Problems when flashing, replacement CA certificates

Custom Firmware / Bootloader Hackiebox - CFW for CC3200 (V1, V2)
1

Hello everyone, I followed the instructions and am attaching the results. Unfortunately I can’t get the replacement CA certificate written on the box. The file is in my personal folder under Windows. When I download the certificate from the documentation I get a c2. The command says “cc3200tool -p COM3 write_file server/ca.der /cert/c2.der” does the certificate have to be renamed? Unfortunately I can’t get any further.

C:\Users\anselra>cc3200tool -p COM4 --reset dtr read_all_files ExtractedFromBox/ read_flash backup.bin
2025-01-21 10:42:08,130 -- Connecting to target...
2025-01-21 10:42:10,449 -- timed out while waiting for ack
2025-01-21 10:42:10,654 -- Connected, reading version...
2025-01-21 10:42:10,662 -- connected to target
2025-01-21 10:42:10,663 -- Version: CC3x00VersionInfo((0, 4, 1, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2025-01-21 10:42:10,663 -- This is a CC3200 device
2025-01-21 10:42:10,663 -- Switching to NWP bootloader...
2025-01-21 10:42:10,677 -- Switching UART to APPS...
2025-01-21 10:42:10,693 -- Resetting communications ...
2025-01-21 10:42:13,903 -- timed out while waiting for ack
2025-01-21 10:42:14,121 -- Uploading rbtl3100s.dll...
2025-01-21 10:42:14,121 -- Reading rbtl3100s.dll from file C:\Users\anselra\AppData\Local\Programs\Python\Python312\Lib\site-packages\cc3200tool\dll\rbtl3100s.dll
2025-01-21 10:42:14,139 -- Getting storage list...
2025-01-21 10:42:14,871 -- APPS version: CC3x00VersionInfo((0, 4, 0, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2025-01-21 10:42:14,872 -- Getting storage info...
2025-01-21 10:42:14,887 -- storage #2 info bytes: 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0
2025-01-21 10:42:14,888 -- Getting storage list...
2025-01-21 10:42:14,907 -- Reading raw storage #2 start 0x0, size 0x2000...
..
2025-01-21 10:42:15,036 -- [0] detected a valid FAT revision: 60
2025-01-21 10:42:15,039 -- [1] detected a valid FAT revision: 59
2025-01-21 10:42:15,040 -- Getting storage list...
2025-01-21 10:42:15,055 -- Reading raw storage #2 start 0x1774, size 0x2774...
...
2025-01-21 10:42:15,223 -- selected FAT revision: 60 (active)
2025-01-21 10:42:15,224 -- Serial Flash block size:     4096 bytes
2025-01-21 10:42:15,224 -- Serial Flash capacity:       1024 blocks
2025-01-21 10:42:15,224 --
2025-01-21 10:42:15,224 --      file    start   size    fail    flags   total   filename
2025-01-21 10:42:15,226 --      index   block   [BLKs]  safe    [BLKs]
2025-01-21 10:42:15,226 -- ----------------------------------------------------------------------------
2025-01-21 10:42:15,226 --      N/A     0       5       N/A     N/A     5       FATFS
2025-01-21 10:42:15,226 --      0       71      8       yes     0x0     16      /sys/mcuimg.bin
2025-01-21 10:42:15,227 --      4       105     1       no      0x4     1       /sys/mcubootinfo.bin
