search

libimobiledevice / idevicerestore

Restore/upgrade firmware of iOS devices
https://libimobiledevice.org
GNU Lesser General Public License v3.0
1.33k stars 394 forks source link

fails in Sending TSS request #185

Closed ankitrwt closed 6 years ago

ankitrwt commented 7 years ago

idevicerestore -d -e -l -C .

Sending TSS request attempt 1... Request URL set to https://17.171.36.30/TSS/controller?action=2 Failed to connect to 17.171.36.30 port 443: Connection timed out Sending TSS request attempt 2... Request URL set to https://17.151.36.30/TSS/controller?action=2 Failed to connect to 17.151.36.30 port 443: Connection timed out Sending TSS request attempt 3... Request URL set to http://gs.apple.com/TSS/controller?action=2 TSS server returned:

403 Forbidden

403 Forbidden

Shield

Rayee666 commented 7 years ago

I got the same error. Pls help.

4kzeng commented 7 years ago

iTunes also get failed, https-sniff-tools found that gs.apple.com server refuses request.

ankitrwt commented 7 years ago

i tried on iPhone4,4s,5,5s,6 & 6s and i got same error, debug

[root@System]# idevicerestore -d -e -l -C . Reading data from ./version.xml NOTE: using cached version data opening device 05ac:1281... Setting to configuration 1 Setting to interface 0:0 Found device in Recovery mode opening device 05ac:1281... Setting to configuration 1 Setting to interface 0:0 Identified device as n53ap, iPhone6,2 Latest firmware is iPhone_4.0_64bit_11.0_15A372_Restore.ipsw Verifying './iPhone_4.0_64bit_11.0_15A372_Restore.ipsw'... Checksum matches. Extracting BuildManifest from IPSW Product Version: 11.0 Product Build: 15A372 Major: 15 opening device 05ac:1281... Setting to configuration 1 Setting to interface 0:0 INFO: device serial number is DX3QWJDXFRC4 Device supports Image4: true Variant: Customer Erase Install (IPSW) This restore will erase your device data. Getting device's ECID for TSS request Found ECID 5723206868272 Getting ApNonce in recovery mode... a1 91 2d 0f ca c0 43 ff 57 a0 13 13 54 37 fd f4 5c e6 d9 0b Trying to fetch new SHSH blob Getting SepNonce in recovery mode... bd cf 7d b4 d3 af 67 1f 1e 34 80 eb ee 37 ac 0a 7e 64 e3 ce NOTE: Unable to find BbCalibrationManifestKeyHash node NOTE: Unable to find BbFactoryActivationManifestKeyHash node NOTE: Unable to find BbFDRSecurityKeyHash node WARNING: Unable to find BbSkeyId node DEBUG: Applying restore request rules for entry AppleLogo DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryCharging0 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryCharging1 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryFull DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryLow0 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryLow1 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryPlugin DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry DeviceTree DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry KernelCache DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry LLB DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry OS DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RecoveryMode DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreDeviceTree DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreKernelCache DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreLogo DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreRamDisk DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreSEP DEBUG: Adding action ESEC to TSS entry DEBUG: Adding action EPRO to TSS entry DEBUG: Applying restore request rules for entry SEP DEBUG: Adding action ESEC to TSS entry DEBUG: Adding action EPRO to TSS entry DEBUG: Applying restore request rules for entry iBEC DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry iBSS DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry iBoot DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry common.c:printing 5268 bytes plist: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

@Locality en_US @HostPlatformInfo mac @VersionInfo libauthinstall-293.1.16 @UUID 196DD2EB-06B4-3465-856C-99B4AB95D8C5 ApECID 5723206868272 UniqueBuildID tZ5oI+/77KiXVWzoF0BCBDiJ3WM= ApChipID 35168 ApBoardID 2 ApSecurityDomain 1 AppleLogo Digest MSQVX3EPHbrZTRDww2uegoYz7iA= Trusted EPRO ESEC BatteryCharging0 Digest I7hIydbKN7PL7JD9qRxgcvoL8GI= Trusted EPRO ESEC BatteryCharging1 Digest NNMfKUgQ+daMFQW+RcUPcbRXGnU= Trusted EPRO ESEC BatteryFull Digest KCQg4+J52MejGgr59NJTT6uqUqc= Trusted EPRO ESEC BatteryLow0 Digest Xn+fKbLFqSIt9/DOAqOgAMzECuY= Trusted EPRO ESEC BatteryLow1 Digest d0SDJ24kJpFgnjRMxzA+RYO89b4= Trusted EPRO ESEC BatteryPlugin Digest 4fEqlqGPVUmDKAMNhHwtmw1dxts= Trusted EPRO ESEC DeviceTree Digest IFxRHiyDdG8RFD1q6mm0y6+qx90= Trusted EPRO ESEC KernelCache Digest bGnWSNCNerNJe0mGEEvPFJMNgqc= Trusted EPRO ESEC LLB BuildString iBoot-4076.1.44~197 Digest 6ui2+vws3b5MBbOZmXHE0sJdNTM= Trusted EPRO ESEC OS Digest /Vu6CEW3HEAWjjgpAEgJ26EXVX4= Trusted EPRO ESEC RecoveryMode Digest ZTy9r0Zua9lJbxW1ifZxbPlS8q0= Trusted EPRO ESEC RestoreDeviceTree Digest rHI80cJ2sVQVlNQLdtYu2MjAZ2Y= Trusted EPRO ESEC RestoreKernelCache Digest 9QwWJz0kT9IASPnezvH8a9QDe+0= Trusted EPRO ESEC RestoreLogo Digest IOuJWGs0B5WmJusLNCWBrzmCYtM= Trusted EPRO ESEC RestoreRamDisk Digest Fgq9ORQ/0AB0KmzXTXRaXQloxIM= Trusted EPRO ESEC RestoreSEP Digest K/0BgpktCD5g+vR2SGkBJBtckhE= Trusted ESEC EPRO SEP Digest kxueO91P99e69B4rTeFz4NxcuLE= Trusted ESEC EPRO iBEC BuildString iBoot-4076.1.44~197 Digest PTNCB+3qFQLztmHRZ2vB70EL4iI= Trusted EPRO ESEC iBSS BuildString iBoot-4076.1.44~197 Digest wLM8VAH+rd+hdxIHRtpNXXZ8f5s= Trusted EPRO ESEC iBoot Digest n01wORhK03TBckoPVnXcPxeMDC0= Trusted EPRO ESEC ApNonce oZEtD8rAQ/9XoBMTVDf99Fzm2Qs= @ApImg4Ticket ApSecurityMode ApProductionMode SepNonce vc99tNOvZx8eNIDr7jesCn5k484=

Request URL set to https://gs.apple.com/TSS/controller?action=2 TSS server returned:

403 Forbidden

403 Forbidden

Shield

Sending TSS request attempt 1... Request URL set to https://17.171.36.30/TSS/controller?action=2 Failed to connect to 17.171.36.30 port 443: Connection timed out Sending TSS request attempt 2... Request URL set to https://17.151.36.30/TSS/controller?action=2 Failed to connect to 17.151.36.30 port 443: Connection timed out Sending TSS request attempt 3... Request URL set to http://gs.apple.com/TSS/controller?action=2 TSS server returned:

403 Forbidden

403 Forbidden

Shield

Failed to connect to 17.151.36.30 port 443: Connection timed out Sending TSS request attempt 4... Request URL set to http://17.171.36.30/TSS/controller?action=2 Recv failure: Connection reset by peer Sending TSS request attempt 5... Request URL set to http://17.151.36.30/TSS/controller?action=2 Recv failure: Connection reset by peer Sending TSS request attempt 6... Request URL set to https://gs.apple.com/TSS/controller?action=2 TSS server returned:

403 Forbidden

403 Forbidden

Shield

Recv failure: Connection reset by peer Sending TSS request attempt 7... Request URL set to https://17.171.36.30/TSS/controller?action=2 Failed to connect to 17.171.36.30 port 443: Connection timed out Sending TSS request attempt 8... Request URL set to https://17.151.36.30/TSS/controller?action=2 Failed to connect to 17.151.36.30 port 443: Connection timed out Sending TSS request attempt 9... Request URL set to http://gs.apple.com/TSS/controller?action=2 TSS server returned:

403 Forbidden

403 Forbidden

Shield

Failed to connect to 17.151.36.30 port 443: Connection timed out Sending TSS request attempt 10... Request URL set to http://17.171.36.30/TSS/controller?action=2 Recv failure: Connection reset by peer Sending TSS request attempt 11... Request URL set to http://17.151.36.30/TSS/controller?action=2 Recv failure: Connection reset by peer Sending TSS request attempt 12... Request URL set to https://gs.apple.com/TSS/controller?action=2 TSS server returned:

403 Forbidden

403 Forbidden

Shield

Recv failure: Connection reset by peer Sending TSS request attempt 13... Request URL set to https://17.171.36.30/TSS/controller?action=2 Failed to connect to 17.171.36.30 port 443: Connection timed out Sending TSS request attempt 14... Request URL set to https://17.151.36.30/TSS/controller?action=2 Failed to connect to 17.151.36.30 port 443: Connection timed out ERROR: TSS request failed: Failed to connect to 17.151.36.30 port 443: Connection timed out (status=-1) Segmentation fault (core dumped) [root@System]#

nicolassan commented 7 years ago

Same server problem with DFU in itunes, maybe a server problem

ankitrwt commented 7 years ago

update your itunes then it will work fine, @nicolassan

daniel-bluesea commented 7 years ago

@ankitrwt its not an itunes forum, we need to solve this problem for idevicerestore

daniel-bluesea commented 7 years ago

anyway.. it seems that the issue was fixed by apple @ankitrwt please verify and close this issue, thanks

ankitrwt commented 7 years ago

yes issue was resolved but still idevicerestore -d -e -l -C . not working for ios 11 @Rayee666 @daniel-bluesea @4kzeng @posixninja please verify

ankitrwt commented 7 years ago

debug,

[root@System]# idevicerestore -d -e -l -C . Reading data from ./version.xml NOTE: using cached version data opening device 05ac:1281... Setting to configuration 1 Setting to interface 0:0 Found device in Recovery mode opening device 05ac:1281... Setting to configuration 1 Setting to interface 0:0 Identified device as j81ap, iPad5,3 Latest firmware is iPad_64bit_TouchID_11.0_15A372_Restore.ipsw Verifying './iPad_64bit_TouchID_11.0_15A372_Restore.ipsw'... Checksum matches. Extracting BuildManifest from IPSW Product Version: 11.0 Product Build: 15A372 Major: 15 opening device 05ac:1281... Setting to configuration 1 Setting to interface 0:0 INFO: device serial number is DMRNME2YG5VV Device supports Image4: true Variant: Customer Erase Install (IPSW) This restore will erase your device data. Getting device's ECID for TSS request Found ECID 1751011606743078 Getting ApNonce in recovery mode... 9b d9 ea 96 4b 6f ff fa 89 c3 d9 ca 51 ec 1b a3 b2 15 ce 5d Trying to fetch new SHSH blob Getting SepNonce in recovery mode... 7c 00 f5 01 2f 29 67 b3 e7 84 2c ee 0c 99 d7 b9 75 a3 9e 25 WARNING: Unable to find BbChipID node NOTE: Unable to find BbProvisioningManifestKeyHash node NOTE: Unable to find BbActivationManifestKeyHash node NOTE: Unable to find BbCalibrationManifestKeyHash node NOTE: Unable to find BbFactoryActivationManifestKeyHash node NOTE: Unable to find BbFDRSecurityKeyHash node WARNING: Unable to find BbSkeyId node DEBUG: Applying restore request rules for entry AppleLogo DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryCharging0 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryCharging1 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryFull DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryLow0 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryLow1 DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry BatteryPlugin DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry DeviceTree DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry KernelCache DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry LLB DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry OS DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RecoveryMode DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreDeviceTree DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreKernelCache DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreLogo DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreRamDisk DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry RestoreSEP DEBUG: Adding action ESEC to TSS entry DEBUG: Adding action EPRO to TSS entry DEBUG: Applying restore request rules for entry SEP DEBUG: Adding action ESEC to TSS entry DEBUG: Adding action EPRO to TSS entry DEBUG: Applying restore request rules for entry ftap DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: No Digest data, using empty value for entry ftap DEBUG: Applying restore request rules for entry ftsp DEBUG: Adding action ESEC to TSS entry DEBUG: Adding action EPRO to TSS entry DEBUG: No Digest data, using empty value for entry ftsp DEBUG: Applying restore request rules for entry iBEC DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry iBSS DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry iBoot DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: Applying restore request rules for entry rfta DEBUG: Adding action EPRO to TSS entry DEBUG: Adding action ESEC to TSS entry DEBUG: No Digest data, using empty value for entry rfta DEBUG: Applying restore request rules for entry rfts DEBUG: Adding action ESEC to TSS entry DEBUG: Adding action EPRO to TSS entry DEBUG: No Digest data, using empty value for entry rfts common.c:printing 5911 bytes plist: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

