Hallo, the freshnesscheck gives me Code word “Ameise”.
The 3 certs from the toniebox are in " /data/docker/teddyCloud/certs/client".
The “c2.der” file is on the box.
I changed the altUrl.305.json with my docker IP and I use this and “altCa.305.json” with the “ofw2” firmware slot.
What can I do?
Please post some more details, like logs of teddyCloud and your hackiebox-ng configuration including your modified patch.
Here is my “ngCfg.json”
{
"general": {
"activeImg": "ofw2",
"_descWaitForPress": "Waits for an earpress on startup",
"waitForPress": false,
"_descWaitForBoot": "Waits for an earpress before firmware boot",
"waitForBoot": false,
"waitTimeoutInS": 60,
"_descMinBatteryLevel": "Divide through 2785 to get voltage",
"minBatteryLevel": 8869,
"ofwFixFlash": "/sys/pre-img.bin",
"_descSerialLog": "Logging only works with the debug build!",
"serialLog": false,
"_descLogLevel": "0:Trace - 5:Fatal",
"logLevel": 0,
"_descLogColor": "Use colors in log output",
"logColor": false
},
"ofw1": {
"checkHash": false,
"hashFile": false,
"watchdog": true,
"bootFlashImg": true,
"flashImg": "/sys/pre-img.bin"
},
"ofw2": {
"checkHash": true,
"hashFile": false,
"watchdog": true,
"ofwFix": true,
"ofwSimBL": true,
"patches": ["noPrivacy.310", "altCa.305", "altUrl.305"]
},
And here the log from the docker:
2024-02-19 18:13:31 TeddyCloud v0.3.5 (8602da9) - 2024-01-22 13:39:05 +0000 linux-x86_64
2024-02-19 18:13:31
2024-02-19 18:13:31 INFO |settings.c:0659:settings_load_ovl| Load settings from /etc/teddycloud/config/config.overlay.ini
2024-02-19 18:13:31 INFO |settings.c:0659:settings_load_ovl| Load settings from /etc/teddycloud/config/config.ini
2024-02-19 18:13:31 INFO |tls_adapter.c:0208:read_certificate| File '/etc/teddycloud/certs/server/ca-root.pem' assumed PEM style
2024-02-19 18:13:31 INFO |tls_adapter.c:0205:read_certificate| File '/etc/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
2024-02-19 18:13:31 INFO |tls_adapter.c:0208:read_certificate| File '/etc/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
2024-02-19 18:13:31 INFO |tls_adapter.c:0205:read_certificate| File '/etc/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
2024-02-19 18:13:31 INFO |tls_adapter.c:0201:read_certificate| File '/etc/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
2024-02-19 18:13:31 INFO |tls_adapter.c:0201:read_certificate| File '/etc/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
2024-02-19 18:13:31 INFO |tls_adapter.c:0205:read_certificate| File '/etc/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
2024-02-19 18:13:31 INFO |settings.c:0659:settings_load_ovl| Load settings from /etc/teddycloud/config/config.overlay.ini
2024-02-19 18:13:31 INFO |tls_adapter.c:0394:tls_adapter_init| Loading certificates...
2024-02-19 18:13:31 INFO |tls_adapter.c:0208:read_certificate| File '/etc/teddycloud/certs/server/ca-root.pem' assumed PEM style
2024-02-19 18:13:31 INFO |tls_adapter.c:0205:read_certificate| File '/etc/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
2024-02-19 18:13:31 INFO |tls_adapter.c:0208:read_certificate| File '/etc/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
2024-02-19 18:13:31 INFO |tls_adapter.c:0205:read_certificate| File '/etc/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
2024-02-19 18:13:31 INFO |tls_adapter.c:0201:read_certificate| File '/etc/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
2024-02-19 18:13:31 INFO |tls_adapter.c:0201:read_certificate| File '/etc/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
2024-02-19 18:13:31 INFO |tls_adapter.c:0205:read_certificate| File '/etc/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
2024-02-19 18:13:31 INFO |toniesJson.c:0057:tonies_update| Updating tonies.json from GitHub...
