SUPL message from supl.nokia.com

[dovewu]

Hi all. I am testing supl agent with supl server of nokia. I want to try to use N958G to test first, and I captured some packets. The first one is from N95 to nokia supl server, and the second one is from nokia supl server. I tried to decode them with per encoding but the results seems not correct. Any one has the same experience?

First one:
from N95 to nokia supl server:

16 03 00 00 45 01 00 00 41 03 01 48 29 89 ee 91
03 de b1 6a a1 ba 1c 62 cf 16 cc a4 0c c7 32 ba
94 a8 2b 8d 56 7a fd fd df cc e8 00 00 1a 00 35
00 2f 00 0a 00 16 00 13 00 05 00 04 00 09 00 12
00 08 00 03 00 11 00 14 01 00

try decoding as:
ULP-PDU SEQUENCE
{
length INTEGER = 5635
version Version
{
maj INTEGER = 0
min INTEGER = 0
servind INTEGER = 69
}
sessionID SessionID
message UlpMessage
{
msSUPLINIT SUPLINIT
{
posMethod PosMethod = agpsSETassisted(0)
notification Notification
{
notificationType NotificationType = notificationAndVerficationAllowedNA(2)
}
sLPMode SLPMode = proxy(0)
}
}
}

The Second one:
from nokia server to N95

0030 16 03 01 00 4a 02 00 00 46 03 ........ ..J...F.
0040 01 48 29 bd e7 5f 20 ce de 1e cd 45 68 0b 2a 5e .H).._ . ...Eh.*^
0050 be 01 64 dd ce ac a1 1c 3b 04 44 b6 d3 39 a3 03 ..d..... ;.D..9..
0060 82 20 c3 8d a8 cc 9f 21 e9 7c ca 3f f4 47 6e fe . .....! .|.?.Gn.
0070 ae e1 4e 5e 19 46 6f 22 dc 00 70 d1 a8 6d 10 dc ..N^.Fo" ..p..m..
0080 85 fe 00 35 00 16 03 01 07 ec 0b 00 07 e8 00 07 ...5.... ........
0090 e5 00 04 58 30 82 04 54 30 82 03 bd a0 03 02 01 ...X0..T 0.......
00a0 02 02 10 29 f4 06 74 53 cc fe ce 8d 7e 6c 13 87 ...)..tS ....~l..
00b0 e6 58 a2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 .X.0...* .H......
00c0 05 00 30 81 ba 31 1f 30 1d 06 03 55 04 0a 13 16 ..0..1.0 ...U....
00d0 56 65 72 69 53 69 67 6e 20 54 72 75 73 74 20 4e VeriSign Trust N
00e0 65 74 77 6f 72 6b 31 17 30 15 06 03 55 04 0b 13 etwork1. 0...U...
00f0 0e 56 65 72 69 53 69 67 6e 2c 20 49 6e 63 2e 31 .VeriSig n, Inc.1
0100 33 30 31 06 03 55 04 0b 13 2a 56 65 72 69 53 69 301..U.. .*VeriSi
0110 67 6e 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c gn Inter national
0120 20 53 65 72 76 65 72 20 43 41 20 2d 20 43 6c 61 Server CA - Cla
0130 73 73 20 33 31 49 30 47 06 03 55 04 0b 13 40 77 ss 31I0G ..U...@w
0140 77 77 2e 76 65 72 69 73 69 67 6e 2e 63 6f 6d 2f ww.veris ign.com/
0150 43 50 53 20 49 6e 63 6f 72 70 2e 62 79 20 52 65 CPS Inco rp.by Re
0160 66 2e 20 4c 49 41 42 49 4c 49 54 59 20 4c 54 44 f. LIABI LITY LTD
0170 2e 28 63 29 39 37 20 56 65 72 69 53 69 67 6e 30 .(c)97 V eriSign0
0180 1e 17 0d 30 37 30 34 32 36 30 30 30 30 30 30 5a ...07042 6000000Z
0190 17 0d 30 39 30 34 32 35 32 33 35 39 35 39 5a 30 ..090425 235959Z0

[doug_arro]

Just curious. How were you able to get through the SUPL security on this phone? I couldn't even establish a TLS handshake with supl.nokia.com. Any tip you would like to share?

Thanks.

da

[dovewu]

You are right. It seems I can't get through the TLS handshake right now. But it seems workable using N95 to supl.nokia.com. That's why I want to capture the packets.

[doug_arro]

Then we are in the same boat and I can tell you what went wrong here. See the first 3 bytes from the N95 to supl.nokia.com in the message you obtained:

16 03 00

They are the first 3 bytes of the TLS "ClientHello" header, meaning:

16 -- Handshake
03 -- SSL/TLS Major version 3
00 -- SSL/TLS Minor version 0 (this tells you that the terminal can support at least SSLv3 handshake)

The 2nd message you captured from Nokia is a ServerHello message, in which the server specified to client to use TLSv1 protocol.

The SUPL messaging will not start to flow until a successful TLS handshake has been completed.

Good luck with your adventure.

da

[bierbo]

hi folks,

i am working currently on a free implementation on the SUPL-specification. if you want to help me, my project is located on jsupl.sf.net, you can find the wiki at jsupl.wiki.sourceforge.net .

one of the modules should be a proxy for reverse engineering the protocol. so, if you want to help me, feel free to contact me.


regards, lukas

[sandymn]

Hi,,,

How were you able to get what message is being sent by the mobile phone to nokia server. I am trying to implement a supl server and use Nokia 5800 Xpressmusic phone for this purpose. Cal you please tell me how were you able to get the initial message from the cell phone. Thanks a lot.