@Locality en_US @HostPlatformInfo mac @VersionInfo libauthinstall-293.1.16 @UUID 5BBD4E84-C6B9-07BE-C9D2-8370910AB237 ApECID 1751011606743078 UniqueBuildID dTfEvKMrgwbNeG6hJZZlvZK2Ep8= ApChipID 28673 ApBoardID 6 ApSecurityDomain 1 AppleLogo Digest yB/PkFAJ1x9whjnZt1Zej80KrX4= Trusted EPRO ESEC BatteryCharging0 Digest Qf2UxSyErGM9yTnIDR2ZMkl0CUU= Trusted EPRO ESEC BatteryCharging1 Digest S7bvTEBzJyzBWJTafFCyz6YH8Ac= Trusted EPRO ESEC BatteryFull Digest IyZxOaFAv2HJZaEynFJ8aWRmbyU= Trusted EPRO ESEC BatteryLow0 Digest DXwud6zGevyprWRnNkmulbxEU/k= Trusted EPRO ESEC BatteryLow1 Digest iE/d0BjHCEqWxhyW6Scu8xxdYjQ= Trusted EPRO ESEC BatteryPlugin Digest KZt0ExhfwqjSjcWriGkdToIRyyE= Trusted EPRO ESEC DeviceTree Digest oywBp7n2y+GijsmTkpApuCfCml4= Trusted EPRO ESEC KernelCache Digest dg35FSiQLsKcYPZVLHZSHFxkZaA= Trusted EPRO ESEC LLB BuildString iBoot-4076.1.44~197 Digest eriUd9R7sQ8WtiWG2/HXKl+2OJs= Trusted EPRO ESEC OS Digest nacp4tT13D51KvAW4aXG1TAGmiI= Trusted EPRO ESEC RecoveryMode Digest vzSeLuaei1RYSnZh1YGtCu2caDQ= Trusted EPRO ESEC RestoreDeviceTree Digest T4HaXSWvKbBySULhR5Tjn/m3rgs= Trusted EPRO ESEC RestoreKernelCache Digest u5V1VvHvGEclvEKnWTxUWl0ps8M= Trusted EPRO ESEC RestoreLogo Digest mCEe09LvP1o2Jw/aq9L/0VRhRXo= Trusted EPRO ESEC RestoreRamDisk Digest NGSb0oKe+h3LD+rYL6G1e64ac7Q= Trusted EPRO ESEC RestoreSEP Digest lGi3U/EO3Ltwb+e41uGgX/fN9zU= Trusted ESEC EPRO SEP Digest bjZmugYuIFG8Q6yIdw6JWZOPHMM= Trusted ESEC EPRO ftap Trusted EPRO ESEC Digest ftsp Trusted ESEC EPRO Digest iBEC BuildString iBoot-4076.1.44~197 Digest MknRjN6Riapm7i9efTk4FpxhDcM= Trusted EPRO ESEC iBSS BuildString iBoot-4076.1.44~197 Digest VbFikmirxz9j6gY4EsU2fF+5kjM= Trusted EPRO ESEC iBoot Digest FbyFB9hXBQEBkYH9+gUS7eWEnsI= Trusted EPRO ESEC rfta Trusted EPRO ESEC Digest rfts Trusted ESEC EPRO Digest ApNonce m9nqlktv//qJw9nKUewbo7IVzl0= @ApImg4Ticket ApSecurityMode ApProductionMode SepNonce fAD1AS8pZ7PnhCzuDJnXuXWjniU=

Request URL set to https://gs.apple.com/TSS/controller?action=2 Sending TSS request attempt 1... response successfully received common.c:printing 7937 bytes plist: <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

