MobileRead Forums
Register Guidelines E-Books Today's Posts Search

Go Back   MobileRead Forums > E-Book Readers > Amazon Kindle > Kindle Developer's Corner
Reload this Page DX(G) Develop patch for missing certificate Kindle DX

Notices

Reply
Page 2 of 3 1 2 3
 
Thread Tools Search this Thread
Old 05-17-2019, 10:55 AM   #16
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by DeKuns View Post
- - - -

When the device tried to connect to Amazon server for a certificate, the device send its serial number and some other related numbers. In the debug file, the server returns "file not found". All Kindle Gen 2 data might be removed either intentionally or accidently. May be this is a routine server maintanance because the early Gen 2 is now 10 years old—only Kindle DXG the latest sale is in 2014—.
Almost.
Prior to registration, the device has a "limited access" certificate.
It uses that to create the device registration (where it sends device / user specific information).
In return, it receives a "general access" certificate.
("limited" and "general" are used above to provide a sense of the process, they may not be the proper terms.)
knc1 is offline   Reply With Quote
Old 05-17-2019, 04:31 PM   #17
DeKuns
Connoisseur
DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.
 
Posts: 89
Karma: 133654
Join Date: Apr 2019
Device: Kindle DX Graphite
Quote:
Originally Posted by knc1 View Post
Almost.
Prior to registration, the device has a "limited access" certificate.
It uses that to create the device registration (where it sends device / user specific information).
In return, it receives a "general access" certificate.
("limited" and "general" are used above to provide a sense of the process, they may not be the proper terms.)
I understand now. Thank you knc1. So no need for firmware 3.4.2. The problem of these factory reset unable to register is that this "general access" certificate is not in the server anymore. Is this "general access" certificate is highly encrypted? DXG is my only Kindle so I am not able to examine this "general access" certificate.
DeKuns is offline   Reply With Quote
Old 05-17-2019, 05:23 PM   #18
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by DeKuns View Post
I understand now. Thank you knc1. So no need for firmware 3.4.2. The problem of these factory reset unable to register is that this "general access" certificate is not in the server anymore. Is this "general access" certificate is highly encrypted? DXG is my only Kindle so I am not able to examine this "general access" certificate.
Ah, no not on server.
It ships with a new device and is only used for set-up/registration. I.E: It is the public signature cert.

I do not recall if it is deleted after set-up, but I can see how people working on ten year old firmware might over-look such a thing (since no new ones have been sold in a decade).


So these posts make me think that certificate (the one-time set-up cert) is what is missing.


I can't think of any reason why Amazon would re-cert their system after only ten years, 20..30 years is more normal practice.
And I can't think of why the "Hi Mom, I'm sold" first time certificate would be different for different models. (It might be used differently, but would still be the same cert.)


So I think all we need is some owners of other 3G models to post file name listings of those two directory paths you posted.
Maybe the K3 (keyboard) would still have the "intro" certificate present.


Since we are only looking for the Public certificate, we should be able to post it on the forum when it is found, since, after all, it is Public.
knc1 is offline   Reply With Quote
Old 05-19-2019, 05:15 AM   #19
DeKuns
Connoisseur
DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.
 
Posts: 89
Karma: 133654
Join Date: Apr 2019
Device: Kindle DX Graphite
Quote:
Originally Posted by eddie.t.h View Post
Yesterday I successfully made a reset to factory and registered my Kindle keyboard 3 but i have wifi only device.
Thanks for the info!
So it is currently affecting Gen 1-2 only. I read here Gen 3 might inherit the same process in communicating to Amazon server:
https://www.turnkeylinux.org/blog/kindle-root

Quote:
BASE_WEBSITE_URL: http://www.amazon.com
CERT_SERVER_URL : https://fras-g7g.amazon.com/FrasProxy/
REGISTER_SERVER_URL : https://firs-g7g.amazon.com/FirsProxy/
TODO_SERVER=https://todo-g7g.amazon.com/FionaTodoListProxy/
CDE_SERVER=https://cde-g7g.amazon.com/FionaCDEServiceEngine/
If you can analyze the debug file, then could you inform here what file that Amazon send from their CERT_SERVER_URL? This is where I saw my Kindle DX stop in registration process because it received a respond from the server that the file is not found. Thanks.
DeKuns is offline   Reply With Quote
Old 05-19-2019, 05:18 AM   #20
DeKuns
Connoisseur
DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.
 
Posts: 89
Karma: 133654
Join Date: Apr 2019
Device: Kindle DX Graphite
Quote:
Originally Posted by knc1 View Post
Ah, no not on server.
It ships with a new device and is only used for set-up/registration. I.E: It is the public signature cert.

I do not recall if it is deleted after set-up, but I can see how people working on ten year old firmware might over-look such a thing (since no new ones have been sold in a decade).


So these posts make me think that certificate (the one-time set-up cert) is what is missing.


I can't think of any reason why Amazon would re-cert their system after only ten years, 20..30 years is more normal practice.
And I can't think of why the "Hi Mom, I'm sold" first time certificate would be different for different models. (It might be used differently, but would still be the same cert.)