2024-02-19 18:13:31 INFO |cloud_request.c:0158:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
2024-02-19 18:13:32 INFO |cloud_request.c:0208:web_request| trying IP: 185.199.108.133
2024-02-19 18:13:32 INFO |cloud_request.c:0036:httpClientTlsInitCallbackBase| Initializing TLS...
2024-02-19 18:13:32 cyclone/cyclone_crypto/cipher/aes.c:268:55: runtime error: left shift of 196 by 24 places cannot be represented in type 'int'
2024-02-19 18:13:32 cyclone/cyclone_crypto/cipher/aes.c:260:47: runtime error: left shift of 144 by 24 places cannot be represented in type 'int'
2024-02-19 18:13:32 cyclone/cyclone_crypto/cipher/aes.c:390:34: runtime error: left shift of 209 by 24 places cannot be represented in type 'int'
2024-02-19 18:13:32 cyclone/cyclone_crypto/cipher/aes.c:395:34: runtime error: left shift of 167 by 24 places cannot be represented in type 'int'
2024-02-19 18:13:32 INFO |cloud_request.c:0071:httpClientTlsInitCallbackBase| Initializing TLS done
2024-02-19 18:13:32 cyclone/cyclone_crypto/cipher/aes.c:385:34: runtime error: left shift of 128 by 24 places cannot be represented in type 'int'
2024-02-19 18:13:32 cyclone/cyclone_crypto/cipher/aes.c:400:34: runtime error: left shift of 173 by 24 places cannot be represented in type 'int'
2024-02-19 18:13:32 src/cyclone/cyclone_crypto/mpi.c:792:48: runtime error: left shift of 141 by 24 places cannot be represented in type 'int'
2024-02-19 18:13:32 INFO |cloud_request.c:0308:web_request| HTTP code: 200
2024-02-19 18:13:32 INFO |cloud_request.c:0339:web_request| Content-Type is text/plain; charset=utf-8
2024-02-19 18:13:33 INFO |cloud_request.c:0417:web_request| Connection closed
2024-02-19 18:13:33 INFO |toniesJson.c:0079:tonies_update| ... success updating tonies.json from GitHub, reloading
2024-02-19 18:13:33 INFO |toniesJson.c:0157:tonies_readJson| Trying to read /etc/teddycloud/config/tonies.custom.json with size 2
2024-02-19 18:13:33 INFO |toniesJson.c:0157:tonies_readJson| Trying to read /etc/teddycloud/config/tonies.json with size 2
And the modified patch “altUrl.305.json”:
{
"general": {
"_desc": "Changes Boxine URLs to custom ones.",
"_memPos": "",
"_fwVer": "3.0.5+"
},
"searchAndReplace": [{
"_desc": "prod.de.tbs.toys to 192.168.2.62",
"search": ["70", "72", "6f", "64", "2e", "64", "65", "2e", "74", "62", "73", "2e", "74", "6f", "79", "73", "00"],
"replace": ["70", "72", "6f", "64", "2e", "72", "65", "76", "76", "6f", "78", "00", "??", "??", "??", "??", "??"]
}, {
"_desc": "rtnl.bxcl.de to 192.168.2.62",
"search": ["72", "74", "6e", "6c", "2e", "62", "78", "63", "6c", "2e", "64", "65", "00"],
"replace": ["72", "74", "6e", "6c", "2e", "72", "65", "76", "76", "6f", "78", "00", "??"]
}]
}
“192.168.2.62” is the IP on which my docker is running.
Thanks for help.
You only changed the description of the patch, not the patch itself. It still uses the revvox domains.
Also see Configuring Toniebox for cloud connection (Custom ip patch)
Thanks, my mistake, here the new one:
{
"general": {
"_desc": "Changes Boxine URLs to custom ones.",
"_memPos": "",
"_fwVer": "3.0.5+"
},
"searchAndReplace": [{
"_desc": "prod.de.tbs.toys to 192.168.2.62",
"search": ["70", "72", "6f", "64", "2e", "64", "65", "2e", "74", "62", "73", "2e", "74", "6f", "79", "73", "00"],
"replace": ["31", "39", "32", "2e", "31", "36", "38", "2e", "32", "2e", "36", "32", "??", "??", "??", "??", "??"]