@ServerVersion 2.1.0 ApImg4Ticket MIIVxBYESU00TQIBADGCC9z/hOqFnEKCC9MwggvPFgRNQU5CMYILxf+E6oWcUIIBADCB /RYETUFOUDGB9P+EkrmGSB4wHBYEQk5DSAQUm9nqlktv//qJw9nKUewbo7IVzl3/hJK9 pEQLMAkWBEJPUkQCAQb/hJqVoE8LMAkWBENFUE8CAQH/hJqhklAMMAoWBENISVACAnAB /4SawaRPCzAJFgRDUFJPAQH//4SazYpDCzAJFgRDU0VDAQH//4SqjZJEETAPFgRFQ0lE AgcGOIko0Ugm/4WakZ5NCzAJFgRTRE9NAgEB/4ebud5uHjAcFgRzbm9uBBR8APUBLyln s+eELO4Mmde5daOeJf+Hm8nsbh4wHBYEc3J2bgQUm1U4DbkHnZo/rdD6JiDYzsXksXn/ hpOF6DBlMGMWBGJhdDAxW/+Eop2mVB4wHBYEREdTVAQUDXwud6zGevyprWRnNkmulbxE U/n/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVT RUMBAf//hpOF6DFlMGMWBGJhdDExW/+Eop2mVB4wHBYEREdTVAQUiE/d0BjHCEqWxhyW 6Scu8xxdYjT/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikML MAkWBEVTRUMBAf//hpOF6EZlMGMWBGJhdEYxW/+Eop2mVB4wHBYEREdTVAQUIyZxOaFA v2HJZaEynFJ8aWRmbyX/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf// hKrNikMLMAkWBEVTRUMBAf//hpuhzjBlMGMWBGNoZzAxW/+Eop2mVB4wHBYEREdTVAQU Qf2UxSyErGM9yTnIDR2ZMkl0CUX/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQ Uk8BAf//hKrNikMLMAkWBEVTRUMBAf//hpuhzjFlMGMWBGNoZzExW/+Eop2mVB4wHBYE REdTVAQUS7bvTEBzJyzBWJTafFCyz6YH8Af/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8L MAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hqPR5GVlMGMWBGR0cmUxW/+Eop2m VB4wHBYEREdTVAQUoywBp7n2y+GijsmTkpApuCfCml7/hKqtilkLMAkWBEVLRVkBAf// hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hrPRwnBxMG8WBGZ0YXAx Z/+Eop2mVCowKBYEREdTVAQgU0C2oFm9tzLnFee7Gyku3NRcKo0dB+YDnT8zjXxEKKv/ hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMB Af//hrPR5nBxMG8WBGZ0c3AxZ/+Eop2mVCowKBYEREdTVAQgU0C2oFm9tzLnFee7Gyku 3NRcKo0dB+YDnT8zjXxEKKv/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8B Af//hKrNikMLMAkWBEVTRUMBAf//hrux8lBlMGMWBGdseVAxW/+Eop2mVB4wHBYEREdT VAQUKZt0ExhfwqjSjcWriGkdToIRyyH/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkW BEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hsuJymNlMGMWBGliZWMxW/+Eop2mVB4w HBYEREdTVAQUMknRjN6Riapm7i9efTk4FpxhDcP/hKqtilkLMAkWBEVLRVkBAf//hKrB pE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hsuJ3nRlMGMWBGlib3QxW/+E op2mVB4wHBYEREdTVAQUFbyFB9hXBQEBkYH9+gUS7eWEnsL/hKqtilkLMAkWBEVLRVkB Af//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hsuJ5nNlMGMWBGli c3MxW/+Eop2mVB4wHBYEREdTVAQUVbFikmirxz9j6gY4EsU2fF+5kjP/hKqtilkLMAkW BEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hsux2GJl MGMWBGlsbGIxW/+Eop2mVB4wHBYEREdTVAQUeriUd9R7sQ8WtiWG2/HXKl+2OJv/hKqt ilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf// htvJ3GxlMGMWBGtybmwxW/+Eop2mVB4wHBYEREdTVAQUdg35FSiQLsKcYPZVLHZSHFxk ZaD/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVT RUMBAf//huO9zm9lMGMWBGxvZ28xW/+Eop2mVB4wHBYEREdTVAQUyB/PkFAJ1x9whjnZ t1Zej80KrX7/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikML MAkWBEVTRUMBAf//h5OR5mtlMGMWBHJkc2sxW/+Eop2mVB4wHBYEREdTVAQUNGSb0oKe +h3LD+rYL6G1e64ac7T/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf// hKrNikMLMAkWBEVTRUMBAf//h5OR6HJlMGMWBHJkdHIxW/+Eop2mVB4wHBYEREdTVAQU T4HaXSWvKbBySULhR5Tjn/m3rgv/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQ Uk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5OVxm1lMGMWBHJlY20xW/+Eop2mVB4wHBYE REdTVAQUvzSeLuaei1RYSnZh1YGtCu2caDT/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8L MAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5OZ6GFxMG8WBHJmdGExZ/+Eop2m VCowKBYEREdTVAQgU0C2oFm9tzLnFee7Gyku3NRcKo0dB+YDnT8zjXxEKKv/hKqtilkL MAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5OZ 6HNxMG8WBHJmdHMxZ/+Eop2mVCowKBYEREdTVAQgU0C2oFm9tzLnFee7Gyku3NRcKo0d B+YDnT8zjXxEKKv/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrN ikMLMAkWBEVTRUMBAf//h5Ot5G5lMGMWBHJrcm4xW/+Eop2mVB4wHBYEREdTVAQUu5V1 VvHvGEclvEKnWTxUWl0ps8P/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8B Af//hKrNikMLMAkWBEVTRUMBAf//h5Oxzm9lMGMWBHJsZ28xW/+Eop2mVB4wHBYEREdT VAQUmCEe09LvP1o2Jw/aq9L/0VRhRXr/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkW BEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5O95mllMGMWBHJvc2kxW/+Eop2mVB4w HBYEREdTVAQUnacp4tT13D51KvAW4aXG1TAGmiL/hKqtilkLMAkWBEVLRVkBAf//hKrB pE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5PNynBlMGMWBHJzZXAxW/+E op2mVB4wHBYEREdTVAQUlGi3U/EO3Ltwb+e41uGgX/fN9zX/hKqtilkLMAkWBEVLRVkB Af//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5uV4GllMGMWBHNl cGkxW/+Eop2mVB4wHBYEREdTVAQUbjZmugYuIFG8Q6yIdw6JWZOPHMP/hKqtilkLMAkW BEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf8EggEAK+8G ENd2/YuAl7AGP6WXAOKzQZVKTAKTSpfZFZDTh7gAQ9sCsqbY6s8NfiMgu+M9aUefNBcl 9Kz/DIkgrV8NKZdb9HJB0nQAvWluZo5z557q78fhqnZXiByvMSWwAVtiuf0c14wHX5Ku mJ+cDxaz7b3hgqs1b4bgPdQssyj3Ca0FotJlLGDvSJagDfrFoOW1nb00ibcR+xLvJOiP 9qRfZ1+ezm5CLyH9HWF8EY/bIyA5Otb/CdhzeZndm14HgQgvFRPdF6f0Bf3ftzFBnpJ2 +PgHZT7m6uGcZHnhkC0zL8otz6orq0Y2ZTzbOjRe5KzATNqLZ1wxI4v/0ODbjZJCKjCC CNMwggP4MIIC4KADAgECAgEQMA0GCSqGSIb3DQEBBQUAMGIxCzAJBgNVBAYTAlVTMRMw EQYDVQQKEwpBcHBsZSBJbmMuMSYwJAYDVQQLEx1BcHBsZSBDZXJ0aWZpY2F0aW9uIEF1 dGhvcml0eTEWMBQGA1UEAxMNQXBwbGUgUm9vdCBDQTAeFw0wNzAxMDUxOTIxNTlaFw0y MjAxMDUxOTIxNTlaMH4xCzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpBcHBsZSBJbmMuMSYw JAYDVQQLEx1BcHBsZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEyMDAGA1UEAxMpQXBw bGUgU2VjdXJlIEJvb3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQD+8t3aZTmwcuMDhIH0VsnRoUq7yAQB80YNleE3lQpp R8bEjHk+R1UGsgYU636k9SP+QjWY7zQFzprTrZTQog/C0rQESEwjWlvHC51i0/PjaxD+ lwhXxhJ2dxmyxsMsmO23KYfk3Bi25fO6E/uytrdn2cvfb6WTPe16k2e0/TQW5ACrC7dO H1rWA2g+crYUMDoMZJegRiJ5G3csWy6Q4BHcFqPhyPeEsk/cSzoK1RJ+3BE/+hFzZRpJ cKB+dYK0PCsvVd8wiLF1TUXcBygtSjqF/Z+VPiK6nEb3t2h7s5TVQj4Fszj4Z3lIjGwf i77u7VQF1aMLWH14DySpodwKdOr3AgMBAAGjgZwwgZkwDgYDVR0PAQH/BAQDAgGGMA8G A1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFEk9NlPJ1xXhhmFOrKurGFZjXcPGMB8GA1Ud IwQYMBaAFCvQaUeUdgn+9GuNLkCm90dNfwheMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6 Ly93d3cuYXBwbGUuY29tL2FwcGxlY2Evcm9vdC5jcmwwDQYJKoZIhvcNAQEFBQADggEB ADTFDMUOWREvpsKfMnjnZDJp263CJcq3R4O3kjxxU6CyrTCVgFC9bV9M3M54DUxJEFA4 EDW/RYGsZlgsISP4ll6A6dPGTP2Frjlh9iiqRO0Vmz9HwFesZxyMzdSTjU/balSne0Jb D5nG1zirUqehgx2FMHTqDR3aaISP4oR+y7lBbtWfqEK1/zO2cX/qo7ndSQNghXYQPo6o 4TbjEt2FbO1mU7BbSJsvf/bKHPBdmC10rfBIR8XhmmeyIg+wDgKg4bpqYrm0tXH0JeGz 5aDtyBpAtfgxFQWkXDgjTJCdRwOAgNQykEWPD6+b/ALu7cvmMfafFeZ9K1dDDuIPoaCt idowggTTMIIDu6ADAgECAgICDzANBgkqhkiG9w0BAQUFADB+MQswCQYDVQQGEwJVUzET MBEGA1UEChMKQXBwbGUgSW5jLjEmMCQGA1UECxMdQXBwbGUgQ2VydGlmaWNhdGlvbiBB dXRob3JpdHkxMjAwBgNVBAMTKUFwcGxlIFNlY3VyZSBCb290IENlcnRpZmljYXRpb24g QXV0aG9yaXR5MB4XDTEzMDYwNDIwMDIxMFoXDTIzMDYwNTIwMDIxMFowZDELMAkGA1UE BhMCVVMxEzARBgNVBAoTCkFwcGxlIEluYy4xDDAKBgNVBAsTA0VUUzEyMDAGA1UEAxMp VDcwMDEtVHNzTGl2ZS1NYW5pZmVzdEtleS1SZXZBLURhdGFDZW50ZXIwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsMjIkzrkyi8OPRr6aTlMQoPVWaIFLd0jBo53X pl7koQ6S34i6L82MwUWnlU1uMgAVt/2hEEdplTC+crghh/Y+sABGxq4PImIoKhkW7I43 GYKJYNH8ZW7Ip2t7sewDBYxbVQQpRNfMgxdbFLP1vQT5hmoiVzlIYS1oegtqPbllOu4p I8bU+vFHcvHkv2p1b8sKyYnyQhZgt6BuLHkkxrBNeghkhNxNl7uU+Pq7poBzKcRabIY/ 88w6BxXXfGMwsUlTp8pNdqPRhuMicXqk4A5tVnqYn1vGw53A+B+LGPPBZq9rusIH0SsZ iW9kXrCw75VtkIItr/pvMLvhgBm8WcePAgMBAAGjggFzMIIBbzALBgNVHQ8EBAMCB4Aw HQYDVR0OBBYEFElwPq+c6iIFyQvnyvE1Y4b/6TLpMB8GA1UdIwQYMBaAFEk9NlPJ1xXh hmFOrKurGFZjXcPGMIIBHgYKKoZIhvdjZAYBDwEB/wSCAQsxggEH/4TqhZxQgbUwgbIW BE1BTlAxgan/hJK5hkgMMAoWBEJOQ0igAgUA/4SSvaREDDAKFgRCT1JEoAIFAP+EmpWg TwswCRYEQ0VQTwIBAf+EmqGSUAwwChYEQ0hJUAICcAH/hJrBpE8MMAoWBENQUk+gAgUA /4SazYpDDDAKFgRDU0VDoAIFAP+Eqo2SRAwwChYERUNJRKACBQD/hZqRnk0LMAkWBFNE T00CAQH/h5u53m4MMAoWBHNub26gAgUA/4T6iZRQQzBBFgRPQkpQMTn/hKKdplQMMAoW BERHU1SgAgUA/4SqwaRPDDAKFgRFUFJPoAIFAP+Eqs2KQwwwChYERVNFQ6ACBQAwDQYJ KoZIhvcNAQEFBQADggEBANdBOufufsrs4VqCqgdBik97liEKRb9HKb0DVA724Dd5CcB3 QybSuQoI/Y2hgjA1u8TWSX/spGUMlP32odVtfa54PRdFq2xRlrNV+RxkHeJ9f4Cj/Vn2 PIUDCqoT4hvHx4LpJSQ0LBdxkl8Zx1xt8Itv1f1rt/uTONLxeL9mtiqktIWsG5T1IY9j xYTi1vvJE7NI+W3DKsUTUSyLlGes+IYWHJxpfD3CW95CSQKziDmcdI8nytSyIFcX/TWt hyLVepgfR+tWZgskwStMKyIz8NqhlciLHkV/wa29rdmT3h+I8jexavMmdQR2mzsuBWC9 jnVLctgE2EBqqhje2e3mtpU=

