Cc3200: Code Word ANT

DerBilly · July 27, 2024, 11:53pm

Hello dear forum,
I have a similar problem to the one described here:

When doing the freshnesscheck it gives me Code word “Ameise”

I have the following certificates:

root@docker:/data/docker/teddyCloud/certs/client# ls
ca.der  client.der  private.der

root@docker:/data/docker/teddyCloud/certs/server# ls
ca.der  ca-key.pem  ca-root.pem  teddy-cert.pem  teddy-key.pem

The “c2.der” file is on the box in

cc3200tool -p COM4 write_file ca.der /cert/c2.der

I have the following configuration:

{
    "general": {
        "activeImg": "ofw2",
        "_descWaitForPress": "Waits for an earpress on startup",
        "waitForPress": false,
        "_descWaitForBoot": "Waits for an earpress before firmware boot",
        "waitForBoot": false,
        "waitTimeoutInS": 60,
        "_descMinBatteryLevel": "Divide through 2785 to get voltage",
        "minBatteryLevel": 8869,
        "ofwFixFlash": "/sys/pre-img.bin",
        "_descSerialLog": "Logging only works with the debug build!",
        "serialLog": false,
        "_descLogLevel": "0:Trace - 5:Fatal",
        "logLevel": 0,
        "_descLogColor": "Use colors in log output",
        "logColor": false
    },
    "ofw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true,
        "bootFlashImg": true,
        "flashImg": "/sys/pre-img.bin"
    },
    "ofw2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": true,
        "patches": ["altCa.305", "altUrl.tc.fritz.box"]
    },
    "ofw3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "patches": ["altCa.305", "altUrl.tc.fritz.box"]
    },
    "cfw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw2": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw3": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "add1": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,        
        "patches": ["noPass3.310", "noPrivacy.305", "uidCheck.307"]
    },
    "add2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    },
    "add3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    }
}

I did not change the patch. I have a fritz.box and changed the name of my docker to “tc”.
I have a PiHole running and added the DNS-Entries:

When i start the docker compose i receive the following:

root@docker:/data/docker/teddyCloud# docker compose up
[+] Running 1/0
 ✔ Container teddycloud  Created                                                                                                                                                                                                                                                                                                    0.0s 
Attaching to teddycloud
teddycloud  | TeddyCloud vX.X.X (844ffa3) - 2024-07-27 00:45:42 +0200 ubuntu linux-x86_64(64)
teddycloud  | 
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.overlay.ini
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.ini
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.overlay.ini
teddycloud  | INFO |tls_adapter.c:0394:tls_adapter_init| Loading certificates...
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |toniesJson.c:0099:tonies_update| Updating tonies.json from api.revvox.de...
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server api.revvox.de:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 157.90.183.226
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:260:47: runtime error: left shift of 168 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:268:55: runtime error: left shift of 217 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:385:34: runtime error: left shift of 254 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:390:34: runtime error: left shift of 245 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:395:34: runtime error: left shift of 225 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:400:34: runtime error: left shift of 135 by 24 places cannot be represented in type 'int'
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | src/cyclone/cyclone_crypto/mpi.c:792:48: runtime error: left shift of 154 by 24 places cannot be represented in type 'int'
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 302
teddycloud  | INFO |cloud_request.c:0330:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonies.json
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 185.199.109.133
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 200
teddycloud  | INFO |cloud_request.c:0380:web_request| Content-Type is text/plain; charset=utf-8
teddycloud  | INFO |cloud_request.c:0458:web_request| Connection closed
teddycloud  | INFO |toniesJson.c:0123:tonies_update| ... success updating tonies.json from api.revvox.de, reloading
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |toniesJson.c:0210:tonieboxes_update| Updating tonies.json from api.revvox.de...
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server api.revvox.de:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 157.90.183.226
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 302
teddycloud  | INFO |cloud_request.c:0330:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonieboxes.json
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 185.199.108.133
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 200
teddycloud  | INFO |cloud_request.c:0380:web_request| Content-Type is text/plain; charset=utf-8
teddycloud  | INFO |cloud_request.c:0458:web_request| Connection closed
teddycloud  | INFO |toniesJson.c:0237:tonieboxes_update| ... success updating tonieboxes.json from api.revvox.de, reloading
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
teddycloud  | INFO |mqtt.c:0684:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
teddycloud  | INFO |cloud_request.c:0140:web_request| Cloud requests generally blocked in settings
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0140:web_request| Cloud requests generally blocked in settings
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0140:web_request| Cloud requests generally blocked in settings
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0140:web_request| Cloud requests generally blocked in settings
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0140:web_request| Cloud requests generally blocked in settings
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed

Do you have an idea what i am missing?
Thank you
DerBilly

henryk · July 28, 2024, 4:45am

The logs say what you have to do to solve the last messages.

Go to teddycloud settings and enable cloud.
Besides that, the log suggests teddycloud is running fine

But that would not help in your problem. It sounds like your toniebox does not yet connect to your teddycloud.

The log does not show any interaction with the box. You could also check the rtnl page on the new web gui if you see anything if you press the ears.

Can you reach the teddycloud using the tc.Fritz.box address in a browser?

If not - can you add the url to pihole and redirect it to the ip? Just for a test?

DerBilly · July 28, 2024, 7:21am

Thx for the fast reply

I can reach teddycloud using tc.fritz.box via browser. Also made a ping:

Pinging tc.fritz.box [192.168.178.70] with 32 bytes of data:
Reply from 192.168.178.70: bytes=32 time<1ms TTL=64
Reply from 192.168.178.70: bytes=32 time=1ms TTL=64
Reply from 192.168.178.70: bytes=32 time=1ms TTL=64
Reply from 192.168.178.70: bytes=32 time<1ms TTL=64

Ping statistics for 192.168.178.70:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 0ms, Maximum = 1ms, Average = 0ms

The rtnl page is also empty.

I enabled cloud. Now there is another Error=Unknown certificate authority [537].

root@docker:/data/docker/teddyCloud# docker compose up
[+] Running 1/0
 ✔ Container teddycloud  Created                                                                                                                                                                                                                                                                                                    0.0s 
Attaching to teddycloud
teddycloud  | TeddyCloud vX.X.X (844ffa3) - 2024-07-27 00:45:42 +0200 ubuntu linux-x86_64(64)
teddycloud  | 
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.overlay.ini
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.ini
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.overlay.ini
teddycloud  | INFO |tls_adapter.c:0394:tls_adapter_init| Loading certificates...
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |toniesJson.c:0099:tonies_update| Updating tonies.json from api.revvox.de...
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server api.revvox.de:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 157.90.183.226
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:260:47: runtime error: left shift of 165 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:268:55: runtime error: left shift of 247 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:395:34: runtime error: left shift of 145 by 24 places cannot be represented in type 'int'
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:400:34: runtime error: left shift of 226 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:385:34: runtime error: left shift of 208 by 24 places cannot be represented in type 'int'
teddycloud  | src/cyclone/cyclone_crypto/mpi.c:792:48: runtime error: left shift of 154 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:390:34: runtime error: left shift of 154 by 24 places cannot be represented in type 'int'
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 302
teddycloud  | INFO |cloud_request.c:0330:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonies.json
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 185.199.109.133
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 200
teddycloud  | INFO |cloud_request.c:0380:web_request| Content-Type is text/plain; charset=utf-8
teddycloud  | INFO |cloud_request.c:0458:web_request| Connection closed
teddycloud  | INFO |toniesJson.c:0123:tonies_update| ... success updating tonies.json from api.revvox.de, reloading
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |toniesJson.c:0210:tonieboxes_update| Updating tonies.json from api.revvox.de...
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server api.revvox.de:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 157.90.183.226
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 302
teddycloud  | INFO |cloud_request.c:0330:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonieboxes.json
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 185.199.110.133
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 200
teddycloud  | INFO |cloud_request.c:0380:web_request| Content-Type is text/plain; charset=utf-8
teddycloud  | INFO |cloud_request.c:0458:web_request| Connection closed
teddycloud  | INFO |toniesJson.c:0237:tonieboxes_update| ... success updating tonieboxes.json from api.revvox.de, reloading
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
teddycloud  | INFO |mqtt.c:0684:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 3.69.182.181
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | ERROR|cloud_request.c:0222:web_request| Failed to connect to HTTP server! Error=Unknown certificate authority [537]
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 18.156.186.144
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | ERROR|cloud_request.c:0222:web_request| Failed to connect to HTTP server! Error=Unknown certificate authority [537]
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 3.69.182.181
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | ERROR|cloud_request.c:0222:web_request| Failed to connect to HTTP server! Error=Unknown certificate authority [537]
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 3.74.99.150
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | ERROR|cloud_request.c:0222:web_request| Failed to connect to HTTP server! Error=Unknown certificate authority [537]
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 18.156.186.144
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | ERROR|cloud_request.c:0222:web_request| Failed to connect to HTTP server! Error=Unknown certificate authority [537]
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 3.69.182.181
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | ERROR|cloud_request.c:0222:web_request| Failed to connect to HTTP server! Error=Unknown certificate authority [537]
teddycloud  | ERROR|handler_reverse.c:0034:handleReverse| cloud_request_get() failed
teddycloud  | INFO |handler_sse.c:0045:handleApiSse| SSE Client connected in slot 0 in total 1 clients