Hi all. I am testing supl agent with supl server of nokia. I want to try to use N958G to test first, and I captured some packets. The first one is from N95 to nokia supl server, and the second one is from nokia supl server. I tried to decode them with per encoding but the results seems not correct. Any one has the same experience?

First one:
from N95 to nokia supl server:

16 03 00 00 45 01 00 00 41 03 01 48 29 89 ee 91
03 de b1 6a a1 ba 1c 62 cf 16 cc a4 0c c7 32 ba
94 a8 2b 8d 56 7a fd fd df cc e8 00 00 1a 00 35
00 2f 00 0a 00 16 00 13 00 05 00 04 00 09 00 12
00 08 00 03 00 11 00 14 01 00

try decoding as:
ULP-PDU SEQUENCE
{
length INTEGER = 5635
version Version
{
maj INTEGER = 0
min INTEGER = 0
servind INTEGER = 69
}
sessionID SessionID
message UlpMessage
{
msSUPLINIT SUPLINIT
{
posMethod PosMethod = agpsSETassisted(0)
notification Notification
{
notificationType NotificationType = notificationAndVerficationAllowedNA(2)
}
sLPMode SLPMode = proxy(0)
}
}
}

The Second one:
from nokia server to N95

0030 16 03 01 00 4a 02 00 00 46 03 ........ ..J...F.
0040 01 48 29 bd e7 5f 20 ce de 1e cd 45 68 0b 2a 5e .H).._ . ...Eh.*^
0050 be 01 64 dd ce ac a1 1c 3b 04 44 b6 d3 39 a3 03 ..d..... ;.D..9..
0060 82 20 c3 8d a8 cc 9f 21 e9 7c ca 3f f4 47 6e fe . .....! .|.?.Gn.
0070 ae e1 4e 5e 19 46 6f 22 dc 00 70 d1 a8 6d 10 dc ..N^.Fo" ..p..m..
0080 85 fe 00 35 00 16 03 01 07 ec 0b 00 07 e8 00 07 ...5.... ........
0090 e5 00 04 58 30 82 04 54 30 82 03 bd a0 03 02 01 ...X0..T 0.......
00a0 02 02 10 29 f4 06 74 53 cc fe ce 8d 7e 6c 13 87 ...)..tS ....~l..
00b0 e6 58 a2 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 .X.0...* .H......
00c0 05 00 30 81 ba 31 1f 30 1d 06 03 55 04 0a 13 16 ..0..1.0 ...U....
00d0 56 65 72 69 53 69 67 6e 20 54 72 75 73 74 20 4e VeriSign Trust N
00e0 65 74 77 6f 72 6b 31 17 30 15 06 03 55 04 0b 13 etwork1. 0...U...
00f0 0e 56 65 72 69 53 69 67 6e 2c 20 49 6e 63 2e 31 .VeriSig n, Inc.1
0100 33 30 31 06 03 55 04 0b 13 2a 56 65 72 69 53 69 301..U.. .*VeriSi
0110 67 6e 20 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c gn Inter national
0120 20 53 65 72 76 65 72 20 43 41 20 2d 20 43 6c 61 Server CA - Cla
0130 73 73 20 33 31 49 30 47 06 03 55 04 0b 13 40 77 ss 31I0G ..U...@w
0140 77 77 2e 76 65 72 69 73 69 67 6e 2e 63 6f 6d 2f ww.veris ign.com/
0150 43 50 53 20 49 6e 63 6f 72 70 2e 62 79 20 52 65 CPS Inco rp.by Re
0160 66 2e 20 4c 49 41 42 49 4c 49 54 59 20 4c 54 44 f. LIABI LITY LTD
0170 2e 28 63 29 39 37 20 56 65 72 69 53 69 67 6e 30 .(c)97 V eriSign0
0180 1e 17 0d 30 37 30 34 32 36 30 30 30 30 30 30 5a ...07042 6000000Z
0190 17 0d 30 39 30 34 32 35 32 33 35 39 35 39 5a 30 ..090425 235959Z0

[ltomuta]

Can somebody please explain to me what this discussion is all about? Nokia has a SUPL server and a PSY that communicates with it over a SSL connection. What is it that you are after? Maybe we can give you the answer you need and save you the hacking & cracking trouble ...

[sandymn]

Can somebody please explain to me what this discussion is all about? Nokia has a SUPL server and a PSY that communicates with it over a SSL connection. What is it that you are after? Maybe we can give you the answer you need and save you the hacking & cracking trouble ...

Hi Lucian,

I have a question which is not exactly related to Nokia SUPL server, but in general about the SUPL server communication.
I am working on a AGPS simulator which is being designed as a SUPL server providing the assistance data to cellphone. The PER encoded assistance data is being stored in the server( which in my case is my PC ).
So now my question is, How do I transmit this data to cellphone from my server. Since I am a communication major with specialisation in GPS and now moving towards AGPS, I am not so knowledgeable about the cellphone data communication. Could you please guide me here how to proceed with my implementation. I highly appreciate your help in this regards.

Thanks,

[ltomuta]

Make sure that your SUPL server is accessible over the internet and then set your server's address in the positioning server's settings. Now the only thing to fix is to make sure that you add your SSL certificate to the phone so that a secure connection can be extablished between the two end-points. That should be all you need.