Received SHSH blobs Extracting filesystem from IPSW [==================================================] 100.0% DEBUG: tss_response_get_path_by_entry: No entry 'iBEC' in TSS response NOTE: No path for component iBEC in TSS, will fetch from build_identity Extracting iBEC.ipad5b.RELEASE.im4p... Personalizing IMG4 component iBEC... Sending iBEC (702644 bytes)... opening device 05ac:1281... found device with ECID 0006388928d14826 Setting to configuration 1 Setting to interface 0:0 Recovery Mode Environment: iBoot build-version=iBoot-4076.1.44 iBoot build-style=RELEASE Sending AppleLogo... DEBUG: tss_response_get_path_by_entry: No entry 'AppleLogo' in TSS response NOTE: No path for component AppleLogo in TSS, will fetch from build_identity Extracting applelogo@2x~ipad.im4p... Personalizing IMG4 component AppleLogo... Sending AppleLogo (23186 bytes)... ramdisk-size=0x20000000 DEBUG: tss_response_get_path_by_entry: No entry 'RestoreRamDisk' in TSS response NOTE: No path for component RestoreRamDisk in TSS, will fetch from build_identity Extracting 058-59982-349.dmg... Personalizing IMG4 component RestoreRamDisk... Sending RestoreRamDisk (59114995 bytes)... DEBUG: tss_response_get_path_by_entry: No entry 'RestoreDeviceTree' in TSS response NOTE: No path for component RestoreDeviceTree in TSS, will fetch from build_identity Extracting DeviceTree.j81ap.im4p... Personalizing IMG4 component RestoreDeviceTree... Sending RestoreDeviceTree (118036 bytes)... DEBUG: tss_response_get_path_by_entry: No entry 'RestoreKernelCache' in TSS response NOTE: No path for component RestoreKernelCache in TSS, will fetch from build_identity Extracting kernelcache.release.ipad5b... Personalizing IMG4 component RestoreKernelCache... Sending RestoreKernelCache (13799475 bytes)... About to restore device... Waiting for device... Attempt 1 to connect to restore mode device... Attempt 2 to connect to restore mode device... Attempt 3 to connect to restore mode device... Attempt 4 to connect to restore mode device... Attempt 5 to connect to restore mode device... Attempt 6 to connect to restore mode device... Attempt 7 to connect to restore mode device... Attempt 8 to connect to restore mode device... Attempt 9 to connect to restore mode device... Attempt 10 to connect to restore mode device... Attempt 11 to connect to restore mode device... Attempt 12 to connect to restore mode device... Attempt 13 to connect to restore mode device... Attempt 14 to connect to restore mode device... Attempt 15 to connect to restore mode device... Attempt 16 to connect to restore mode device... Attempt 17 to connect to restore mode device... Attempt 18 to connect to restore mode device... Attempt 19 to connect to restore mode device... Attempt 20 to connect to restore mode device... Attempt 21 to connect to restore mode device... Attempt 22 to connect to restore mode device... Attempt 23 to connect to restore mode device... Attempt 24 to connect to restore mode device... Attempt 25 to connect to restore mode device... Attempt 26 to connect to restore mode device... Attempt 27 to connect to restore mode device... Attempt 28 to connect to restore mode device... Attempt 29 to connect to restore mode device... Attempt 30 to connect to restore mode device... Attempt 31 to connect to restore mode device... Attempt 32 to connect to restore mode device... Attempt 33 to connect to restore mode device... Attempt 34 to connect to restore mode device... Attempt 35 to connect to restore mode device... Attempt 36 to connect to restore mode device... Attempt 37 to connect to restore mode device... Attempt 38 to connect to restore mode device... Attempt 39 to connect to restore mode device... Attempt 40 to connect to restore mode device... Attempt 41 to connect to restore mode device... Attempt 42 to connect to restore mode device... Attempt 43 to connect to restore mode device... Attempt 44 to connect to restore mode device... Attempt 45 to connect to restore mode device... Attempt 46 to connect to restore mode device... Attempt 47 to connect to restore mode device... Attempt 48 to connect to restore mode device... Attempt 49 to connect to restore mode device... Attempt 50 to connect to restore mode device... Attempt 51 to connect to restore mode device... Attempt 52 to connect to restore mode device... Attempt 53 to connect to restore mode device... Attempt 54 to connect to restore mode device... Attempt 55 to connect to restore mode device... Attempt 56 to connect to restore mode device... Attempt 57 to connect to restore mode device... Attempt 58 to connect to restore mode device... Attempt 59 to connect to restore mode device... Attempt 60 to connect to restore mode device... Attempt 61 to connect to restore mode device... Attempt 62 to connect to restore mode device... Attempt 63 to connect to restore mode device... Attempt 64 to connect to restore mode device... Attempt 65 to connect to restore mode device... Attempt 66 to connect to restore mode device... Attempt 67 to connect to restore mode device... Attempt 68 to connect to restore mode device... Attempt 69 to connect to restore mode device... Attempt 70 to connect to restore mode device... Attempt 71 to connect to restore mode device... Attempt 72 to connect to restore mode device... Attempt 73 to connect to restore mode device... Attempt 74 to connect to restore mode device... Attempt 75 to connect to restore mode device... Attempt 76 to connect to restore mode device... Attempt 77 to connect to restore mode device... Attempt 78 to connect to restore mode device... Attempt 79 to connect to restore mode device... Attempt 80 to connect to restore mode device... Attempt 81 to connect to restore mode device... Attempt 82 to connect to restore mode device... Attempt 83 to connect to restore mode device... Attempt 84 to connect to restore mode device... Attempt 85 to connect to restore mode device... Attempt 86 to connect to restore mode device... Attempt 87 to connect to restore mode device... Attempt 88 to connect to restore mode device... Attempt 89 to connect to restore mode device... Attempt 90 to connect to restore mode device... Attempt 91 to connect to restore mode device... Attempt 92 to connect to restore mode device... Attempt 93 to connect to restore mode device... Attempt 94 to connect to restore mode device... Attempt 95 to connect to restore mode device... Attempt 96 to connect to restore mode device... Attempt 97 to connect to restore mode device... Attempt 98 to connect to restore mode device... Attempt 99 to connect to restore mode device... Attempt 100 to connect to restore mode device... Attempt 101 to connect to restore mode device... Attempt 102 to connect to restore mode device... Attempt 103 to connect to restore mode device... Attempt 104 to connect to restore mode device... Attempt 105 to connect to restore mode device... Attempt 106 to connect to restore mode device... Attempt 107 to connect to restore mode device... Attempt 108 to connect to restore mode device... Attempt 109 to connect to restore mode device... Attempt 110 to connect to restore mode device... Attempt 111 to connect to restore mode device... Attempt 112 to connect to restore mode device... Attempt 113 to connect to restore mode device... Attempt 114 to connect to restore mode device... Attempt 115 to connect to restore mode device... Attempt 116 to connect to restore mode device... Attempt 117 to connect to restore mode device... Attempt 118 to connect to restore mode device... Attempt 119 to connect to restore mode device... Attempt 120 to connect to restore mode device... Attempt 121 to connect to restore mode device... Attempt 122 to connect to restore mode device... Attempt 123 to connect to restore mode device... Attempt 124 to connect to restore mode device... Attempt 125 to connect to restore mode device... Attempt 126 to connect to restore mode device... Attempt 127 to connect to restore mode device... Attempt 128 to connect to restore mode device... Attempt 129 to connect to restore mode device... Attempt 130 to connect to restore mode device... Attempt 131 to connect to restore mode device... Attempt 132 to connect to restore mode device... Attempt 133 to connect to restore mode device... Attempt 134 to connect to restore mode device... Attempt 135 to connect to restore mode device... Attempt 136 to connect to restore mode device... Attempt 137 to connect to restore mode device... Attempt 138 to connect to restore mode device... Attempt 139 to connect to restore mode device... Attempt 140 to connect to restore mode device... Attempt 141 to connect to restore mode device... Attempt 142 to connect to restore mode device... Attempt 143 to connect to restore mode device... Attempt 144 to connect to restore mode device... Attempt 145 to connect to restore mode device... Attempt 146 to connect to restore mode device... Attempt 147 to connect to restore mode device... Attempt 148 to connect to restore mode device... Attempt 149 to connect to restore mode device... Attempt 150 to connect to restore mode device... Attempt 151 to connect to restore mode device... Attempt 152 to connect to restore mode device... Attempt 153 to connect to restore mode device... Attempt 154 to connect to restore mode device... Attempt 155 to connect to restore mode device... Attempt 156 to connect to restore mode device... Attempt 157 to connect to restore mode device... Attempt 158 to connect to restore mode device... Attempt 159 to connect to restore mode device... Attempt 160 to connect to restore mode device... Attempt 161 to connect to restore mode device... Attempt 162 to connect to restore mode device... Attempt 163 to connect to restore mode device... Attempt 164 to connect to restore mode device... Attempt 165 to connect to restore mode device... Attempt 166 to connect to restore mode device... Attempt 167 to connect to restore mode device... Attempt 168 to connect to restore mode device... Attempt 169 to connect to restore mode device... Attempt 170 to connect to restore mode device... Attempt 171 to connect to restore mode device... Attempt 172 to connect to restore mode device... Attempt 173 to connect to restore mode device... Attempt 174 to connect to restore mode device... Attempt 175 to connect to restore mode device... Attempt 176 to connect to restore mode device... Attempt 177 to connect to restore mode device... Attempt 178 to connect to restore mode device... Attempt 179 to connect to restore mode device... Attempt 180 to connect to restore mode device... ERROR: Unable to connect to device in restore mode ERROR: Unable to open device in restore mode ERROR: Unable to restore device [root@System]#

nikias commented 7 years ago

TSS works fine, and I just restored an iPad5,1 (j96ap) successfully to iOS 11.

$ idevicerestore -e ~/Downloads/iPad_64bit_TouchID_11.0_15A372_Restore.ipsw
NOTE: Updated version data.
Found device in Normal mode
Identified device as j96ap, iPad5,1
Extracting BuildManifest from IPSW
Product Version: 11.0
Product Build: 15A372 Major: 15
Device supports Image4: true
Variant: Customer Erase Install (IPSW)
This restore will erase your device data.
Found ECID x0778829xxxxxxxx
Getting ApNonce in normal mode... 8c 0a 66 e2 7e 18 11 40 38 15 0c 60 bf 1b 29 50 8f ad 68 10
Trying to fetch new SHSH blob
Getting SepNonce in normal mode... 28 3e f9 77 96 13 6d 71 cf ad 22 4a 26 fc 18 99 a3 ef 3f 72
WARNING: Unable to find BbChipID node
WARNING: Unable to find BbSkeyId node
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
Received SHSH blobs
Extracting filesystem from IPSW
[==================================================] 100.0%
Entering recovery mode...
INFO: device serial number is Fxxxxxxxxxxx
Extracting iBEC.ipad5.RELEASE.im4p...
Personalizing IMG4 component iBEC...
Sending iBEC (706740 bytes)...
Recovery Mode Environment:
iBoot build-version=iBoot-4076.1.44
iBoot build-style=RELEASE
Sending AppleLogo...
Extracting applelogo@2x~ipad.im4p...
Personalizing IMG4 component AppleLogo...
Sending AppleLogo (23186 bytes)...
ramdisk-size=0x20000000
Extracting 058-59982-349.dmg...
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (59114995 bytes)...
Extracting DeviceTree.j96ap.im4p...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (135472 bytes)...
Extracting kernelcache.release.ipad5...
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (13826677 bytes)...
About to restore device...
Waiting for device...
Device ffffffffc33f1f691a52102ffffffffcffffffff is now connected in restore mode...
Connecting now...
Connected to com.apple.mobile.restored, version 15
Device ffffffffc33f1f691a52102ffffffffcffffffff has successfully entered restore mode
Hardware Information:
BoardID: 8
ChipID: 28672
UniqueChipID: x0778829xxxxxxxx
ProductionMode: true
Starting FDR listener thread
About to send NORData...
Found firmware path Firmware/all_flash
Getting firmware manifest from build identity
Extracting LLB.ipad5.RELEASE.im4p...
Personalizing IMG4 component LLB...
Extracting applelogo@2x~ipad.im4p...
Personalizing IMG4 component AppleLogo...
Extracting batterycharging0@2x~ipad.im4p...
Personalizing IMG4 component BatteryCharging0...
Extracting batterycharging1@2x~ipad.im4p...
Personalizing IMG4 component BatteryCharging1...
Extracting batteryfull@2x~ipad.im4p...
Personalizing IMG4 component BatteryFull...
Extracting batterylow0@2x~ipad.im4p...
Personalizing IMG4 component BatteryLow0...
Extracting batterylow1@2x~ipad.im4p...
Personalizing IMG4 component BatteryLow1...
Extracting glyphplugin@2x~ipad-lightning.im4p...
Personalizing IMG4 component BatteryPlugin...
Extracting DeviceTree.j96ap.im4p...
Personalizing IMG4 component DeviceTree...
Extracting recoverymode@2x~ipad-lightning.im4p...
Personalizing IMG4 component RecoveryMode...
Extracting iBoot.ipad5.RELEASE.im4p...
Personalizing IMG4 component iBoot...
Extracting sep-firmware.j96.RELEASE.im4p...
Personalizing IMG4 component RestoreSEP...
Extracting sep-firmware.j96.RELEASE.im4p...
Personalizing IMG4 component SEP...
Sending NORData now...
Done sending NORData
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
Waiting for NAND (28)
Checking filesystems (15)
Checking filesystems (15)
About to send FDR Trust data...
Sending FDR Trust data now...
Done sending FDR Trust Data
Unmounting filesystems (29)
Unmounting filesystems (29)
Creating partition map (11)
Creating filesystem (12)
About to send filesystem...
Connected to ASR
Validating the filesystem
Filesystem validated
Sending filesystem now...
[==================================================] 100.0%
Done sending filesystem
Verifying restore (14)
[==================================================] 100.0%
Checking filesystems (15)
Checking filesystems (15)
Mounting filesystems (16)
Mounting filesystems (16)
About to send KernelCache...
Extracting kernelcache.release.ipad5...
Personalizing IMG4 component KernelCache...
Sending KernelCache now...
Done sending KernelCache
Installing kernelcache (27)
About to send DeviceTree...
Extracting DeviceTree.j96ap.im4p...
Personalizing IMG4 component DeviceTree...
Sending DeviceTree now...
Done sending DeviceTree
Unknown operation (61)
Flashing firmware (18)
[==================================================] 100.0%
Updating gas gauge software (47)
Updating gas gauge software (47)
Updating Stockholm (55)
About to send FUD data...
Sending FUD data now...
Done sending FUD data
About to send FUD data...
Sending FUD data now...
Done sending FUD data
Updating SE Firmware (59)
Fixing up /var (17)
Creating system key bag (50)
Modifying persistent boot-args (25)
Unmounting filesystems (29)
Unmounting filesystems (29)
Got status message
Status: Restore Finished
Cleaning up...
DONE

Also I used ideviceactivation to activate it, without problems.

ankitrwt commented 7 years ago

i tried on 5s, 6, Air 2 it fails on all but in 4,4s,5 it works fine any suggestion pls

Orbif commented 7 years ago

@ankitrwt With the -C parameter, you need to specify a cache path. This is an optional parameter.