So I think all we need is some owners of other 3G models to post file name listings of those two directory paths you posted.
Maybe the K3 (keyboard) would still have the "intro" certificate present.


Since we are only looking for the Public certificate, we should be able to post it on the forum when it is found, since, after all, it is Public.
Let see if we can found what file it is and whether it is public domain file. If the registration process of factory reset Kindle of Gen 3 or newer Kindle is still the same then owners of these newer Gen might also able to help.
DeKuns is offline   Reply With Quote
Old 05-20-2019, 08:53 AM   #21
DiapDealer
Grand Sorcerer
DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.
 
DiapDealer's Avatar
 
Posts: 28,587
Karma: 204624552
Join Date: Jan 2010
Device: Nexus 7, Kindle Fire HD
Quote:
Originally Posted by j.p.s View Post
K2 was Sprint. reports of K2 connectivity loss started showing up here some time ago.
Only the early US-only version of the K2 was Sprint. The later international versions of the K2 (2009-ish) switched to ATT. I was one of the ones reporting connectivity loss (but only after a factory reset) back in 2017, but Amazon corrected whatever the problem was and I was eventually able to re-register and connect. I'd have to dig it out of the Gig-Bag-of-Retired-Gizmos-that-Lives-in-the-Bottom-of-the-Closet (and see if it will still hold a charge) to see if it can still connect.

But even back then (2007) there were many reports of DX(G)s not being able to register/connect even after the problem with the K2s was resolved.
Last edited by DiapDealer; 05-20-2019 at 09:02 AM.
DiapDealer is offline   Reply With Quote
Old 05-20-2019, 10:16 AM   #22
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by DeKuns View Post
- - - - -
If you can analyze the debug file, then could you inform here what file that Amazon send from their CERT_SERVER_URL? This is where I saw my Kindle DX stop in registration process because it received a respond from the server that the file is not found. Thanks.
This is what the FF message says (the CA's certificate used to sign the Amazon certificate has expired, at least the CA certificate for Gutenburg on my machine is expired - so this might be fixed just by retriving Gutenburg's current public cert):
Attached Thumbnails
Click image for larger version Name: Spectacle.J20826.png Views: 302 Size: 47.5 KB ID: 171519  
Last edited by knc1; 05-20-2019 at 10:25 AM.
knc1 is offline   Reply With Quote
Old 05-20-2019, 12:59 PM   #23
DeKuns
Connoisseur
DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.
 
Posts: 89
Karma: 133654
Join Date: Apr 2019
Device: Kindle DX Graphite
Quote:
Originally Posted by knc1 View Post
This is what the FF message says (the CA's certificate used to sign the Amazon certificate has expired, at least the CA certificate for Gutenburg on my machine is expired - so this might be fixed just by retriving Gutenburg's current public cert):
Thanks kcn1, that is exactly what I think of at the beginning. However, Chrome browser also listed all Amazon related registration servers have invalid certificate. These:

Do Amazon move their registrations servers while not updating from which URL classic factory reset Kindle should get its certificates? We need debug file from a newer generation Kindle to analyse from which server they get their certificates after performing a factory reset.

DiapDealer probably could help us see differences between his hopefully still connected Kindle 2 with mine factory reset Kindle DX.

I hope it is only a matter of missing some public domain files in certain directories and I hope these files can easily patched to specific SN, ICCID, and ESN.
Last edited by DeKuns; 05-21-2019 at 12:05 AM.
DeKuns is offline   Reply With Quote
Old 05-20-2019, 08:28 PM   #24
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Only that would break the signature of the certificate (unless you have Amazon's private key to sign the patched file with).

The search bar "dump messages" command is very old - was available even on series 2 devices:
;dm
knc1 is offline   Reply With Quote
Old 05-20-2019, 08:41 PM   #25
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by knc1 View Post
Only that would break the signature of the certificate (unless you have Amazon's private key to sign the patched file with).

The search bar "dump messages" command is very old - was available even on series 2 devices:
;dm

I just checked the root certificates on my desktop PC (which is current) -
Gutenburg must be out of business - name never appears and google could not help me find their web-site.
BUT -
Amazon is also a "trusted root ca" and there are at least 4 or 5 root certificates for Amazon.


Hmm...
Maybe Amazon forgot to update the older firmwares when Gutenburg died.
knc1 is offline   Reply With Quote
Old 05-21-2019, 12:16 AM   #26
DeKuns
Connoisseur
DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.
 
Posts: 89
Karma: 133654
Join Date: Apr 2019
Device: Kindle DX Graphite
Quote:
Originally Posted by knc1 View Post
I just checked the root certificates on my desktop PC (which is current) -
Gutenburg must be out of business - name never appears and google could not help me find their web-site.
BUT -
Amazon is also a "trusted root ca" and there are at least 4 or 5 root certificates for Amazon.


Hmm...
Maybe Amazon forgot to update the older firmwares when Gutenburg died.
Akh.. Amazon excuse is better like that rather than they did it intentionally. Anyway, DiapDealer has brought his K2 from death. It is still connected and sync with Amazon. His/Her K2 was never been factory reset after Amazon allowed a brief window time to re-register Gen 1-2 Kindle in 2017. So there is something in a non-factory reset Gen 1-2 Kindle that enables them to still connect to Amazon. Would that probably the 'missing' certificate?

