search

libimobiledevice / libideviceactivation

A library to handle the activation process of iOS devices
https://libimobiledevice.org
GNU Lesser General Public License v2.1
294 stars 135 forks source link

I have Service but i cant activate! HELP #25

Closed ginsudev closed 5 years ago

ginsudev commented 7 years ago

uhh, this is the first time i have ever used libideviceactivation, and the reason i am using it, is because i downgraded with iDeviceReRestore to iOS 9.2.1 on iPhone 5c (5,4) And i cannot activate

Any help??? Thank you.

iDeviceActivate:

noah@noah:~/Desktop/libideviceactivation/tools$ sudo ./ideviceactivation activate -u 6e12bc29c2da97d8ab599649b45f6a4d82e2be2b -d
[sudo] password for noah: 
idevice_activation_request_new_from_lockdownd: Unable to get MEID from lockdownd
idevice_activation_request_new_from_lockdownd: Unable to get IMSI from lockdownd
*   Trying 17.149.240.65...
* Connected to albert.apple.com (17.149.240.65) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/certs/ca-certificates.crt
  CApath: /etc/ssl/certs
* SSL connection using TLSv1.2 / AES128-GCM-SHA256
* ALPN, server did not agree to a protocol
* Server certificate:
*    subject: jurisdictionC=US; jurisdictionST=California; businessCategory=Private Organization; serialNumber=C0806592; C=US; postalCode=95014; ST=California; L=Cupertino; street=1 Infinite Loop; O=Apple Inc.; OU=GNCS Traffic Management; CN=albert.apple.com
*    start date: Feb 21 00:00:00 2017 GMT
*    expire date: Feb 21 23:59:59 2019 GMT
*    subjectAltName: albert.apple.com matched
*    issuer: C=US; O=Symantec Corporation; OU=Symantec Trust Network; CN=Symantec Class 3 EV SSL CA - G3
*    SSL certificate verify ok.
> POST /deviceservices/deviceActivation HTTP/1.1
Host: albert.apple.com
User-Agent: iOS Device Activator (MobileActivation-20 built on Jan 15 2012 at 19:07:28)
Accept: */*
Content-Length: 9048
Expect: 100-continue
Content-Type: multipart/form-data; boundary=------------------------b3a50e850c49739a

< HTTP/1.1 100 Continue
< HTTP/1.1 200 OK
< Server: Apache-Coyote/1.1
< Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
< Content-Type: application/x-buddyml
< Content-Length: 295
< Date: Tue, 04 Jul 2017 08:59:43 GMT
< 
* Connection #0 to host albert.apple.com left intact
<xmlui><navigationBar title="Activation Error" hidesBackButton="true"/><tableView><section/></tableView><tableView><section footer="Activation request could not be completed. Please press the home button to try again. If the problem persists, please contact customer care."/></tableView></xmlui>
Activation server reports errors.
    Activation Error

iDeviceInfo:

noah@noah:~/Desktop/libideviceactivation/tools$ ideviceinfo
ActivationState: Unactivated
ActivationStateAcknowledged: true
BasebandActivationTicketVersion: V2
BasebandCertId: 3554301762
BasebandChipID: 7282913
BasebandKeyHashInformation: 
 AKeyStatus: 2
 SKeyHash: 7MQEUyvzG4gjjZc7KsNNAVTS8g4=
 SKeyStatus: 0
BasebandMasterKeyHash: AEA5CCE143668D0EFB4CE1F2C94C966A6496C6AA
BasebandRegionSKU: BAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
BasebandSerialNumber: F+s96g==
BasebandStatus: BBInfoAvailable
BasebandVersion: 7.60.00
BluetoothAddress: d0:4f:7e:e5:4e:0b
BoardId: 14
BrickState: true
BuildVersion: 13D15
CPUArchitecture: armv7s
CarrierBundleInfoArray[1]: 
 0: 
  CFBundleIdentifier: com.apple.Telstra_au
  CFBundleVersion: 28.4
  IntegratedCircuitCardIdentity: 89610185000688432463
  InternationalMobileSubscriberIdentity: 505013420373635
  MCC: 505
  MNC: 01
  SIMGID1: //////////8=
  SIMGID2: //////////8=
CertID: 3554301762
ChipID: 35152
ChipSerialNo: F+s96g==
CompassCalibration: AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA==
DeviceClass: iPhone
DeviceColor: #3b3b3c
DeviceName: Noah’s iPhone
DieID: 1668091306390635984
EthernetAddress: d0:4f:7e:e5:4e:25
FirmwareVersion: iBoot-2817.20.26
FusingStatus: 3
GID1: ffffffffffffffff
GID2: ffffffffffffffff
HardwareModel: N49AP
HardwarePlatform: s5l8950x
HasSiDP: true
HostAttached: true
IntegratedCircuitCardIdentity: 89610185000688432463
InternationalMobileEquipmentIdentity: 358548055052969
InternationalMobileSubscriberIdentity: 505013420373635
MLBSerialNumber: FCC51920343FM7GGV
MobileSubscriberCountryCode: 
MobileSubscriberNetworkCode: 01
ModelNumber: MG152
NonVolatileRAM: 
 IONVRAM-SYNCNOW-PROPERTY: SU9OVlJBTS1TWU5DTk9XLVBST1BFUlRZ
 auto-boot: dHJ1ZQ==
 backlight-level: MTU0Ng==
 boot-args: 
 boot-breadcrumbs: IDAwMDMwMDBjKDAwMDAwMDAwKSAwMDAzMDAwZCAwMDAzMDAwYyg2OTYyNjU2MykgNDAzMzAwMDggNDAwMzAwMGUgPENPTU1JVD4gPEJPT1Q+IDAwMDMwMDBjKDAwMDAwMDAwKSAwMDAzMDAwZCAwMDAzMDAwYyg2OTYyNjU2MykgNDAzMzAwMDggNDAwMzAwMGUgPENPTU1JVD4gPEJPT1Q+IDAwMDMwMDBjKDAwMDAwMDAwKSAwMDAzMDAwZCAwMDAzMDAwYyg2OTYyNjU2MykgNDAzMzAwMDggNDAwMzAwMGUgPENPTU1JVD4gMDAwMTAwMDIgPENPTU1JVD4g
 oblit-begins: T2JsaXRUeXBlOiBPYmxpdGVyYXRlRGF0YVBhcnRpdGlvbi4gTm8gcmVhc29uIGdpdmVuLg==
 obliteration: aGFuZGxlX21lc3NhZ2U6IE9ibGl0ZXJhdGlvbiBDb21wbGV0ZQ==
PartitionType: 
PasswordProtected: true
PhoneNumber: +61 458 634 212
PkHash: 09pXQgM5cjY6TJJNOOzO//R5JuGKqjHElfshBbnxrhg=
ProductName: iPhone OS
ProductType: iPhone5,4
ProductVersion: 9.2.1
ProductionSOC: true
ProtocolVersion: 2
ProximitySensorCalibration: T00DAA0JSDgQAwAAAABeAQAAiQADAG0WZwMBAKTc3QLuAloACeuxAvAT+RoAAAB5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA=
RegionInfo: X/A
SBLockdownEverRegisteredKey: false
SIMGID1: /w==
SIMGID2: /w==
SIMStatus: kCTSIMSupportSIMStatusReady
SIMTrayStatus: kCTSIMSupportSIMTrayInsertedWithSIM
SerialNumber: FCCPN0HGFYWC
SoftwareBehavior: AQAAAAAAAAAAAAAAAAAAAA==
SoftwareBundleVersion: 
SupportedDeviceFamilies[1]: 
 0: 1
TelephonyCapability: true
TimeIntervalSince1970: 1499158873.804833
TimeZone: Australia/Sydney
TimeZoneOffsetFromUTC: 36000.000000
TrustedHostAttached: true
UniqueChipID: 2854980029832
UniqueDeviceID: 6e12bc29c2da97d8ab599649b45f6a4d82e2be2b
UseRaptorCerts: true
Uses24HourClock: false
WiFiAddress: d0:4f:7e:e5:3f:e5
WirelessBoardSerialNumber: 54178C403BC
kCTPostponementInfoPRIVersion: 0.1.161
kCTPostponementInfoPRLName: 0
kCTPostponementStatus: kCTPostponementStatusActivated
nikias commented 7 years ago