Try this : idevicerestore -d -e -l

ankitrwt commented 7 years ago

it keeps stuck on FDR 0x3475440 timeout waiting for command tried on 5s and 6

@nikias 

[root@System]# idevicerestore -d -e -l -C .
Reading data from ./version.xml
NOTE: using cached version data
opening device 05ac:1281...
Setting to configuration 1
Setting to interface 0:0
Found device in Recovery mode
opening device 05ac:1281...
Setting to configuration 1
Setting to interface 0:0
Identified device as n53ap, iPhone6,2
Latest firmware is iPhone_4.0_64bit_11.0_15A372_Restore.ipsw
Verifying './iPhone_4.0_64bit_11.0_15A372_Restore.ipsw'...
Checksum matches.
Extracting BuildManifest from IPSW
Product Version: 11.0
Product Build: 15A372 Major: 15
opening device 05ac:1281...
Setting to configuration 1
Setting to interface 0:0
INFO: device serial number is DX3QWJDXFRC4
Device supports Image4: true
Variant: Customer Erase Install (IPSW)
This restore will erase your device data.
Getting device's ECID for TSS request
Found ECID 5723206868272
Getting ApNonce in recovery mode... 99 0e 88 2a 8e fa 8d 5c 97 a7 d1 04 ee 9b a2 1f e9 fe 1f b6 
Trying to fetch new SHSH blob
Getting SepNonce in recovery mode... bd cf 13 70 e1 3b fe 7b 8a d3 1d d5 aa 1c ed 41 82 7d f8 e5 
NOTE: Unable to find BbCalibrationManifestKeyHash node
NOTE: Unable to find BbFactoryActivationManifestKeyHash node
NOTE: Unable to find BbFDRSecurityKeyHash node
WARNING: Unable to find BbSkeyId node
DEBUG: Applying restore request rules for entry AppleLogo
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryCharging0
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryCharging1
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryFull
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryLow0
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryLow1
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry BatteryPlugin
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry DeviceTree
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry KernelCache
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry LLB
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry OS
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RecoveryMode
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreDeviceTree
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreKernelCache
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreLogo
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreRamDisk
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry RestoreSEP
DEBUG: Adding action ESEC to TSS entry
DEBUG: Adding action EPRO to TSS entry
DEBUG: Applying restore request rules for entry SEP
DEBUG: Adding action ESEC to TSS entry
DEBUG: Adding action EPRO to TSS entry
DEBUG: Applying restore request rules for entry iBEC
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry iBSS
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
DEBUG: Applying restore request rules for entry iBoot
DEBUG: Adding action EPRO to TSS entry
DEBUG: Adding action ESEC to TSS entry
common.c:printing 5268 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>@Locality</key>
    <string>en_US</string>
    <key>@HostPlatformInfo</key>
    <string>mac</string>
    <key>@VersionInfo</key>
    <string>libauthinstall-293.1.16</string>
    <key>@UUID</key>
    <string>993119F9-91F0-FCF7-2363-7F7C6FB16AB5</string>
    <key>ApECID</key>
    <integer>5723206868272</integer>
    <key>UniqueBuildID</key>
    <data>
    tZ5oI+/77KiXVWzoF0BCBDiJ3WM=
    </data>
    <key>ApChipID</key>
    <integer>35168</integer>
    <key>ApBoardID</key>
    <integer>2</integer>
    <key>ApSecurityDomain</key>
    <integer>1</integer>
    <key>AppleLogo</key>
    <dict>
        <key>Digest</key>
        <data>
        MSQVX3EPHbrZTRDww2uegoYz7iA=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>BatteryCharging0</key>
    <dict>
        <key>Digest</key>
        <data>
        I7hIydbKN7PL7JD9qRxgcvoL8GI=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>BatteryCharging1</key>
    <dict>
        <key>Digest</key>
        <data>
        NNMfKUgQ+daMFQW+RcUPcbRXGnU=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>BatteryFull</key>
    <dict>
        <key>Digest</key>
        <data>
        KCQg4+J52MejGgr59NJTT6uqUqc=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>BatteryLow0</key>
    <dict>
        <key>Digest</key>
        <data>
        Xn+fKbLFqSIt9/DOAqOgAMzECuY=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>BatteryLow1</key>
    <dict>
        <key>Digest</key>
        <data>
        d0SDJ24kJpFgnjRMxzA+RYO89b4=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>BatteryPlugin</key>
    <dict>
        <key>Digest</key>
        <data>
        4fEqlqGPVUmDKAMNhHwtmw1dxts=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>DeviceTree</key>
    <dict>
        <key>Digest</key>
        <data>
        IFxRHiyDdG8RFD1q6mm0y6+qx90=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>KernelCache</key>
    <dict>
        <key>Digest</key>
        <data>
        bGnWSNCNerNJe0mGEEvPFJMNgqc=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>LLB</key>
    <dict>
        <key>BuildString</key>
        <string>iBoot-4076.1.44~197</string>
        <key>Digest</key>
        <data>
        6ui2+vws3b5MBbOZmXHE0sJdNTM=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>OS</key>
    <dict>
        <key>Digest</key>
        <data>
        /Vu6CEW3HEAWjjgpAEgJ26EXVX4=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>RecoveryMode</key>
    <dict>
        <key>Digest</key>
        <data>
        ZTy9r0Zua9lJbxW1ifZxbPlS8q0=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>RestoreDeviceTree</key>
    <dict>
        <key>Digest</key>
        <data>
        rHI80cJ2sVQVlNQLdtYu2MjAZ2Y=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>RestoreKernelCache</key>
    <dict>
        <key>Digest</key>
        <data>
        9QwWJz0kT9IASPnezvH8a9QDe+0=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>RestoreLogo</key>
    <dict>
        <key>Digest</key>
        <data>
        IOuJWGs0B5WmJusLNCWBrzmCYtM=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>RestoreRamDisk</key>
    <dict>
        <key>Digest</key>
        <data>
        Fgq9ORQ/0AB0KmzXTXRaXQloxIM=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>RestoreSEP</key>
    <dict>
        <key>Digest</key>
        <data>
        K/0BgpktCD5g+vR2SGkBJBtckhE=
        </data>
        <key>Trusted</key>
        <true/>
        <key>ESEC</key>
        <true/>
        <key>EPRO</key>
        <true/>
    </dict>
    <key>SEP</key>
    <dict>
        <key>Digest</key>
        <data>
        kxueO91P99e69B4rTeFz4NxcuLE=
        </data>
        <key>Trusted</key>
        <true/>
        <key>ESEC</key>
        <true/>
        <key>EPRO</key>
        <true/>
    </dict>
    <key>iBEC</key>
    <dict>
        <key>BuildString</key>
        <string>iBoot-4076.1.44~197</string>
        <key>Digest</key>
        <data>
        PTNCB+3qFQLztmHRZ2vB70EL4iI=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>iBSS</key>
    <dict>
        <key>BuildString</key>
        <string>iBoot-4076.1.44~197</string>
        <key>Digest</key>
        <data>
        wLM8VAH+rd+hdxIHRtpNXXZ8f5s=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>iBoot</key>
    <dict>
        <key>Digest</key>
        <data>
        n01wORhK03TBckoPVnXcPxeMDC0=
        </data>
        <key>Trusted</key>
        <true/>
        <key>EPRO</key>
        <true/>
        <key>ESEC</key>
        <true/>
    </dict>
    <key>ApNonce</key>
    <data>
    mQ6IKo76jVyXp9EE7puiH+n+H7Y=
    </data>
    <key>@ApImg4Ticket</key>
    <true/>
    <key>ApSecurityMode</key>
    <true/>
    <key>ApProductionMode</key>
    <true/>
    <key>SepNonce</key>
    <data>
    vc8TcOE7/nuK0x3VqhztQYJ9+OU=
    </data>
</dict>
</plist>
Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received
common.c:printing 7281 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>@ServerVersion</key>
    <string>2.1.0</string>
    <key>ApImg4Ticket</key>
    <data>
    MIIT5xYESU00TQIBADGCCfz/hOqFnEKCCfMwggnvFgRNQU5CMYIJ5f+E6oWcUIIBADCB
    /RYETUFOUDGB9P+EkrmGSB4wHBYEQk5DSAQUmQ6IKo76jVyXp9EE7puiH+n+H7b/hJK9
    pEQLMAkWBEJPUkQCAQL/hJqVoE8LMAkWBENFUE8CAQH/hJqhklANMAsWBENISVACAwCJ
    YP+EmsGkTwswCRYEQ1BSTwEB//+Ems2KQwswCRYEQ1NFQwEB//+Eqo2SRBAwDhYERUNJ
    RAIGBTSJtl0w/4WakZ5NCzAJFgRTRE9NAgEB/4ebud5uHjAcFgRzbm9uBBS9zxNw4Tv+
    e4rTHdWqHO1Bgn345f+Hm8nsbh4wHBYEc3J2bgQUsUNrEjpAIKqaz7nw+znfvFtbheL/
    hpOF6DBlMGMWBGJhdDAxW/+Eop2mVB4wHBYEREdTVAQUXn+fKbLFqSIt9/DOAqOgAMzE
    Cub/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVT
    RUMBAf//hpOF6DFlMGMWBGJhdDExW/+Eop2mVB4wHBYEREdTVAQUd0SDJ24kJpFgnjRM
    xzA+RYO89b7/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikML
    MAkWBEVTRUMBAf//hpOF6EZlMGMWBGJhdEYxW/+Eop2mVB4wHBYEREdTVAQUKCQg4+J5
    2MejGgr59NJTT6uqUqf/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//
    hKrNikMLMAkWBEVTRUMBAf//hpuhzjBlMGMWBGNoZzAxW/+Eop2mVB4wHBYEREdTVAQU
    I7hIydbKN7PL7JD9qRxgcvoL8GL/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQ
    Uk8BAf//hKrNikMLMAkWBEVTRUMBAf//hpuhzjFlMGMWBGNoZzExW/+Eop2mVB4wHBYE
    REdTVAQUNNMfKUgQ+daMFQW+RcUPcbRXGnX/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8L
    MAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hqPR5GVlMGMWBGR0cmUxW/+Eop2m
    VB4wHBYEREdTVAQUIFxRHiyDdG8RFD1q6mm0y6+qx93/hKqtilkLMAkWBEVLRVkBAf//
    hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hrux8lBlMGMWBGdseVAx
    W/+Eop2mVB4wHBYEREdTVAQU4fEqlqGPVUmDKAMNhHwtmw1dxtv/hKqtilkLMAkWBEVL
    RVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hsuJymNlMGMW
    BGliZWMxW/+Eop2mVB4wHBYEREdTVAQUPTNCB+3qFQLztmHRZ2vB70EL4iL/hKqtilkL
    MAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//hsuJ
    3nRlMGMWBGlib3QxW/+Eop2mVB4wHBYEREdTVAQUn01wORhK03TBckoPVnXcPxeMDC3/
    hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMB
    Af//hsuJ5nNlMGMWBGlic3MxW/+Eop2mVB4wHBYEREdTVAQUwLM8VAH+rd+hdxIHRtpN
    XXZ8f5v/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkW
    BEVTRUMBAf//hsux2GJlMGMWBGlsbGIxW/+Eop2mVB4wHBYEREdTVAQU6ui2+vws3b5M
    BbOZmXHE0sJdNTP/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrN
    ikMLMAkWBEVTRUMBAf//htvJ3GxlMGMWBGtybmwxW/+Eop2mVB4wHBYEREdTVAQUbGnW
    SNCNerNJe0mGEEvPFJMNgqf/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8B
    Af//hKrNikMLMAkWBEVTRUMBAf//huO9zm9lMGMWBGxvZ28xW/+Eop2mVB4wHBYEREdT
    VAQUMSQVX3EPHbrZTRDww2uegoYz7iD/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkW
    BEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5OR5mtlMGMWBHJkc2sxW/+Eop2mVB4w
    HBYEREdTVAQUFgq9ORQ/0AB0KmzXTXRaXQloxIP/hKqtilkLMAkWBEVLRVkBAf//hKrB
    pE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5OR6HJlMGMWBHJkdHIxW/+E
    op2mVB4wHBYEREdTVAQUrHI80cJ2sVQVlNQLdtYu2MjAZ2b/hKqtilkLMAkWBEVLRVkB
    Af//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5OVxm1lMGMWBHJl
    Y20xW/+Eop2mVB4wHBYEREdTVAQUZTy9r0Zua9lJbxW1ifZxbPlS8q3/hKqtilkLMAkW
    BEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//h5Ot5G5l
    MGMWBHJrcm4xW/+Eop2mVB4wHBYEREdTVAQU9QwWJz0kT9IASPnezvH8a9QDe+3/hKqt
    ilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVTRUMBAf//
    h5Oxzm9lMGMWBHJsZ28xW/+Eop2mVB4wHBYEREdTVAQUIOuJWGs0B5WmJusLNCWBrzmC
    YtP/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikMLMAkWBEVT
    RUMBAf//h5O95mllMGMWBHJvc2kxW/+Eop2mVB4wHBYEREdTVAQU/Vu6CEW3HEAWjjgp
    AEgJ26EXVX7/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//hKrNikML
    MAkWBEVTRUMBAf//h5PNynBlMGMWBHJzZXAxW/+Eop2mVB4wHBYEREdTVAQUK/0Bgpkt
    CD5g+vR2SGkBJBtckhH/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQUk8BAf//
    hKrNikMLMAkWBEVTRUMBAf//h5uV4GllMGMWBHNlcGkxW/+Eop2mVB4wHBYEREdTVAQU
    kxueO91P99e69B4rTeFz4NxcuLH/hKqtilkLMAkWBEVLRVkBAf//hKrBpE8LMAkWBEVQ
    Uk8BAf//hKrNikMLMAkWBEVTRUMBAf8EggEAbK5NaOsSwbiS5vchzkdkBqTfALyuAkNn
    I6Q46EkxpbYMGw6BpnsYWfDV72y9BMNa9NzOHp8kC3eREsV/ClXag8Fa30plGi0LWrhO
    RDQjxTnmjUgi9eya1vRFjH2aJCRuh2j1p30hmw5fbEEKrM9Pzy9bfTSLrs8AGPr1WQfG
    Di2j/PCp4Mz63psGZyn+NzTHBz1BBeQ+/yxvVjdSiusQ8Ipub/a2XyMJE5S5el9gT2p1
    9PVTGXMAJHuWsNzzbLrR44z6yt/qfBsLdjU1TBHjkVtiEfwAkseakwScOO7b9oWK02SF
    P1OI7t+Tav+L9KpldICuErg9OFeBe+q3caMdrDCCCNYwggP4MIIC4KADAgECAgEQMA0G
    CSqGSIb3DQEBBQUAMGIxCzAJBgNVBAYTAlVTMRMwEQYDVQQKEwpBcHBsZSBJbmMuMSYw
    JAYDVQQLEx1BcHBsZSBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eTEWMBQGA1UEAxMNQXBw
    bGUgUm9vdCBDQTAeFw0wNzAxMDUxOTIxNTlaFw0yMjAxMDUxOTIxNTlaMH4xCzAJBgNV
    BAYTAlVTMRMwEQYDVQQKEwpBcHBsZSBJbmMuMSYwJAYDVQQLEx1BcHBsZSBDZXJ0aWZp
    Y2F0aW9uIEF1dGhvcml0eTEyMDAGA1UEAxMpQXBwbGUgU2VjdXJlIEJvb3QgQ2VydGlm
    aWNhdGlvbiBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+
    8t3aZTmwcuMDhIH0VsnRoUq7yAQB80YNleE3lQppR8bEjHk+R1UGsgYU636k9SP+QjWY
    7zQFzprTrZTQog/C0rQESEwjWlvHC51i0/PjaxD+lwhXxhJ2dxmyxsMsmO23KYfk3Bi2
    5fO6E/uytrdn2cvfb6WTPe16k2e0/TQW5ACrC7dOH1rWA2g+crYUMDoMZJegRiJ5G3cs
    Wy6Q4BHcFqPhyPeEsk/cSzoK1RJ+3BE/+hFzZRpJcKB+dYK0PCsvVd8wiLF1TUXcBygt
    SjqF/Z+VPiK6nEb3t2h7s5TVQj4Fszj4Z3lIjGwfi77u7VQF1aMLWH14DySpodwKdOr3
    AgMBAAGjgZwwgZkwDgYDVR0PAQH/BAQDAgGGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0O
    BBYEFEk9NlPJ1xXhhmFOrKurGFZjXcPGMB8GA1UdIwQYMBaAFCvQaUeUdgn+9GuNLkCm
    90dNfwheMDYGA1UdHwQvMC0wK6ApoCeGJWh0dHA6Ly93d3cuYXBwbGUuY29tL2FwcGxl
    Y2Evcm9vdC5jcmwwDQYJKoZIhvcNAQEFBQADggEBADTFDMUOWREvpsKfMnjnZDJp263C
    Jcq3R4O3kjxxU6CyrTCVgFC9bV9M3M54DUxJEFA4EDW/RYGsZlgsISP4ll6A6dPGTP2F
    rjlh9iiqRO0Vmz9HwFesZxyMzdSTjU/balSne0JbD5nG1zirUqehgx2FMHTqDR3aaISP
    4oR+y7lBbtWfqEK1/zO2cX/qo7ndSQNghXYQPo6o4TbjEt2FbO1mU7BbSJsvf/bKHPBd
    mC10rfBIR8XhmmeyIg+wDgKg4bpqYrm0tXH0JeGz5aDtyBpAtfgxFQWkXDgjTJCdRwOA
    gNQykEWPD6+b/ALu7cvmMfafFeZ9K1dDDuIPoaCtidowggTWMIIDvqADAgECAgICBTAN
    BgkqhkiG9w0BAQUFADB+MQswCQYDVQQGEwJVUzETMBEGA1UEChMKQXBwbGUgSW5jLjEm
    MCQGA1UECxMdQXBwbGUgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkxMjAwBgNVBAMTKUFw
    cGxlIFNlY3VyZSBCb290IENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTEyMTIxNDAx
    NTkyOVoXDTIyMTIxNTAxNTkyOVowZjELMAkGA1UEBhMCVVMxEzARBgNVBAoTCkFwcGxl