2025-01-21 10:42:15,227 --      6       106     53      yes     0x0     106     /sys/mcuimg1.bin
2025-01-21 10:42:15,227 --      7       212     53      no      0x4     53      /sys/mcuimg2.bin
2025-01-21 10:42:15,227 --      8       265     53      no      0x4     53      /sys/mcuimg3.bin
2025-01-21 10:42:15,227 --      9       408     5       yes     0x8     10      /tmp/phy.cal
2025-01-21 10:42:15,229 --      10      418     1       yes     0x8     2       /tmp/table.arp
2025-01-21 10:42:15,229 --      11      5       33      yes     0x8     66      /sys/servicepack.ucf
2025-01-21 10:42:15,229 --      12      87      1       yes     0x8     2       /sys/mode.cfg
2025-01-21 10:42:15,230 --      13      89      1       yes     0x8     2       /sys/ipcfg.ini
2025-01-21 10:42:15,230 --      14      91      1       yes     0x8     2       /sys/ap.cfg
2025-01-21 10:42:15,230 --      15      93      1       yes     0x8     2       /sys/devname.cfg
2025-01-21 10:42:15,231 --      16      95      1       yes     0x8     2       /sys/mdns.cfg
2025-01-21 10:42:15,231 --      17      97      2       yes     0x8     4       /sys/pref.net
2025-01-21 10:42:15,231 --      18      101     1       yes     0x8     2       /sys/stacfg.ini
2025-01-21 10:42:15,231 --      19      103     1       yes     0x8     2       /sys/pmcfg.ini
2025-01-21 10:42:15,232 --      20      318     40      yes     0x8     80      /www/index.html
2025-01-21 10:42:15,232 --      21      398     4       yes     0x8     8       /www/toniebox.js
2025-01-21 10:42:15,232 --      22      406     1       yes     0x8     2       /cert/ca.der
2025-01-21 10:42:15,233 --      23      931     1       yes     0x8     2       /sys/otastat.txt
2025-01-21 10:42:15,233 --      24      421     255     yes     0x8     510     /fw/sfx.bin
2025-01-21 10:42:15,233 --      26      933     1       yes     0x8     2
2025-01-21 10:42:15,234 --      27      420     1       no      0xc     1       /cert/client.der
2025-01-21 10:42:15,234 --      28      935     1       no      0xc     1       /cert/private.der
2025-01-21 10:42:15,234 --      29      936     1       yes     0x8     2       /settings.cfg
2025-01-21 10:42:15,235 --
2025-01-21 10:42:15,235 --    Flash usage
2025-01-21 10:42:15,235 -- -------------------------
2025-01-21 10:42:15,236 -- used space:  938 blocks
2025-01-21 10:42:15,236 -- free space:  86 blocks
2025-01-21 10:42:15,236 -- memory hole: [938-1023]
2025-01-21 10:42:15,237 -- Created local directory ExtractedFromBox/
2025-01-21 10:42:15,253 -- Reading file /sys/mcuimg.bin -> ExtractedFromBox/sys/mcuimg.bin
2025-01-21 10:42:15,659 -- Reading file /sys/mcuimg.bin -> C:\Users\anselra\AppData\Local\Temp\tmp8ob1ep2p
2025-01-21 10:42:16,066 -- File ExtractedFromBox/sys/mcuimg.bin verified
2025-01-21 10:42:16,082 -- Reading file /sys/mcubootinfo.bin -> ExtractedFromBox/sys/mcubootinfo.bin