Ignore my question on #23, from this output I can see that you have a SIM card inserted. However the device is in 'BrickState'

BrickState: true

I suppose this is due to the usage of idevicererestore. If the device was on a higher iOS version the baseband firmware (e.g. from 10.x) might not be compatible anymore and so it won't activate. Weird though that it complains about missing IMSI because your output clearly shows it:

InternationalMobileSubscriberIdentity: 505013420373635
ginsudev commented 7 years ago

Hi, sorry I was sleeping. I have successfully downgraded my phone with idevicererestore before, but ever since 2 weeks ago, I have been getting this problem.

ginsudev commented 7 years ago

Do you have any idea what is causing this?

ginsudev commented 7 years ago

And I can activate without any problem on iOS 10.x.x

nikias commented 7 years ago

Hmm actually I just realized that BrickState: true is returned for all unactivated devices. So I am not sure what the problem here is exactly. If you can go to 10.x and back to 9.2.1 again it would be interesting to get the complete output of the activation for 10.x and then for 9.2.1 as comparison. Therefore it would be better if you could configure libimobiledevice with debug output (which is missing from the above output). In the libimobiledevice source tree run:

./autogen.sh --enable-debug-code
make && sudo make install

Then just pass -d to ideviceactivation as you did before.

ginsudev commented 7 years ago

I'll do this when I get home, thank you 😃

ginsudev commented 7 years ago

Here is iOS 9.2.1: https://ghostbin.com/paste/pmnst

iOS 10.3.2: https://ghostbin.com/paste/daqdp

nikias commented 7 years ago

Just to make sure, have you tried to activate 9.2.1 with iTunes? Apart from that, I checked the ActivationInfoXML data (which itself is also a plist) and the only difference is - except for the structure - the iOS and build version. I don't really think Apple matches the baseband information to the iOS version, but it's certainly something that Apple changed (or is checking now) on their servers. I am charging two of my older devices to see how they behave during activation...

ginsudev commented 7 years ago

Yes I have also tried activating with iTunes, no luck

nikias commented 7 years ago

Yeah I figured that's why you tried ideviceactivation in the first place, since activation usually works on-device. So you're not the only one having this problem as it seems: https://twitter.com/iFred09/status/883047164670246913 It seems like Apple is blocking activation of devices with the 'old' method. Starting with iOS 9.3 the new method can be used.

I will run some tests to figure this out...

ginsudev commented 7 years ago

Thank you for your help! :)

nikias commented 7 years ago

So I tested with an iPhone 5s. I can activate it with iOS 8.4.1, 9.2.1, 10.3.2 without problems. Not sure if it just started to work again. Can you retry it?

ginsudev commented 7 years ago

Sure i will try again today, and tell you how it goes.

ginsudev commented 7 years ago

Also, my SHSH blobs are Update Blobs, if that has something to do with it?

ginsudev commented 7 years ago

Ok i just restored back to 9.2.1, twice. The problem still occurs.

nikias commented 7 years ago

@noahlittle somehow, the guy on twitter reported that when he deletes the file /etc/ssl/certs/ca-certificates.crt it works for him.

ginsudev commented 7 years ago

I'll try that

ginsudev commented 7 years ago

No it didn't work 🙁

nikias commented 7 years ago

Do you get any activation lock (icloud lock) response from Apple's server?

ginsudev commented 7 years ago

I didn't, it looked like the same error :(

nikias commented 7 years ago

Can you try from a different IP address? Like, use a VPN so you contact Apple's server from another part of the world?

ginsudev commented 7 years ago

Sure, so setup a vpn on my pc, and use ideviceactivation?