    IEluYy4xDDAKBgNVBAsTA0VUUzE0MDIGA1UEAxMrUzVMODk2MC1Uc3NMaXZlLU1hbmlm
    ZXN0S2V5LVJldkItRGF0YUNlbnRlcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
    ggEBAMQjdGIH4duqqQ+KD7kwha8vXeGPOPU8VlVWSddQsDbBf9VBsJWgn/ryI5P8k3DU
    vhEaH1+v9AxgLo619J1X3znSBhL630UFT5q2H9OY3XoC54ljT79fUrpmj3lB7WuVr6cq
    4Fgi13xQrUWnfPPYnA9pKup+LpTrzCo80gKKMr25Dnvb+lFmrWRg04zDrQEfGBX2saqt
    gzxQss+pnOkMTR/ktqyib2Yq2ZAoWXMkht1xZoNS8c1yuchB2R5zsvezOMYvUK3u0ELU
    5MkMPT21gkUDUEDZStiENVIRwWSBkuRBYoLP8PiVEoY11FoULyoYMDQWanGJh7PFOql6
    LyFAMYECAwEAAaOCAXQwggFwMAsGA1UdDwQEAwIHgDAdBgNVHQ4EFgQUo/bWm8Rmbp9W
    rqiAAV7Le4D6jsEwHwYDVR0jBBgwFoAUST02U8nXFeGGYU6sq6sYVmNdw8YwggEfBgoq
    hkiG92NkBgEPAQH/BIIBDDGCAQj/hOqFnFCBtjCBsxYETUFOUDGBqv+EkrmGSAwwChYE
    Qk5DSKACBQD/hJK9pEQMMAoWBEJPUkSgAgUA/4SalaBPCzAJFgRDRVBPAgEB/4SaoZJQ
    DTALFgRDSElQAgMAiWD/hJrBpE8MMAoWBENQUk+gAgUA/4SazYpDDDAKFgRDU0VDoAIF
    AP+Eqo2SRAwwChYERUNJRKACBQD/hZqRnk0LMAkWBFNET00CAQH/h5u53m4MMAoWBHNu
    b26gAgUA/4T6iZRQQzBBFgRPQkpQMTn/hKKdplQMMAoWBERHU1SgAgUA/4SqwaRPDDAK
    FgRFUFJPoAIFAP+Eqs2KQwwwChYERVNFQ6ACBQAwDQYJKoZIhvcNAQEFBQADggEBAA8+
    7PBRIkKQ78YmiRQTDBUI6AgXuQsfOqvPl1g/rcgAXhng/x3ip8BEC/aLKpOIBp1Xvr18
    ZPSAtsAcUMyL85WH1tejgPnqtCdDA9jT+KM17SJd+27KqTH9Vk566D/OCsTg4XWKGxli
    SDI7xq+RDmHF8sA/NMv3xGQXz/LMkvlTd+s0VfnraytAi8Unt+mJgqwZrSPCSNV9pJOm
    KaydeJRd5ZoGjcjOff8MZLg2VNARg4ALgs3z5VNmm4KkVdpDgSzVVrCjexsdjVe0FyTu
    bTK9h94rq00CPjT6UlQM1muDUhPFZHCGn3LKRgmdpZ/rXdBfuM+k9KapLARera1SvGg=
    </data>
</dict>
</plist>
Received SHSH blobs
Using cached filesystem from './iPhone_4.0_64bit_11.0_15A372_Restore/058-70297-264.dmg'
DEBUG: tss_response_get_path_by_entry: No entry 'iBEC' in TSS response
NOTE: No path for component iBEC in TSS, will fetch from build_identity
Extracting iBEC.iphone6.RELEASE.im4p...
Personalizing IMG4 component iBEC...
Sending iBEC (689879 bytes)...
opening device 05ac:1281...
found device with ECID 0000053489b65d30
Setting to configuration 1
Setting to interface 0:0
Recovery Mode Environment:
iBoot build-version=iBoot-4076.1.44
iBoot build-style=RELEASE
Sending AppleLogo...
DEBUG: tss_response_get_path_by_entry: No entry 'AppleLogo' in TSS response
NOTE: No path for component AppleLogo in TSS, will fetch from build_identity
Extracting applelogo@2x~iphone.im4p...
Personalizing IMG4 component AppleLogo...
Sending AppleLogo (11639 bytes)...
ramdisk-size=0x10000000
DEBUG: tss_response_get_path_by_entry: No entry 'RestoreRamDisk' in TSS response
NOTE: No path for component RestoreRamDisk in TSS, will fetch from build_identity
Extracting 058-59982-349.dmg...
Personalizing IMG4 component RestoreRamDisk...
Sending RestoreRamDisk (59102230 bytes)...
DEBUG: tss_response_get_path_by_entry: No entry 'RestoreDeviceTree' in TSS response
NOTE: No path for component RestoreDeviceTree in TSS, will fetch from build_identity
Extracting DeviceTree.n53ap.im4p...
Personalizing IMG4 component RestoreDeviceTree...
Sending RestoreDeviceTree (108047 bytes)...
DEBUG: tss_response_get_path_by_entry: No entry 'RestoreKernelCache' in TSS response
NOTE: No path for component RestoreKernelCache in TSS, will fetch from build_identity
Extracting kernelcache.release.iphone6...
Personalizing IMG4 component RestoreKernelCache...
Sending RestoreKernelCache (13022714 bytes)...
About to restore device... 
Waiting for device...
Attempt 1 to connect to restore mode device...
Attempt 2 to connect to restore mode device...
Attempt 3 to connect to restore mode device...
Attempt 4 to connect to restore mode device...
Attempt 5 to connect to restore mode device...
Attempt 6 to connect to restore mode device...
Attempt 7 to connect to restore mode device...
restore_is_current_device: Connected to com.apple.mobile.restored, version 15
Attempt 8 to connect to restore mode device...
Device 69a672f8de70167589f21edb0970f60fb3b3d272 is now connected in restore mode...
Connecting now...
Connected to com.apple.mobile.restored, version 15
Device 69a672f8de70167589f21edb0970f60fb3b3d272 has successfully entered restore mode
Hardware Information:
BoardID: 2
ChipID: 35168
UniqueChipID: 5723206868272
ProductionMode: true
Previous restore exit status: 0x100
Starting FDR listener thread
Connecting to FDR client at port 1082
About to do ctrl handshake
FDR sending 89 bytes:
common.c:printing 287 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>BeginCtrl</string>
    <key>CtrlProtoVersion</key>
    <integer>2</integer>
</dict>
</plist>
FDR Sent 89 bytes
FDR Received 105 bytes
common.c:printing 334 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>BeginCtrl</string>
    <key>CtrlProtoVersion</key>
    <integer>2</integer>
    <key>ConnPort</key>
    <integer>49156</integer>
</dict>
</plist>
Ctrl handshake done (ConnPort = 49156)
FDR 0x3475440 waiting for message...
About to send NORData...
DEBUG: tss_response_get_path_by_entry: No entry 'LLB' in TSS response
NOTE: Could not get LLB path from TSS data, will fetch from build identity
Found firmware path Firmware/all_flash
ERROR: zip_name_locate: Firmware/all_flash/manifest
Getting firmware manifest from build identity
Extracting LLB.iphone6.RELEASE.im4p...
Personalizing IMG4 component LLB...
Extracting applelogo@2x~iphone.im4p...
Personalizing IMG4 component AppleLogo...
Extracting batterycharging0@2x~iphone.im4p...
Personalizing IMG4 component BatteryCharging0...
Extracting batterycharging1@2x~iphone.im4p...
Personalizing IMG4 component BatteryCharging1...
Extracting batteryfull@2x~iphone.im4p...
Personalizing IMG4 component BatteryFull...
Extracting batterylow0@2x~iphone.im4p...
Personalizing IMG4 component BatteryLow0...
Extracting batterylow1@2x~iphone.im4p...
Personalizing IMG4 component BatteryLow1...
Extracting glyphplugin@1136~iphone-lightning.im4p...
Personalizing IMG4 component BatteryPlugin...
Extracting DeviceTree.n53ap.im4p...
Personalizing IMG4 component DeviceTree...
Extracting recoverymode@1136~iphone-lightning.im4p...
Personalizing IMG4 component RecoveryMode...
Extracting iBoot.iphone6.RELEASE.im4p...
Personalizing IMG4 component iBoot...
Extracting sep-firmware.n53.RELEASE.im4p...
Personalizing IMG4 component RestoreSEP...
Extracting sep-firmware.n53.RELEASE.im4p...
Personalizing IMG4 component SEP...
common.c:supressed printing 15195321 bytes plist...
Sending NORData now...
Done sending NORData
About to send RootTicket...
Sending RootTicket now...
Done sending RootTicket
Waiting for NAND (28)
Checking filesystems (15)
Checking filesystems (15)
FDR 0x3475440 got sync message
Connecting to FDR client at port 49156
FDR Received 131 bytes
Got device identifier 6b8b4567327b23c6643c9869
FDR connected in reply to sync message, starting command thread
FDR 0x3475440 waiting for message...
FDR 0x7fcb0c001a50 waiting for message...
FDR 0x7fcb0c001a50 got plist message
FDR Received 59 bytes
FDR sending 52 bytes:
common.c:printing 214 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Pong</key>
    <true/>
</dict>
</plist>
FDR Sent 52 bytes
FDR 0x7fcb0c001a50 terminating...
Unmounting filesystems (29)
Unmounting filesystems (29)
Creating partition map (11)
Creating filesystem (12)
About to send filesystem...
Connecting to ASR
Received 272 bytes:
common.c:printing 272 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Checksum Chunks</key>
    <true/>
    <key>Command</key>
    <string>Initiate</string>
</dict>
</plist>
Connected to ASR
Validating the filesystem
Received 336 bytes:
common.c:printing 336 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>1276</integer>
    <key>OOB Offset</key>
    <integer>2420926530</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>72</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>64</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 338 bytes:
common.c:printing 338 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>229788</integer>
    <key>OOB Offset</key>
    <integer>2420697506</integer>
</dict>
</plist>
Received 336 bytes:
common.c:printing 336 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>1276</integer>
    <key>OOB Offset</key>
    <integer>2420926530</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>72</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>64</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 338 bytes:
common.c:printing 338 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>229788</integer>
    <key>OOB Offset</key>
    <integer>2420697506</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>32</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 328 bytes:
common.c:printing 328 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>270</integer>
    <key>OOB Offset</key>
    <integer>110</integer>
</dict>
</plist>
Received 326 bytes:
common.c:printing 326 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>78</integer>
    <key>OOB Offset</key>
    <integer>32</integer>
</dict>
</plist>
Received 326 bytes:
common.c:printing 326 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>78</integer>
    <key>OOB Offset</key>
    <integer>32</integer>
</dict>
</plist>
Received 329 bytes:
common.c:printing 329 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>4837</integer>
    <key>OOB Offset</key>
    <integer>380</integer>
</dict>
</plist>
Received 326 bytes:
common.c:printing 326 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>78</integer>
    <key>OOB Offset</key>
    <integer>32</integer>
</dict>
</plist>
Received 328 bytes:
common.c:printing 328 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>270</integer>
    <key>OOB Offset</key>
    <integer>110</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>32</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 333 bytes:
common.c:printing 333 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>97512</integer>
    <key>OOB Offset</key>
    <integer>919857</integer>
</dict>
</plist>
Received 336 bytes:
common.c:printing 336 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>110839</integer>
    <key>OOB Offset</key>
    <integer>53778659</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>18654</integer>
    <key>OOB Offset</key>
    <integer>53889498</integer>
</dict>
</plist>
Received 338 bytes:
common.c:printing 338 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>509476</integer>
    <key>OOB Offset</key>
    <integer>2419742531</integer>
</dict>
</plist>
Received 338 bytes:
common.c:printing 338 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>373204</integer>
    <key>OOB Offset</key>
    <integer>2375124065</integer>
</dict>
</plist>
Received 334 bytes:
common.c:printing 334 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>9667</integer>
    <key>OOB Offset</key>
    <integer>53958708</integer>
</dict>
</plist>
Received 336 bytes:
common.c:printing 336 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>1276</integer>
    <key>OOB Offset</key>
    <integer>2420926530</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>72</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 335 bytes:
common.c:printing 335 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>512</integer>
    <key>OOB Offset</key>
    <integer>2420927294</integer>
</dict>
</plist>
Received 325 bytes:
common.c:printing 325 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>64</integer>
    <key>OOB Offset</key>
    <integer>0</integer>
</dict>
</plist>
Received 338 bytes:
common.c:printing 338 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>229788</integer>
    <key>OOB Offset</key>
    <integer>2420697506</integer>
</dict>
</plist>
Received 338 bytes:
common.c:printing 338 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>OOBData</string>
    <key>OOB Length</key>
    <integer>229788</integer>
    <key>OOB Offset</key>
    <integer>2420697506</integer>
</dict>
</plist>
Received 234 bytes:
common.c:printing 234 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>Command</key>
    <string>Payload</string>
</dict>
</plist>
Filesystem validated
Sending filesystem now...
[====                                              ]   6.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[==========                                        ]  18.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[================                                  ]  30.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[======================                            ]  43.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[=============================                     ]  57.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[=======================================           ]  76.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[===============================================   ]  93.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[==================================================] 100.0%
Done sending filesystem
Verifying restore (14)
[=================================                 ]  66.0%FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
[==================================================] 100.0%
No data to read
FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
No data to read
Checking filesystems (15)
Checking filesystems (15)
Mounting filesystems (16)
Mounting filesystems (16)
About to send KernelCache...
DEBUG: tss_response_get_path_by_entry: No entry 'KernelCache' in TSS response
NOTE: No path for component KernelCache in TSS, will fetch from build_identity
Extracting kernelcache.release.iphone6...
Personalizing IMG4 component KernelCache...
Sending KernelCache now...
Done sending KernelCache
Installing kernelcache (27)
Unknown data request 'DeviceTree' received
common.c:printing 291 bytes plist:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>DataType</key>
    <string>DeviceTree</string>
    <key>MsgType</key>
    <string>DataRequestMsg</string>
</dict>
</plist>
FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
No data to read
No data to read
FDR 0x3475440 timeout waiting for command
FDR 0x3475440 waiting for message...
No data to read
No data to read
[...]
daniel-bluesea commented 7 years ago

