battery is empty right now, can't say for myself).

[hlh]

Originally Posted by plaisthos

I upgraded my Kindle DXG according to this guide to 3.4.2 and it seem that my login to amazon isn't working anymore.

When I entered my username/password and press submit I see the spinning circle a few seconds in upper left corner and then it does not nothing, not closing the login screen or anything else.

Did anyone else have similar experience or any idea how I could fix that?

the same to me. so i am back to 3.2.1 and login in that ver, then upgrade to 3.4.2

[beniminhugh]

Originally Posted by e-ghost

Because of the Amazon's notification, I falled back to 2.5.8 (555370010) and then select "sync content" through wireless to trigger the update. But after few days of overnight waiting, the version number still the same. Haven't seen any download update (storage usage no change) and it hasn't performed any reboot at all. But at least I still can access Amazon Store....

So basically I don't know did Amazon actually did anything at all.

I came across the same problem! How do you fall back the version to 2.5.8. After i copy official 2.5.8 to device. The update is not highlighted.

[xtech]

Hi!

I use DXG with 3.2.1 version. Did not have the latest kindle update. If I wish now to change the sim card, will the settings in the files for DXG 3.2.1 be exactly the same as for DXG 2.5.8? There are topics about changing sims, but here we deal with the non-original version.

Do not want to turn my kindle into a brick.