I am really uncertain concerning the certificates.

First i followed this guide https://www.brazier85.de/tinkering/toniebox/
After that did not work, I tried it with the procedure here:
https://tonies-wiki.revvox.de/
I did not use Hackiebox CFW. I used the scp-approach and copied the sd-card-folder directly on the card like described in the first guide.

Possibly i messed something up there.

henryk · July 28, 2024, 10:08am

The error message with the authority sounds like you are using the teddycloud ca to access boxine. Please upload the right certificates to teddycloud (the original ca.der)

Maybe you can set the bootloader to select the slot on startup and ensure it’s started in the second one?

DerBilly · July 28, 2024, 11:27am

I replaced the ca.der with the one i backed up from the box.
Now it is the first time, i see the boxine green. Still i got another Error Message:

teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:496:35: runtime error: left shift of 184 by 24 places cannot be represented in type 'int'

root@docker:/data/docker/teddyCloud# docker compose up
[+] Running 2/2
 ✔ Network teddycloud_default  Created                                                                                              0.1s 
 ✔ Container teddycloud        Created                                                                                              0.1s 
Attaching to teddycloud
teddycloud  | TeddyCloud vX.X.X (844ffa3) - 2024-07-27 00:45:42 +0200 ubuntu linux-x86_64(64)
teddycloud  | 
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.overlay.ini
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.ini
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |settings.c:0779:settings_load_ovl| Load settings from /teddycloud/config/config.overlay.ini
teddycloud  | INFO |tls_adapter.c:0394:tls_adapter_init| Loading certificates...
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/ca-root.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/ca-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0208:read_certificate| File '/teddycloud/certs/server/teddy-cert.pem' assumed PEM style
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/server/teddy-key.pem' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/ca.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0201:read_certificate| File '/teddycloud/certs/client/client.der' detected as DER style CERTIFICATE
teddycloud  | INFO |tls_adapter.c:0205:read_certificate| File '/teddycloud/certs/client/private.der' detected as DER style RSA PRIVATE KEY
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |toniesJson.c:0099:tonies_update| Updating tonies.json from api.revvox.de...
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server api.revvox.de:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 157.90.183.226
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:260:47: runtime error: left shift of 148 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:268:55: runtime error: left shift of 177 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:390:34: runtime error: left shift of 148 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:395:34: runtime error: left shift of 202 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:400:34: runtime error: left shift of 211 by 24 places cannot be represented in type 'int'
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:385:34: runtime error: left shift of 132 by 24 places cannot be represented in type 'int'
teddycloud  | src/cyclone/cyclone_crypto/mpi.c:792:48: runtime error: left shift of 154 by 24 places cannot be represented in type 'int'
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 302
teddycloud  | INFO |cloud_request.c:0330:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonies.json
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 185.199.109.133
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 200
teddycloud  | INFO |cloud_request.c:0380:web_request| Content-Type is text/plain; charset=utf-8
teddycloud  | INFO |cloud_request.c:0458:web_request| Connection closed