@ankitrwt according to your debug info you attached you used again! the -C flag that @Orbif suggested you to omit.

also, (i think) you can attached and/or summarize the important debug info, no need for full output for every post you're writing thanks :)

nikias commented 7 years ago

@daniel-bluesea @Orbif he did specify a cache path "." which is the current directory and that has nothing to do with the actual problem. I just saw you are trying from recovery mode. I will try that and also from DFU with my test device.

nikias commented 7 years ago

@ankitrwt are you sure you are using the latest code? At least the iPad Air 2 should restore, it is very similar to the iPad mini 4 which worked for me.

ankitrwt commented 7 years ago

yes my all iphones are in recory mode but i started restoring thm in normal mode @nikias

ankitrwt commented 7 years ago

and yes i am using all latest codes from github.com/libimobiledevice

segg21 commented 7 years ago

I need help aswell. I am running futurerestore on Ubuntu but failed to connect to gp.apple.com socket.

I seen that I need to install iTunes however I am on Ubuntu. Any way around this? Thanks

$ ./futurerestore_linux -t blob.shsh2 -b Mav10-5.24.00.Release.bbfw -p BuildManifest.plist -s sep-firmware.n61.RELEASE.im4p -m BuildManifest.plist iPhone_4.7_10.0.2_14A456_Restore.ipsw
Version: b99eb8140d8e6c23f34e950102bb79e61c72384d - 152
Libipatcher Version: a6cc5cfa8d421987d06f6157130ef3c75391efa4 - 39
Odysseus Support: yes
[INFO] 64bit device detected
futurerestore init done
reading ticket blob.shsh2 done
[TSSC] opening BuildManifest.plist
WARNING: Unable to find BbSkeyId node
[TSSR] User specified not to request a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: <html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>Shield</center>
</body>
</html>

Sending TSS request attempt 1... Request URL set to https://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 443: Connection timed out
Sending TSS request attempt 2... Request URL set to https://17.151.36.30/TSS/controller?action=2
ankitrwt commented 7 years ago

@LegitSoulja TSS was not working on Monday, its working fine now...

now its stuck on FDR 0x3475xxx timeout waiting for command FDR 0x3475xxx waiting for message... No data to read

and shows error message ERROR: unable to receive message from FDR 0x3475xxx (-4). 0/2 bytes

any suggestions? @nikias @LegitSoulja

segg21 commented 7 years ago

@ankitrwt i'll switch back over and run another test.

segg21 commented 7 years ago

@ankitrwt I got a different result this time

Version: b99eb8140d8e6c23f34e950102bb79e61c72384d - 152
Libipatcher Version: a6cc5cfa8d421987d06f6157130ef3c75391efa4 - 39
Odysseus Support: yes
[INFO] 64bit device detected
futurerestore init done
reading ticket blob.shsh2 done
[TSSC] opening BuildManifest.plist
WARNING: Unable to find BbSkeyId node
[TSSR] User specified not to request a Baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=94&MESSAGE=This device isn't eligible for the requested build.
ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)
Sending TSS request attempt 1... [Error] sep firmware isn't signed
Failed with errorcode=-3
segg21 commented 7 years ago

Wait how can I check my blob and see what firmware it was on at the time?