}, {
"_desc": "rtnl.bxcl.de to 192.168.2.62",
"search": ["72", "74", "6e", "6c", "2e", "62", "78", "63", "6c", "2e", "64", "65", "00"],
"replace": ["31", "39", "32", "2e", "31", "36", "38", "2e", "32", "2e", "36", "32", "??"]
}]
}
Now the code word is “Elefant” - “elephant”.
You forgot to terminate the urls/ips with 00 (for prod)
Ok, I corrected that too.
I restart the box, but the code word is still "elephant”. And I start the box again and again, sometime the codeword is “Schildkröte” - “tortoise”, funny.
Can you open https://192.168.2.62:443 ?
Is the toniebox in the right wifi. What does the log say on a freshnessCheck?
http://192.168.2.62:80 works.
I have only one wifi, if I use the “ofw1” Version, everything is ok.
Do you see any mistake?
I think you need the „Cloud enabled“ set to enabled.
Can you additionally try to
- open webinterface using https
- What does the log say on a freshnessCheck? (Can be checked in docker)
And try again please?
Ok, I set the “Cloud enabled”. Nothing changed.
If I do a freshnessCheck, there is nothing in the docker log. This is what I see in the docker log:
024-02-21 00:36:45 INFO |handler_cloud.c:0038:handleCloudTime| >> respond with current time
2024-02-21 00:36:45 INFO |mqtt.c:0684:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
This isn’t what I asked. I asked for https://192.168.2.62:443
What is the IP address of the toniebox?
Please check the UART output of the toniebox during boot and check if the patches are working fine.
If those are fine, check your network.
As alternative you may use the default patches and setup a DNS name for the prod.revvox and rtnl.revvox
Hallo, there is the UART output:
QO (▒72-▒3▒`FW2640c1f06 May 20:21 E▒3▒`J2640c1f42 (▒2EU_V3.1.0_BF2-0E▒3▒`J 3.1.0_BF2_EUE▒3▒`J2640c1f&$ (▒92YY :28▒(& (▒/2▒E▒3▒`J2640c1f (▒B25 ( 2 (▒A2
(▒2
(▒/2`
(#2
(▒82-+ ▒ (<2▒-+ ▒ (=2▒ r (▒C2▒! ▒ (▒/2\ ▒ (▒B`▒ ▒ (▒/2\ ▒ (▒/2`▒ 2%▒▒21DSD▒(▒7"u ▒ ▒ (▒5\ ▒ (▒9-▒z[ ▒/2\ ▒ (▒72 ▒ (▒@2EU ▒ (▒B2+) Y (▒2NoentryB0F208A92F39 Y (▒/▒" l! C2