2025-01-21 10:42:16,162 -- Reading file /sys/mcubootinfo.bin -> C:\Users\anselra\AppData\Local\Temp\tmpcagr1n2k
2025-01-21 10:42:16,236 -- File ExtractedFromBox/sys/mcubootinfo.bin verified
2025-01-21 10:42:16,240 -- Reading file /sys/mcuimg1.bin -> ExtractedFromBox/sys/mcuimg1.bin
2025-01-21 10:42:18,843 -- Reading file /sys/mcuimg1.bin -> C:\Users\anselra\AppData\Local\Temp\tmp1e7jzqsc
2025-01-21 10:42:21,448 -- File ExtractedFromBox/sys/mcuimg1.bin verified
2025-01-21 10:42:21,461 -- Reading file /sys/mcuimg2.bin -> ExtractedFromBox/sys/mcuimg2.bin
2025-01-21 10:42:24,090 -- Reading file /sys/mcuimg2.bin -> C:\Users\anselra\AppData\Local\Temp\tmpfwdt6w1s
2025-01-21 10:42:26,726 -- File ExtractedFromBox/sys/mcuimg2.bin verified
2025-01-21 10:42:26,739 -- Reading file /sys/mcuimg3.bin -> ExtractedFromBox/sys/mcuimg3.bin
2025-01-21 10:42:29,374 -- Reading file /sys/mcuimg3.bin -> C:\Users\anselra\AppData\Local\Temp\tmpslu57f46
2025-01-21 10:42:32,012 -- File ExtractedFromBox/sys/mcuimg3.bin verified
2025-01-21 10:42:32,021 -- Reading file /tmp/phy.cal -> ExtractedFromBox/tmp/phy.cal
2025-01-21 10:42:32,147 -- Reading file /tmp/phy.cal -> C:\Users\anselra\AppData\Local\Temp\tmpmefk40he
2025-01-21 10:42:32,285 -- File ExtractedFromBox/tmp/phy.cal verified
2025-01-21 10:42:32,304 -- Reading file /tmp/table.arp -> ExtractedFromBox/tmp/table.arp
2025-01-21 10:42:32,386 -- Reading file /tmp/table.arp -> C:\Users\anselra\AppData\Local\Temp\tmptdz7xm62
2025-01-21 10:42:32,470 -- File ExtractedFromBox/tmp/table.arp verified
2025-01-21 10:42:32,645 -- File /sys/servicepack.ucf could not be read, /sys/servicepack.ucf does not exist on target
2025-01-21 10:42:32,662 -- Reading file /sys/mode.cfg -> ExtractedFromBox/sys/mode.cfg
2025-01-21 10:42:32,743 -- Reading file /sys/mode.cfg -> C:\Users\anselra\AppData\Local\Temp\tmpubhc1ccw
2025-01-21 10:42:32,826 -- File ExtractedFromBox/sys/mode.cfg verified
2025-01-21 10:42:32,840 -- Reading file /sys/ipcfg.ini -> ExtractedFromBox/sys/ipcfg.ini
2025-01-21 10:42:32,921 -- Reading file /sys/ipcfg.ini -> C:\Users\anselra\AppData\Local\Temp\tmpg4p4qlle
2025-01-21 10:42:33,003 -- File ExtractedFromBox/sys/ipcfg.ini verified
2025-01-21 10:42:33,020 -- Reading file /sys/ap.cfg -> ExtractedFromBox/sys/ap.cfg
2025-01-21 10:42:33,102 -- Reading file /sys/ap.cfg -> C:\Users\anselra\AppData\Local\Temp\tmp0kql6yda
2025-01-21 10:42:33,177 -- File ExtractedFromBox/sys/ap.cfg verified
2025-01-21 10:42:33,183 -- Reading file /sys/devname.cfg -> ExtractedFromBox/sys/devname.cfg
2025-01-21 10:42:33,264 -- Reading file /sys/devname.cfg -> C:\Users\anselra\AppData\Local\Temp\tmp69fnfcn2
2025-01-21 10:42:33,337 -- File ExtractedFromBox/sys/devname.cfg verified
2025-01-21 10:42:33,345 -- Reading file /sys/mdns.cfg -> ExtractedFromBox/sys/mdns.cfg
2025-01-21 10:42:33,447 -- Reading file /sys/mdns.cfg -> C:\Users\anselra\AppData\Local\Temp\tmp_i6cfqy1
2025-01-21 10:42:33,566 -- File ExtractedFromBox/sys/mdns.cfg verified