I used this https://tsssaver.1conan.com/check.php and it was invalid.

nikias commented 7 years ago

@LegitSoulja can you please keep futurerestore off this ticket and bug tracker? This is solely for idevicerestore. Thanks.

nikias commented 7 years ago

The original issue with TSS is no longer a problem. Is the FDR thing still broken? Because for me, it is not.

nikias commented 7 years ago

@ankitrwt while checking your log output I came across this error:

Unknown data request 'DeviceTree' received

Which is proof that you are not using the latest code. This was fixed on June 8th with commit b99782b2. Please update your code.

nikias commented 6 years ago

Closing. This issue was not caused by idevicerestore.

mailinglists35 commented 4 years ago

if anyone hits this in 2019:

find ip of gs.apple.com (it varies according to where you are in the world, for me in europe was:)

$ host gs.apple.com
gs.apple.com is an alias for gs.apple.com.akadns.net.
gs.apple.com.akadns.net has address 17.137.163.1

put it in /etc/hosts

$ grep apple /etc/hosts
17.137.163.1 gs.apple.com

run idevicerestore again.

somehow idevicerestore insisted in connecting to a different IP than the one returned by dns

Request URL set to https://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 1... Request URL set to https://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 443: Connection timed out
Sending TSS request attempt 2... Request URL set to https://17.151.36.30/TSS/controller?action=2
Failed to connect to 17.151.36.30 port 443: Connection timed out
Sending TSS request attempt 3... Request URL set to http://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 4... Request URL set to http://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 80: Connection timed out
Sending TSS request attempt 5... Request URL set to http://17.151.36.30/TSS/controller?action=2
Failed to connect to 17.151.36.30 port 80: Connection timed out
Sending TSS request attempt 6... Request URL set to https://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 7... Request URL set to https://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 443: Connection timed out
Sending TSS request attempt 8... Request URL set to https://17.151.36.30/TSS/controller?action=2
^C

after that,

Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received

$ sudo -E dnf info idevicerestore Last metadata expiration check: 1:35:57 ago on Sb 14 dec 2019 09:48:06 +0200. Installed Packages Name : idevicerestore Version : 0.0 Release : 1.gitc09c07b.fc31 Architecture : x86_64 Size : 213 k Source : idevicerestore-0.0-1.gitc09c07b.fc31.src.rpm Repository : @System From repo : copr:copr.fedorainfracloud.org:r3pek:idevicerestore Summary : Tool to restore firmware files to iOS devices URL : https://github.com/libimobiledevice/idevicerestore.git License : LGPLv3 Description : The idevicerestore tool allows to restore firmware files to iOS devices. : : It is a full reimplementation of all granular steps which are performed during : restore of a firmware to a device. : : In general, upgrades and downgrades are possible, however subject to : availability of SHSH blobs from Apple for signing the firmware files.

mailinglists35 commented 4 years ago

somehow idevicerestore insisted in connecting to a different IP than the one returned by dns

apparently the two apple activation servers IP are hardcoded in https://github.com/libimobiledevice/idevicerestore/blob/master/src/tss.c

$ strings /usr/bin/idevicerestore|grep -- '://17.' https://17.171.36.30/TSS/controller?action=2 https://17.151.36.30/TSS/controller?action=2 http://17.171.36.30/TSS/controller?action=2 http://17.151.36.30/TSS/controller?action=2

Per apple support document, they only mention gs.apple.com https://support.apple.com/en-us/HT201999

So instead of mangling the gs.apple.com hosts entry, just firewall the other two, and the dns resolution will take care of the rest:

Request URL set to https://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 1... Request URL set to https://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 443: Connection refused
Sending TSS request attempt 2... Request URL set to https://17.151.36.30/TSS/controller?action=2
Failed to connect to 17.151.36.30 port 443: Connection refused
Sending TSS request attempt 3... Request URL set to http://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 4... Request URL set to http://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 80: Connection refused
Sending TSS request attempt 5... Request URL set to http://17.151.36.30/TSS/controller?action=2
Failed to connect to 17.151.36.30 port 80: Connection refused
Sending TSS request attempt 6... Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 7... response successfully received
lalaRLH commented 6 months ago

Still an issue in 2024. Thanks to the ignorant response to immediately mark this as not an issue with the code. Whilst this indeed worked fine for me in the United States, it fails in the UK as the domain record here points to a different IP. It’s not aligned to Apple guidelines to hardcode the IP, rather it’s very clear to resolve the host name. So I’m made up for whoever is sat in the United States but for the rest of us using this has been infinitely problematic for years. I have built and compiled entirely from source.

lalaRLH commented 6 months ago

if anyone hits this in 2019:

find ip of gs.apple.com (it varies according to where you are in the world, for me in europe was:)

$ host gs.apple.com
gs.apple.com is an alias for gs.apple.com.akadns.net.
gs.apple.com.akadns.net has address 17.137.163.1

put it in /etc/hosts

$ grep apple /etc/hosts
17.137.163.1 gs.apple.com

run idevicerestore again.

somehow idevicerestore insisted in connecting to a different IP than the one returned by dns

Request URL set to https://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 1... Request URL set to https://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 443: Connection timed out
Sending TSS request attempt 2... Request URL set to https://17.151.36.30/TSS/controller?action=2
Failed to connect to 17.151.36.30 port 443: Connection timed out
Sending TSS request attempt 3... Request URL set to http://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 4... Request URL set to http://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 80: Connection timed out
Sending TSS request attempt 5... Request URL set to http://17.151.36.30/TSS/controller?action=2
Failed to connect to 17.151.36.30 port 80: Connection timed out
Sending TSS request attempt 6... Request URL set to https://gs.apple.com/TSS/controller?action=2
Empty reply from server
Sending TSS request attempt 7... Request URL set to https://17.171.36.30/TSS/controller?action=2
Failed to connect to 17.171.36.30 port 443: Connection timed out
Sending TSS request attempt 8... Request URL set to https://17.151.36.30/TSS/controller?action=2
^C

after that,

Request URL set to https://gs.apple.com/TSS/controller?action=2
Sending TSS request attempt 1... response successfully received

$ sudo -E dnf info idevicerestore Last metadata expiration check: 1:35:57 ago on Sb 14 dec 2019 09:48:06 +0200. Installed Packages Name : idevicerestore Version : 0.0 Release : 1.gitc09c07b.fc31 Architecture : x86_64 Size : 213 k Source : idevicerestore-0.0-1.gitc09c07b.fc31.src.rpm Repository : @System From repo : copr:copr.fedorainfracloud.org:r3pek:idevicerestore Summary : Tool to restore firmware files to iOS devices URL : https://github.com/libimobiledevice/idevicerestore.git License : LGPLv3 Description : The idevicerestore tool allows to restore firmware files to iOS devices. : : It is a full reimplementation of all granular steps which are performed during : restore of a firmware to a device. : : In general, upgrades and downgrades are possible, however subject to : availability of SHSH blobs from Apple for signing the firmware files.

Thank you so much.

nikias commented 6 months ago

@lalaRLH I wouldn't say "ignorant", and also not "infinitely problematic for years" since I have been using this for years myself, mostly from Germany but also other non-US countries, and I know many people using this all over the globe have never had an issue with that specifically. Otherwise the issue tracker would explode with complaints... I am really sure the problem is by far only affecting a small amount of people.

The actual code to handle the actual connections for the request is performed by libcurl which is a separate library, and might be affected by some system settings like a proxy or similar things. So in general the statement that idevicerestore is not to blame here is true. Second, the hardcoded IP addresses that @mailinglists35 pointed out are not used as a first attempt, instead https://gs.apple.com is being used as the very first one, you can also see from the output:

Request URL set to https://gs.apple.com/TSS/controller?action=2
Empty reply from server

Why the server, which is the official one, is giving an empty reply, needs to be investigated to understand what is happening. The other addresses are supposed to act as a fallback, but looks like they are no longer valid. We might want to investigate and add a few more recent ones, just in case the DNS resolution doesn't work. But this problem will hit us again in the future probably, so maybe not the best choice.

I would suggest to add

diff --git a/src/tss.c b/src/tss.c
index 80591e7..904204d 100644
--- a/src/tss.c
+++ b/src/tss.c
@@ -1548,6 +1548,7 @@ plist_t tss_request_send(plist_t tss_request, const char* server_url_string)

                /* disable SSL verification to allow download from untrusted https locations */
                curl_easy_setopt(handle, CURLOPT_SSL_VERIFYPEER, 0);
+               curl_easy_setopt(handle, CURLOPT_VERBOSE, 1);

                curl_easy_setopt(handle, CURLOPT_ERRORBUFFER, curl_error_message);
                curl_easy_setopt(handle, CURLOPT_WRITEFUNCTION, (curl_write_callback)&tss_write_callback);

So we can see what is happening. Also, before fiddling with firewall or hosts files, there is a command line switch that can be used:

idevicerestore --server https://17.137.163.1/TSS/controller?action=2 IPSWFILE
lalaRLH commented 6 months ago

All points noted and they’re valid, it’s something I only ever see when I’m in the UK. I’ve got a stack of devices to DFU and I find the debug output extremely helpful to identify whether a users Mac is doing anything odd, so thank you. It’s extra comfort to see step by step what’s occurring if that users had a threat notification.

It absolutely works fine in the US.

All of this being said the UK’s mass market ISPs all supply free equipment and some make it extremely difficult / often against the terms of service to use something else. They seemingly issue £300 routers wifi5/6 routers on internet plans around £25 a month. Seems pretty great until you observe DNS interception from hell. My newly switched ISP here sends most traffic to its usual local DNS but at times randomly picks traffic to forward instead to Trend Micro and/or Amazon cloud. Why?!

DNS often hits a dead revolver in Manchester which then reroutes to Amsterdam after timeouts, via a partner network and back down from there into London, where it’s DNS is processed via the London internet exchange.

I apologise for jumping the gun on this. I’d be not in the least bit surprised if this wonderfully engineered setup was triggering concerns over the authenticity of data requests.

https://community.virginmedia.com/t5/Networking-and-WiFi/Hub-5-Intercepting-all-DNS-queries/td-p/5378038

Thanks for your suggestion I will give it a go.

nikias commented 6 months ago

Also something I am working on currently is splitting out the TSS code to a separate library, so I am open to figuring out the best solution for everyone here :)

nikias commented 6 months ago

I see, that makes a lot of sense now. I am not sure how to best handle this, but maintaining a list of official Apple IP addresses might be something. However the ones hardcoded actually are not reachable for me at all and then there is

❯ host gs.apple.com
gs.apple.com is an alias for gs.apple.com.v.aaplimg.com.
gs.apple.com.v.aaplimg.com has address 17.111.103.15

Maybe I just need to stick with the official hostname and have people manually specify an IP if there are any problems...

Or maybe we can try adding some aliases. This one for example works:

❯ host gs.apple.com.akadns.net
gs.apple.com.akadns.net has address 17.171.47.17
lalaRLH commented 6 months ago

I’m a fan of this site to identify the global footprint, probably as it looks kind of neat with the map. I can’t find it but there’s another one which also shows uptime overtime.

https://uptime.com/freetools/global-uptime-test/665769/gs.apple.com

If you really want detail, web check is pretty revealing https://web-check.xyz/

lalaRLH commented 6 months ago

I find the Apple developer stuff logical in general and it applies often much more broadly. Some info here: https://developer.apple.com/documentation/technotes/tn3151-choosing-the-right-networking-api#DNS-alternatives

note: I’m almost certain my issues are using ISP kit and working as an infosec manager everything I own is loaded with encryption. So from my side we’re good on this point, but always happy to talk networking! 😝