▒!▒▒▒▒ ▒" (▒&2Ȏ; ▒# (▒&20w ▒$ (▒&2 ▒% (▒&2 N ▒& (▒&2▒ 78DB2FC9A02B▒&2▒▒, (▒/▒▒▒( (▒&M▒▒- (▒/▒ ▒. (▒/▒▒ 6/ (▒623 60 (▒225 3 ▒1 (B2 ▒▒▒▒▒&$ ▒2 (▒@2▒▒2 ▒3 (▒/▒ ▒4 (▒/▒ ▒5 (▒/▒▒ ▒ 6 (▒A2 ▒7 !(▒02▒8 !(▒02▒9 (▒2 ▒: (▒@31 ▒; (▒2192.168.2.62▒▒> ▒< (▒/▒▒ ▒= (▒02▒ ▒> (▒A2 ▒? #(▒02- ▒@ #(▒02- ▒A (▒A2 ▒B (▒72 ▒C (▒5`▒ D (▒2 ▒E (▒C86 ▒F (▒22"content/00000001/00000000%▒▒▒▒a ▒G (▒▒+▒X ▒ H (▒9%▒" ▒I (▒52
▒J (▒52 ▒K (▒5▒+▒X ▒L (▒C28*( M (▒C28@ eN (▒%2 f O (▒/P_-+ g P (Z2-+ ▒ Q (<2▒-+ ▒ R (=2▒
& ▒ S (▒0DB ▒ T (▒2.SPGET192.168.2.62▒/v1/ota/4?cv=34471936
U (▒2SP0FD o
V (▒20APGET192.168.2.62▒/v1/ota/5?cv=1669853893
W (▒2AP0FD ▒
X (▒20PDGET192. 168.2.62▒/v1/ota/2?cv=1622104430
Y (▒2PD0GE ▒
Z (▒21SFXGET192.168.2.6 2▒/v1/ota/6?cv=1534781997 9
[ (▒SFX0FD :
\ (▒20EUGET192.168.2.62▒/v1/ota/3?cv=1620325289
] (▒2EU0 ▒
^ (▒02 ▒
_ (▒2 ▒
` (▒/▒., ▒
a (▒A2▒ ▒
b (▒2 ▒
c (▒/▒▒31 ▒
d %(▒2192.168.2.62▒▒> ▒e (▒/2_ ▒f (▒B_ ▒j (▒/2_ ▒k %(▒/Qc" ▒ l %(▒:2
QQO ▒m(▒72-▒3▒`FW2640c1f06 May 20:21 E▒3▒`J2640c1f42 ▒n(▒2EU_V3.1.0_B 3.1.0_BF2_EUE▒3▒`J2640c1f&$▒2 ▒p (▒92YY mq (▒C2 nr (▒2 ▒s (▒52 ▒t (▒22%
' u (▒22 'v (▒/▒., 'w (▒A2▒ (x (▒2 (y (▒/▒▒ *z (▒N2 T{ (▒/▒▒ T| (▒02▒ T} (▒2" U~ (▒A2 #(▒02- ▒ #(▒02- ▒ (▒A2 V▒ (▒72 W▒ (▒52W ▒ (▒5` ▒ (▒%2 X▒ (▒2 X▒ (▒C97 h▒ (▒22"content/00000001/00000003I k ▒ (▒u▒▒W k▒ (▒9I#! l▒ (▒52
▒ (▒52 p▒ (▒5u▒▒W ▒ (▒C2d#! ▒▒ (▒C2
+) ▒▒ (▒C2$@ ▒ (▒%2 ▒ (▒C2 !▒ (▒2 ▒▒ (▒52 (▒22 k (▒22 k (▒/▒/- k (▒A2▒ l (▒2 l/▒▒ %2 V▒ (▒2 ▒ (▒2 V▒ (▒/▒▒ ▒ (▒A2 ▒ #(▒02, ▒ #(▒02, ▒ (▒A2 ▒ (▒A2 Z▒ !(▒02Z▒ (▒52 [▒ (▒5` [▒ !(▒02[▒ (▒5`▒ (▒A2 \▒ (▒2 (▒B2 ] ▒ (▒82 ▒ (▒27 ▒ (▒A2 ▒ ▒ !(▒02 ▒ !(▒02 ▒ (▒A2▒ ▒ (▒02 ▒%▒ (▒02▒%▒ $(▒A9 ▒%▒ $(▒A9 (▒A2 %▒ (▒297 ▒%▒ (▒2" content/c9629c12/500304e053 ▒%▒ (▒22content/c9629c12/500304e0 %▒ (▒2 % ▒ (▒2 %▒ (▒B2 ▒%▒ (▒B7 ▒%▒ (▒2 ▒%▒ (▒2 ▒%▒ (▒/▒/- ▒%▒ (▒A2▒ % ▒ (▒2 ▒%▒ (▒/▒▒
Is this ok?
I wanted the UART output from the bootloader, but what I see also contains the information I need. The patch for URL seems to be fine.
But there is either a problem within your network or the certificate. Please be sure teddyCloud is accessible, and you put the certificate into the right place on the flash.
As alternative, you may delete the server certificates and restart teddyCloud to regenerate them.