teddycloud  | INFO |toniesJson.c:0123:tonies_update| ... success updating tonies.json from api.revvox.de, reloading
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |toniesJson.c:0210:tonieboxes_update| Updating tonies.json from api.revvox.de...
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server api.revvox.de:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 157.90.183.226
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 302
teddycloud  | INFO |cloud_request.c:0330:web_request| Redirecting to: https://raw.githubusercontent.com/toniebox-reverse-engineering/tonies-json/release/tonieboxes.json
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server raw.githubusercontent.com:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 185.199.110.133
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 200
teddycloud  | INFO |cloud_request.c:0380:web_request| Content-Type is text/plain; charset=utf-8
teddycloud  | INFO |cloud_request.c:0458:web_request| Connection closed
teddycloud  | INFO |toniesJson.c:0237:tonieboxes_update| ... success updating tonieboxes.json from api.revvox.de, reloading
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.custom.json with size 2
teddycloud  | INFO |toniesJson.c:0279:tonies_readJson| Trying to read /teddycloud/config/tonies.json with size 4868258
teddycloud  | INFO |handler_cloud.c:0041:handleCloudTime|  >> respond with current time
teddycloud  | INFO |mqtt.c:0684:mqtt_init_box| Skipping client 'Toniebox' (cn: 'default')
teddycloud  | INFO |cloud_request.c:0162:web_request| Connecting to HTTP server prod.de.tbs.toys:443...
teddycloud  | INFO |cloud_request.c:0212:web_request|   trying IP: 18.156.186.144
teddycloud  | INFO |cloud_request.c:0038:httpClientTlsInitCallbackBase| Initializing TLS...
teddycloud  | INFO |cloud_request.c:0073:httpClientTlsInitCallbackBase| Initializing TLS done
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:511:35: runtime error: left shift of 186 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:496:35: runtime error: left shift of 184 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:501:35: runtime error: left shift of 197 by 24 places cannot be represented in type 'int'
teddycloud  | cyclone/cyclone_crypto/cipher/aes.c:506:35: runtime error: left shift of 244 by 24 places cannot be represented in type 'int'
teddycloud  | INFO |cloud_request.c:0317:web_request| HTTP code: 200
teddycloud  | INFO |handler.c:0224:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: Server = openresty
teddycloud  | INFO |handler.c:0224:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: Date = Sun, 28 Jul 2024 11:13:23 GMT
teddycloud  | INFO |handler.c:0224:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: Content-Type = text/plain; charset=utf-8
teddycloud  | INFO |cloud_request.c:0380:web_request| Content-Type is text/plain; charset=utf-8
teddycloud  | INFO |handler.c:0224:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: Content-Length = 10
teddycloud  | INFO |handler.c:0224:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: Connection = keep-alive
teddycloud  | INFO |handler.c:0224:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: cache-control = max-age=0, private, must-revalidate
teddycloud  | INFO |handler.c:0224:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: x-request-id = F-ZcILzaUv4GVzbwO88R
teddycloud  | INFO |handler.c:0230:cbrCloudHeaderPassthrough| >> cbrCloudHeaderPassthrough: NULL
teddycloud  | INFO |cloud_request.c:0427:web_request| Response: '1722165203'
teddycloud  | INFO |handler.c:0403:cbrCloudServerDiscoPassthrough| >> cbrCloudServerDiscoPassthrough
teddycloud  | INFO |cloud_request.c:0458:web_request| Connection closed
teddycloud  | INFO |handler_reverse.c:0038:handleReverse| httpServerRequestCallback: (waiting)
teddycloud  | INFO |handler_reverse.c:0045:handleReverse| httpServerRequestCallback: (done)
teddycloud  | INFO |handler_sse.c:0045:handleApiSse| SSE Client connected in slot 0 in total 1 clients

MySD-Card currently looks like this:

Maybe you can set the bootloader to select the slot on startup and ensure it’s started in the second one?