2025-01-21 10:42:33,743 -- File /sys/pref.net could not be read, /sys/pref.net does not exist on target
2025-01-21 10:42:33,758 -- Reading file /sys/stacfg.ini -> ExtractedFromBox/sys/stacfg.ini
2025-01-21 10:42:33,840 -- Reading file /sys/stacfg.ini -> C:\Users\anselra\AppData\Local\Temp\tmpbbzhk4w2
2025-01-21 10:42:33,930 -- File ExtractedFromBox/sys/stacfg.ini verified
2025-01-21 10:42:33,936 -- Reading file /sys/pmcfg.ini -> ExtractedFromBox/sys/pmcfg.ini
2025-01-21 10:42:34,015 -- Reading file /sys/pmcfg.ini -> C:\Users\anselra\AppData\Local\Temp\tmpni67rncr
2025-01-21 10:42:34,097 -- File ExtractedFromBox/sys/pmcfg.ini verified
2025-01-21 10:42:34,111 -- Reading file /www/index.html -> ExtractedFromBox/www/index.html
2025-01-21 10:42:35,668 -- Reading file /www/index.html -> C:\Users\anselra\AppData\Local\Temp\tmpi9_8dkn3
2025-01-21 10:42:39,829 -- File ExtractedFromBox/www/index.html verified
2025-01-21 10:42:39,848 -- Reading file /www/toniebox.js -> ExtractedFromBox/www/toniebox.js
2025-01-21 10:42:39,939 -- Reading file /www/toniebox.js -> C:\Users\anselra\AppData\Local\Temp\tmpzue6akkn
2025-01-21 10:42:40,059 -- File ExtractedFromBox/www/toniebox.js verified
2025-01-21 10:42:40,078 -- Reading file /cert/ca.der -> ExtractedFromBox/cert/ca.der
2025-01-21 10:42:40,174 -- Reading file /cert/ca.der -> C:\Users\anselra\AppData\Local\Temp\tmpq8iqlj5h
2025-01-21 10:42:40,282 -- File ExtractedFromBox/cert/ca.der verified
2025-01-21 10:42:40,302 -- Reading file /sys/otastat.txt -> ExtractedFromBox/sys/otastat.txt
2025-01-21 10:42:40,385 -- Reading file /sys/otastat.txt -> C:\Users\anselra\AppData\Local\Temp\tmp5pz83fqf
2025-01-21 10:42:40,471 -- File ExtractedFromBox/sys/otastat.txt verified
2025-01-21 10:42:40,486 -- Reading file /fw/sfx.bin -> ExtractedFromBox/fw/sfx.bin
2025-01-21 10:42:54,287 -- Reading file /fw/sfx.bin -> C:\Users\anselra\AppData\Local\Temp\tmp4c7g5fiu
2025-01-21 10:43:08,094 -- File ExtractedFromBox/fw/sfx.bin verified
2025-01-21 10:43:08,094 -- Found file without filename, skipping index=26
2025-01-21 10:43:08,115 -- Reading file /cert/client.der -> ExtractedFromBox/cert/client.der
2025-01-21 10:43:08,206 -- Reading file /cert/client.der -> C:\Users\anselra\AppData\Local\Temp\tmpzi8cynro
2025-01-21 10:43:08,298 -- File ExtractedFromBox/cert/client.der verified
2025-01-21 10:43:08,313 -- Reading file /cert/private.der -> ExtractedFromBox/cert/private.der
2025-01-21 10:43:08,407 -- Reading file /cert/private.der -> C:\Users\anselra\AppData\Local\Temp\tmpk736qapz
2025-01-21 10:43:08,503 -- File ExtractedFromBox/cert/private.der verified
2025-01-21 10:43:08,533 -- Reading file /settings.cfg -> ExtractedFromBox/settings.cfg
2025-01-21 10:43:08,613 -- Reading file /settings.cfg -> C:\Users\anselra\AppData\Local\Temp\tmpuubwkahq
2025-01-21 10:43:08,691 -- File ExtractedFromBox/settings.cfg verified
2025-01-21 10:43:08,691 -- One or more files could not be verified or read at all