DiapDealer is active in another thread: https://www.mobileread.com/forums/sh...=320147&page=2
Last edited by DeKuns; 05-21-2019 at 12:38 AM.
DeKuns is offline   Reply With Quote
Old 05-21-2019, 11:00 AM   #27
knc1
Going Viral
knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.knc1 ought to be getting tired of karma fortunes by now.
 
knc1's Avatar
 
Posts: 17,212
Karma: 18210809
Join Date: Feb 2012
Location: Central Texas
Device: No K1, PW2, KV, KOA
Quote:
Originally Posted by DeKuns View Post
Akh.. Amazon excuse is better like that rather than they did it intentionally. Anyway, DiapDealer has brought his K2 from death. It is still connected and sync with Amazon. His/Her K2 was never been factory reset after Amazon allowed a brief window time to re-register Gen 1-2 Kindle in 2017. So there is something in a non-factory reset Gen 1-2 Kindle that enables them to still connect to Amazon. Would that probably the 'missing' certificate?

DiapDealer is active in another thread: https://www.mobileread.com/forums/sh...=320147&page=2
Right.
I don't know if my system firmware backup script will work on a K2, I only tested on touchscreen devices.
But the K2 is old enough, someone MUST have written (and posted) some such utility.
knc1 is offline   Reply With Quote
Old 05-21-2019, 12:49 PM   #28
DeKuns
Connoisseur
DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.DeKuns puts his or her pants on both legs at a time.
 
Posts: 89
Karma: 133654
Join Date: Apr 2019
Device: Kindle DX Graphite
Amazon has fix over the 3G, just by now! My Kindle DX is now 100% registered from the device. They hear us. I will make study what actually they did. By looking the ;dm, I can initially report they might re-route where my Kindle should get the certificate definitely not from fras-g7g.amazon.com. I can see in the debug file that Amazon seemed to update what we have suspect as 'expired' gutenberg certificate.
Last edited by DeKuns; 05-21-2019 at 01:04 PM.
DeKuns is offline   Reply With Quote
Old 05-21-2019, 01:03 PM   #29
DiapDealer
Grand Sorcerer
DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.DiapDealer ought to be getting tired of karma fortunes by now.
 
DiapDealer's Avatar
 
Posts: 28,587
Karma: 204624552
Join Date: Jan 2010
Device: Nexus 7, Kindle Fire HD
Quote:
Originally Posted by DeKuns View Post
Amazon has fix over the 3G, just by now. My Kindle DX is now 100% registered from the device. They hear us. I will make study what actually they did. By looking the ;dm, I can initially report they might re-route where my Kindle should get the certificate.
That's very similar to what happened back in 2017 with my K2US. Couldn't register over 3G; complaints were made, and then I could register over 3G.
DiapDealer is offline   Reply With Quote
Old 05-21-2019, 01:54 PM   #30
eddie.t.h
Addict
eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.eddie.t.h is an accomplished Snipe hunter.
 
eddie.t.h's Avatar
 
Posts: 201
Karma: 123456
Join Date: Jan 2018
Device: Too Much Kindle :-)
Quote:
Originally Posted by DeKuns View Post
Thanks for the info!
So it is currently affecting Gen 1-2 only. I read here Gen 3 might inherit the same process in communicating to Amazon server:
https://www.turnkeylinux.org/blog/kindle-root



If you can analyze the debug file, then could you inform here what file that Amazon send from their CERT_SERVER_URL? This is where I saw my Kindle DX stop in registration process because it received a respond from the server that the file is not found. Thanks.
Unfortunately, the debug file does not contain anything about registration. Maybe too much time has passed. In the location /var/local/java/prefs/certs I have two files: client.p12 client.pem
client.pem looks like a normal ssh key but from what I see it contains the device serial number, motherboard number, etc.
client.p12 is totally unreadable.
eddie.t.h is offline   Reply With Quote
Reply
Page 2 of 3 1 2 3

Tags
certificate, kindle dx, register dx(g)

« Previous Thread | Next Thread »

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Kindle DXi 2.5.8 Missing Certificate johandj73 Amazon Kindle 68 06-13-2019 10:08 AM
How to install a CA Certificate for WIFI? Kindle PW Julian1984 Amazon Kindle 5 11-09-2017 04:34 PM
does anyone develop/compile for kindle on a mac? hippy dave Kindle Developer's Corner 15 09-08-2012 05:04 PM
Free (Kindle) Tailgating Cookbook by Gooseberry Patch arcadata Deals and Resources (No Self-Promotion or Affiliate Links) 2 09-12-2011 03:08 AM
kindlepid.py patch for Kindle 2 International bloovis Kindle Developer's Corner 2 11-07-2009 07:14 AM


All times are GMT -4. The time now is 02:57 PM.

Contact Us - FAQ - Guidelines - Privacy - Top

MobileRead.com is a privately owned, operated and funded community.