I do not get, what you mean. Can you give me a short explanation?

So current status:

teddycloud seems to work
There is no connection from the box – Codeword Ant

henryk · July 28, 2024, 11:54am

The error messages are kind of „normal“. Since your teddycloud now shows a green boxine, it should be fine.

In the config of the bootloader is an option where you can set some things for the start process. The entry’s should be selfexplaining through their comments.

https://tonies-wiki.revvox.de/docs/custom-firmware/cc3200/hackieboxng-bl/bootloader/#bootloader-stage-2 And here after the image.

DerBilly · July 28, 2024, 8:51pm

Thank you for your time.
I do not get it working and do not see a solution.

Just tried to reset in order to be able to use the box regularly via

cc3200tool -p COM4 --reset dtr read_all_files backup/ read_flash backup.bin

Now the Box is just flashing fast blue for a second. when starting. Is there more i need to do in order to reset the box?

Just for information:
I bought a special new edition and hoped it would be esp-based.

It is made in China but CC3200 based.

Best regards
Billy

henryk · July 29, 2024, 4:25am

You could also just start slot 1 with the unpatched original firmware.

The command you named just reads the current flash. It does not write anything on your box.

Please follow the guide step by step. Installation | Toniebox Hacking

For now, change in your bootloader config the default slot to ofw1. Then it should start with the unpatched original firmware. (I assume you backed up the ofw and placed it in the right folder on the sd card?)

DerBilly · July 29, 2024, 8:35am

Ok. Maybe we can try it step by step and we see what i am missing.
First of all i created the backup and have the following files:

C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\cert
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\fw
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\settings.cfg
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\tmp
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\www
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\cert\c2.der
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\cert\ca.der
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\cert\client.der
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\cert\private.der
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\fw\sfx.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\ap.cfg
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\date_time.cfg
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\devname.cfg
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\ipcfg.ini
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\mcubootinfo.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\mcuimg.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\mcuimg1.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\mcuimg2.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\mcuimg3.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\mdns.cfg
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\mode.cfg
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\otastat.txt
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\pmcfg.ini
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\pre-img.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\pref.net
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\servicepack.ucf
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\sys\stacfg.ini
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\tmp\phy.cal
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\tmp\table.arp
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\www\index.html
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\boxBackup\backup\www\toniebox.js

First I copy the backed up mcuimg.bin and rename it to pre-img.bin. Then I move it to flash/sys/.
then I take the mcuimg.bin from the backup and write it to /sys/pre-img.bin:

C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\hbng-bootloader.release_v0.9.3c>cc3200tool -p COM4 write_file
 mcuimg.bin /sys/pre-img.bin
2024-07-29 09:54:58,368 -- Connecting to target...
2024-07-29 09:54:58,582 -- Connected, reading version...
2024-07-29 09:54:58,587 -- connected to target
2024-07-29 09:54:58,587 -- Version: CC3x00VersionInfo((0, 4, 1, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2024-07-29 09:54:58,587 -- This is a CC3200 device
2024-07-29 09:54:58,587 -- Switching to NWP bootloader...
2024-07-29 09:54:58,587 -- Switching UART to APPS...
2024-07-29 09:54:58,587 -- Resetting communications ...
2024-07-29 09:55:01,807 -- timed out while waiting for ack
2024-07-29 09:55:04,011 -- timed out while waiting for ack
2024-07-29 09:55:06,229 -- timed out while waiting for ack
2024-07-29 09:55:06,433 -- Uploading rbtl3100s.dll...
2024-07-29 09:55:06,433 -- Getting storage list...
2024-07-29 09:55:07,167 -- APPS version: CC3x00VersionInfo((0, 4, 0, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2024-07-29 09:55:07,167 -- File exists on target, erasing
2024-07-29 09:55:07,183 -- Erasing file /sys/pre-img.bin...
2024-07-29 09:55:07,292 -- Uploading file mcuimg.bin -> /sys/pre-img.bin [15791, disk=15791]...
....
2024-07-29 09:55:07,855 -- Getting storage info...
2024-07-29 09:55:07,855 -- storage #2 info bytes: 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0
2024-07-29 09:55:07,855 -- Getting storage list...
2024-07-29 09:55:07,855 -- Reading raw storage #2 start 0x0, size 0x2000...
..
2024-07-29 09:55:07,948 -- [1] detected a valid FAT revision: 109
2024-07-29 09:55:07,948 -- Getting storage list...
2024-07-29 09:55:07,964 -- Reading raw storage #2 start 0x1774, size 0x2774...
...
2024-07-29 09:55:08,089 -- selected FAT revision: 109 (active)
2024-07-29 09:55:08,089 -- FAT r109, num files: 27, used/free blocks: 931/93
2024-07-29 09:55:08,089 -- All commands done, bye.