Preloader install

C:\Users\anselra>cc3200tool -p COM4 --reset dtr write_file flash/sys/mcuimg.bin /sys/mcuimg.bin
2025-01-24 15:52:48,479 -- Connecting to target...
2025-01-24 15:52:50,795 -- timed out while waiting for ack
2025-01-24 15:52:51,002 -- Connected, reading version...
2025-01-24 15:52:51,013 -- connected to target
2025-01-24 15:52:51,013 -- Version: CC3x00VersionInfo((0, 4, 1, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2025-01-24 15:52:51,014 -- This is a CC3200 device
2025-01-24 15:52:51,015 -- Switching to NWP bootloader...
2025-01-24 15:52:51,029 -- Switching UART to APPS...
2025-01-24 15:52:51,044 -- Resetting communications ...
2025-01-24 15:52:52,257 -- Uploading rbtl3100s.dll...
2025-01-24 15:52:52,258 -- Reading rbtl3100s.dll from file C:\Users\anselra\AppData\Local\Programs\Python\Python312\Lib\site-packages\cc3200tool\dll\rbtl3100s.dll
2025-01-24 15:52:52,276 -- Getting storage list...
2025-01-24 15:52:53,022 -- APPS version: CC3x00VersionInfo((0, 4, 0, 2), (0, 0, 0, 0), (0, 0, 0, 0), (0, 0, 0, 0), (16, 0, 0, 0))
2025-01-24 15:52:53,039 -- File exists on target, erasing
2025-01-24 15:52:53,054 -- Erasing file /sys/mcuimg.bin...
2025-01-24 15:52:53,230 -- Uploading file flash/sys/mcuimg.bin -> /sys/mcuimg.bin [15791, disk=15791]...
....
2025-01-24 15:52:54,027 -- Read file after writing for verification...
2025-01-24 15:52:54,043 -- Reading file /sys/mcuimg.bin -> C:\Users\anselra\AppData\Local\Temp\tmp9dardq4p
2025-01-24 15:52:54,340 -- File /sys/mcuimg.bin verified
2025-01-24 15:52:54,340 -- Getting storage info...
2025-01-24 15:52:54,355 -- storage #2 info bytes: 0x10, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0
2025-01-24 15:52:54,355 -- Getting storage list...
2025-01-24 15:52:54,373 -- Reading raw storage #2 start 0x0, size 0x2000...
..
2025-01-24 15:52:54,502 -- [1] detected a valid FAT revision: 79
2025-01-24 15:52:54,502 -- Getting storage list...
2025-01-24 15:52:54,520 -- Reading raw storage #2 start 0x1774, size 0x2774...
...
2025-01-24 15:52:54,688 -- selected FAT revision: 79 (active)
2025-01-24 15:52:54,688 -- FAT r79, num files: 26, used/free blocks: 932/92
2025-01-24 15:52:54,688 -- All commands done, bye.

image
image721×269 17.9 KB

CA-Ersatz for TeddyCloud flashen

C:\Users\anselra>cc3200tool -p COM4 --reset write_file server/ca.der /cert/c2.der
usage: cc3200tool.exe [-h] [-p PORT] [-if IMAGE_FILE] [-of OUTPUT_FILE] [--reset RESET] [--sop2 SOP2]
                      [--erase_timeout ERASE_TIMEOUT] [--reboot-to-app] [-d DEVICE]
                      {format_flash,erase_file,write_file,read_file,write_flash,read_flash,list_filesystem,read_all_files,write_all_files,dll_data_test}
                      ...
cc3200tool.exe: error: argument --reset: write_file not one of ['dtr', 'rts', 'none', 'prompt']

Unfortunately I couldn’t find anything about this message, can someone give me a tip

2

I’ll join in here, I have a similar problem. I can’t get the certificates out of the box. How do I know that the box started with CFW?

3

You missed give the right Pin after —reset

As the error message states.

You have to write after —reset dtr if you use the dtr pin for the reset.

1 Like
4

If the light pulses from one color to another color. That indicate the cfw.

5

How blind can I be? Thank you. However, nowhere in the instructions did I find the information that you have to rename the certificate to c2.der or I was blind

6

I thought that my box wasn’t starting the CFW. But why doesn’t it do that?
I copied the preloader as described above and copied the revvox folder to the SD card. I renamed my backup “mcuimg.bin” to “ng-ofw1.bin” and copied it to the “boot” subfolder.
If I start the box now, should it start in the CFW or not? Have I forgotten something?

7

No. You miss the ngcfg.json part. You must set cfw1 as bootimage/slot or so, default is ofw1 iirc. (First entry in the json)

1 Like
8

I have now got the CFW to work (the LED changes color all the time). I loaded the certificates using "cc3200tool -p COM3 --reset dtr read_all_files ./target_dir
“. But I still can’t see the box in my network.
I edited the “hackiebox.config.json” with my WiFi data. How can I still set up a WiFi connection? When I load the OFW1 and set up WiFi, the box always says the error " ANT (Ameise)”

so I can’t find it in the teddycloud either (without a WiFi connection)

9

Maybe this will help someone. My mistake was a WiFi password that was too long. It can be a maximum of 26 characters long.