Then I install the preloader:

C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\hbng-bootloader.release_v0.9.3c>cc3200tool -p COM4 write_file
 flash/sys/mcuimg.bin /sys/mcuimg.bin
2024-07-29 09:59:07,530 -- Connecting to target...
2024-07-29 09:59:07,740 -- Connected, reading version...
2024-07-29 09:59:07,740 -- connected to target
2024-07-29 09:59:07,740 -- Version: CC3x00VersionInfo((0, 4, 1, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2024-07-29 09:59:07,740 -- This is a CC3200 device
2024-07-29 09:59:07,740 -- Switching to NWP bootloader...
2024-07-29 09:59:07,749 -- Switching UART to APPS...
2024-07-29 09:59:07,749 -- Resetting communications ...
2024-07-29 09:59:08,956 -- Uploading rbtl3100s.dll...
2024-07-29 09:59:08,956 -- Getting storage list...
2024-07-29 09:59:09,703 -- APPS version: CC3x00VersionInfo((0, 4, 0, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2024-07-29 09:59:09,719 -- File exists on target, erasing
2024-07-29 09:59:09,719 -- Erasing file /sys/mcuimg.bin...
2024-07-29 09:59:09,828 -- Uploading file flash/sys/mcuimg.bin -> /sys/mcuimg.bin [15791, disk=15791]...
....
2024-07-29 09:59:10,390 -- Getting storage info...
2024-07-29 09:59:10,390 -- storage #2 info bytes: 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0
2024-07-29 09:59:10,390 -- Getting storage list...
2024-07-29 09:59:10,390 -- Reading raw storage #2 start 0x0, size 0x2000...
..
2024-07-29 09:59:10,500 -- [1] detected a valid FAT revision: 111
2024-07-29 09:59:10,500 -- Getting storage list...
2024-07-29 09:59:10,500 -- Reading raw storage #2 start 0x1774, size 0x2774...
...
2024-07-29 09:59:10,625 -- selected FAT revision: 111 (active)
2024-07-29 09:59:10,625 -- FAT r111, num files: 27, used/free blocks: 931/93
2024-07-29 09:59:10,625 -- All commands done, bye.

Stage 2: Installing the Bootloader

I copy the whole SD-Card Folder to the SD Card. Then I copy the backed up mcuimg.bin rename it to ng-ofw1.bin and move it to the boot directory. This is a step i did not do before.

Now I have the following files on the SD-Card:

C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump>dir /s /b
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\TRASHCAN
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\76045C1D
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000000
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000001
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000002
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000003
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000006
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000007
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000008
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000009
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\0000000A
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\0000000B
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\0000000D
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\0000000E
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\0000000F
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000010
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000011
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000012
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000013
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000014
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000015
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000016
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000017
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000000\00000018
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000000
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000001
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000002
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000003
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000004
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000005
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000006
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000007
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000008
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000009
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\0000000A
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\0000000B
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\0000000C
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\0000000D
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\0000000E
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\0000000F
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000010
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000011
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000012
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000013
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000014
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000015
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000016
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000017
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000001\00000018
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000000
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000001
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000002
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000003
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000006
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000007
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000008
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000009
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\0000000A
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\0000000B
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\0000000D
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\0000000E
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\0000000F
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000010
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000011
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000012
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000013
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000014
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000015
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000016
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000017
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000002\00000018
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000000
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000001
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000002
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000003
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000006
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000007
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000008
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000009
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\0000000A
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\0000000B
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\0000000D
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\0000000E
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\0000000F
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000010
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000011
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000012
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000013
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000014
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000015
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000016
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000017
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\00000003\00000018
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\CONTENT\76045C1D\500304E0
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\ng-ofw1.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\ngbootloader.bin
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\ngCfg.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\altCa.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\altUrl.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\altUrl.tc.fritz.box.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\alwaysUnhide.308.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\blockCheck.307.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\blockCheck.310.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\blockCheckRemove.308.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\blockCheckRemove.310.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\enableWeb.308.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\enableWeb.310.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\enableWeb.dev.310.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\hwtest.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noCerts.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noChargWake.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noHide.308.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noHideA.308.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noPass.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noPass2.308.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noPass3.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noPass3.310.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noPrivacy.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\noPrivacy.310.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\secondPwZero.305.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\swd.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\revvox\boot\patch\uidCheck.307.json
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\TRASHCAN\050
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\TRASHCAN\060
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\TRASHCAN\050\66A51A00.000
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\TRASHCAN\060\66A51A06.000
C:\Users\jakob\OneDrive\PARA\2 Areas\Homeserver\Teddycloud\SD_Card_Dump\TRASHCAN\060\66A51A11.000

In the ngCfg.json I change the “activeImg” to “ofw2”:

{
    "general": {
        "activeImg": "ofw2",
        "_descWaitForPress": "Waits for an earpress on startup",
        "waitForPress": false,
        "_descWaitForBoot": "Waits for an earpress before firmware boot",
        "waitForBoot": false,
        "waitTimeoutInS": 60,
        "_descMinBatteryLevel": "Divide through 2785 to get voltage",
        "minBatteryLevel": 8869,
        "ofwFixFlash": "/sys/pre-img.bin",
        "_descSerialLog": "Logging only works with the debug build!",
        "serialLog": false,
        "_descLogLevel": "0:Trace - 5:Fatal",
        "logLevel": 0,
        "_descLogColor": "Use colors in log output",
        "logColor": false
    },
    "ofw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true,
        "bootFlashImg": true,
        "flashImg": "/sys/pre-img.bin"
    },
    "ofw2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": true,
        "patches": ["altCa.305", "altUrl.tc.fritz.box"]
    },
    "ofw3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "patches": ["altCa.305", "altUrl.tc.fritz.box"]
    },
    "cfw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw2": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw3": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "add1": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,        
        "patches": ["blockCheck.310", "noCerts.305", "noPass3.310", "noPrivacy.305", "uidCheck.307"]
    },
    "add2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    },
    "add3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    }
}

When i start the box now, it gives me a short welcome sound. Then the green light is on. The freshnesscheck gives me Codeword Ant.

Then I start it again, pressing the big ear. Then the green light is flashing two times again and again. I press the small ear and it is flashing one time again and again. Then i let go the big ear- the box starts again and the green light is on.
freshnesscheck gives me Codeword Ant.

Now i go back to ofw1:

{
    "general": {
        "activeImg": "ofw1",
        "_descWaitForPress": "Waits for an earpress on startup",
        "waitForPress": false,
        "_descWaitForBoot": "Waits for an earpress before firmware boot",
        "waitForBoot": false,
        "waitTimeoutInS": 60,
        "_descMinBatteryLevel": "Divide through 2785 to get voltage",
        "minBatteryLevel": 8869,
        "ofwFixFlash": "/sys/pre-img.bin",
        "_descSerialLog": "Logging only works with the debug build!",
        "serialLog": false,
        "_descLogLevel": "0:Trace - 5:Fatal",
        "logLevel": 0,
        "_descLogColor": "Use colors in log output",
        "logColor": false
    },
    "ofw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true,
        "bootFlashImg": true,
        "flashImg": "/sys/pre-img.bin"
    },
    "ofw2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": true,
        "patches": ["altCa.305", "altUrl.tc.fritz.box"]
    },
    "ofw3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "patches": ["altCa.305", "altUrl.tc.fritz.box"]
    },
    "cfw1": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw2": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "cfw3": {
        "checkHash": false,
        "hashFile": false,
        "watchdog": true
    },
    "add1": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,        
        "patches": ["blockCheck.310", "noCerts.305", "noPass3.310", "noPrivacy.305", "uidCheck.307"]
    },
    "add2": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    },
    "add3": {
        "checkHash": true,
        "hashFile": false,
        "watchdog": true,
        "ofwFix": true,
        "ofwSimBL": false,
        "patches": ["altCa.305", "altUrl.305"]
    }
}

When i plug it in again, there is one second green light. Then the green light is nearly not blinking. you can only see it on the circuit board looking really close. Holding the big ear, it is blinking green. Holding the small ear, it is constantly green.

Then I start it again, pressing the big ear. Then the green light is flashing two times again and again. I press the small ear and it is flashing one time again and again. Then i let go the big ear- the box starts again and the green light is on. Now the startsound plays again.
freshnesscheck gives me Codeword Ant.

Does that mean, that my ofw-file is wrong?

henryk · July 29, 2024, 9:51am

had you checked the doc? There are some error codes which are represented through the blinking lights.

DerBilly · July 29, 2024, 10:58am

Do you have a specific doc in mind?
I find that there are the error-codes, that the box tells you:
https://support.tonies.com/hc/en-us/sections/202412985-Error-Messages
Right now, the box just is green for one second and then there is no light at all. There is also no sound playing.

henryk · July 29, 2024, 11:01am

This one…

DerBilly · July 29, 2024, 3:32pm

Thank you for your answers even if my questions appear stupid to you. When reading your answers I am also thinking I am kind of dumb.
As I said i hoped to get an esp-version which i imagine would have been easier. As I got the CC3200 I wanted to give it a try and now I realize that this is a bit too high for me.

I just made a hard Reset to the Box (plug in, turn upside down, press both ears 10 seconds) but also get the codewort ant when trying to connect to my wifi or other wifis.

Is there a way to completely reset the box?

henryk · July 29, 2024, 3:56pm

Don’t give up

You should restart the process beginning with installing the custom bootloader (I assume you already backed up all files) and follow the doc step by step. If something after a step is not like the doc describes, come back to the telegram group. There you may get real time support

0xbadbee · July 29, 2024, 4:50pm

Your problem is not related to esp32 or cc3200. The ESP32 variant wouldn’t have helped here. The bootloader is working fine.

It looks like you forgot to describe the c2.der in your latest writeup. You also did this?

First check if you are able to reach tc.fritz.box
Please remove those .revvox DNS entries, you don’t need them if you are using your fritzbox.
Be sure the toniebox is able to resolve the TC.fritz.box and is connected to the right wifi.
Adding this to your DNS server may help (depending on your configuration)

PS:
For the cc3200 you can always boot ofw1 to have a fully working box again.

0xbadbee · July 30, 2024, 12:19pm

A post was split to a new topic: CC3200 - trouble

DerBilly · August 5, 2024, 9:39am

So a final answer to close this topic.

I have just got it up and running. I made two mistakes during the initial installation, which meant that troubleshooting was not so easy.

I did not update the box properly before installing the HackieboxNG bootloader. This probably meant that the HackieboxNG bootloader did not work as desired.

During the movement of the original bootloader I swapped the bootloaders and replaced the original bootloader with the HackieboxNG bootloader in the backup right at the beginning without knowing it.

image787×306 42.5 KB

In the end, I was able to restore the original bootloader via my Onedrive. Then I carried out all the steps according to the instructions. Then I started the box with OFW1 so that it could update. After the update, OFW2 also worked.

Thanks to henryk and 0xbadbee for your patience and support