RLCircuit commented 7 years ago

I'm having the same issue, here's my log:

idevice_activation_request_new_from_lockdownd: Unable to get MEID from lockdownd
idevice_activation_request_new_from_lockdownd: Unable to get IMSI from lockdownd
*   Trying 17.149.240.65...
* Connected to albert.apple.com (17.149.240.65) port 443 (#0)
* error reading ca cert file /etc/ssl/certs/ca-certificates.crt (Error while reading file.)
* found 524 certificates in /etc/ssl/certs
* ALPN, offering http/1.1
* SSL connection using TLS1.2 / RSA_AES_128_GCM_SHA256
*    server certificate verification SKIPPED
*    server certificate status verification SKIPPED
*    common name: albert.apple.com (matched)
*    server certificate expiration date OK
*    server certificate activation date OK
*    certificate public key: RSA
*    certificate version: #3
*    subject: 
*    start date: Tue, 21 Feb 2017 00:00:00 GMT
*    expire date: Thu, 21 Feb 2019 23:59:59 GMT
*    issuer: C=US,O=Symantec Corporation,OU=Symantec Trust Network,CN=Symantec Class 3 EV SSL CA - G3
*    compression: NULL
* ALPN, server did not agree to a protocol
> POST /deviceservices/deviceActivation HTTP/1.1
Host: albert.apple.com
User-Agent: iOS Device Activator (MobileActivation-20 built on Jan 15 2012 at 19:07:28)
Accept: */*
Content-Length: 8644
Expect: 100-continue
Content-Type: multipart/form-data; boundary=------------------------7e015c7847fab03d

< HTTP/1.1 100 Continue
< HTTP/1.1 200 OK
< Server: Apache-Coyote/1.1
< Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
< Content-Type: application/x-buddyml
< Content-Length: 295
< Date: Sun, 09 Jul 2017 22:57:42 GMT
< 
* Connection #0 to host albert.apple.com left intact
<xmlui><navigationBar title="Activation Error" hidesBackButton="true"/><tableView><section/></tableView><tableView><section footer="Activation request could not be completed. Please press the home button to try again. If the problem persists, please contact customer care."/></tableView></xmlui>
Activation server reports errors.
    Activation Error
nikias commented 7 years ago

@noahlittle yes. @RLCircuit can you rebuild libideviceactivation with latest code from git and run the command again? I added the HTTP body data to the debug output aswell, so I can see what actually gets transferred. Also, since the output might get really large, use gist or pastebin/ghostbin so the ticket isn't flooded with too much data...

RLCircuit commented 7 years ago

Here's the output now: https://ghostbin.com/paste/2q8tf

nikias commented 7 years ago

I moved the long text output to ghostbin. So this is really strange. For some reason I am receiving a (supposedly valid) ticket for the given device details for your device info, @RLCircuit. For @noahlittle, I am receiving a FindMyiPhone Form where I should put the icloud details. But in both cases I am not receiving the "Activation Error" you are seeing. As already suggested to @noahlittle, @RLCircuit: Try to use a VPN or proxy server so your request comes from a different country/IP range. I tried it from Germany.

RLCircuit commented 7 years ago

Nope, still gives the same issue. Connected from US, UK and Germany via VPN.

ginsudev commented 7 years ago

Hmm, I wonder if I sign out of iCloud before downgrading? Might work?

ginsudev commented 7 years ago

Nope, that didn't work.

nikias commented 7 years ago

Maybe your devices have an invalid date/time set?

RLCircuit commented 7 years ago

I have restored to iOS 10.3.2 and activated using this tool without problem or need to connect to a VPN, only post-downgrade 9.1 is giving me this issue. I have no other iOS 9 blobs to test with, sadly.

nikias commented 7 years ago

I think I know what is happening. @RLCircuit this is your FairPlayCertChain decoded:

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:33:af:07:04:02:af:00:02:af:00:00:03
    Signature Algorithm: sha1WithRSAEncryption
        Issuer: C=US, O=Apple Inc., OU=Apple Certification Authority, CN=Apple FairPlay Certification Authority
        Validity
            Not Before: Apr  2 15:17:28 2007 GMT
            Not After : Mar 31 15:17:28 2012 GMT
        Subject: C=US, O=Apple Inc., OU=Apple FairPlay, CN=iPhone.3333AF070402AF0002AF000003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (1024 bit)
                Modulus:
                    00:99:71:7c:2f:fb:f4:54:58:de:f2:18:84:82:80:
                    d1:91:d7:04:00:24:53:73:d8:c2:35:a4:b2:9b:eb:
                    f9:72:cb:22:d6:d7:d3:42:e5:3e:db:91:46:0e:b9:
                    86:8b:14:5e:5a:29:85:d3:df:1d:0e:89:41:36:e7:
                    d1:da:cb:fa:f1:2f:f3:78:72:c7:02:7f:9b:86:81:
                    31:29:5a:ea:af:fc:cc:92:47:6e:2e:8a:17:bd:6d:
                    2f:79:ac:a0:15:e3:eb:66:eb:8b:47:5f:cd:94:39:
                    30:9b:22:54:87:85:4f:19:6f:86:2b:ab:46:89:df:
                    9d:45:db:6a:0c:25:4c:61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Data Encipherment, Key Agreement
            X509v3 Basic Constraints: critical
                CA:FALSE
            X509v3 Subject Key Identifier:
                AF:17:C4:75:00:29:20:55:21:D2:E5:22:DC:B1:3D:D3:A7:11:B3:D0
            X509v3 Authority Key Identifier:
                keyid:FA:0D:D4:11:91:1B:E6:B2:4E:1E:06:49:94:11:DD:63:62:07:59:64

    Signature Algorithm: sha1WithRSAEncryption
         90:1b:2e:63:ad:12:1f:78:c3:13:1f:39:65:96:42:5f:00:13:
         4d:bf:11:e9:99:f5:65:65:66:e7:12:53:94:30:c1:3b:76:3c:
         50:b8:c2:0b:c9:a2:32:85:1f:71:14:8d:bb:d6:42:63:4f:31:
         d5:1a:63:a3:63:86:f9:bc:2e:38:32:20:24:ee:3f:67:09:2e:
         86:07:37:36:5c:b6:cc:22:db:34:29:3f:16:14:3e:4d:9f:52:
         cb:7d:d9:df:e5:49:c2:9f:b9:e9:0c:81:52:93:52:85:da:b0:
         83:69:02:c8:43:55:dc:c6:0e:a8:37:ca:ab:a6:f5:e2:80:dd:
         a7:8b

Look at the validity date. Maybe Apple started analyzing it? I sent from another device in my tests so in my case the validity range is until 2016 (which is also invalid, of course). Let me ask the guy on twitter for who it started working...

ginsudev commented 7 years ago

ideviceinfo -k ActivationInfo (iOS 10)

https://ghostbin.com/paste/43svd

nikias commented 7 years ago

So I got a sample from an iPhone 4s on iOS 9.2.1. It has EXACTLY the same FairPlayCertChain in the ActivationInfo as @noahlittle's device on 9.2.1 - so it must be something else that prevents the activation. It's certainly not the validity date...

ginsudev commented 7 years ago

Damn, I think apple has changed a bunch of stuff.. 😦

ginsudev commented 7 years ago

I just restored back to 9.2.1 and it just activated first try! not sure what the problem is but i think apple has fixed it??

nikias commented 7 years ago

I have no idea. Maybe it was some bug on their server and they fixed it. Can't really tell...

leftyfl1p commented 7 years ago

Having the same issue. Can activate just fine on 10.3.3 but downgrading to 9.2.1 with either idevicererestore or futurerestore results in the same error as above. Using update blobs.

10.3.3 activation success: https://ghostbin.com/paste/8bzkp 9.2.1 activation error: https://ghostbin.com/paste/wkucj 9.2.1 ideviceinfo activationinfo: https://ghostbin.com/paste/vbmwb

iPhone 5,1

/etc/ssl/certs/ca-certificates.crt does not exist for me on OSX 10.12. Also tried activating over a VPN from another country and still same error.

Dantee296 commented 7 years ago

@nikias 10.2.1 not woking latest ideviceactivation and apple configurator working please help

Dantee296 commented 7 years ago

its working with less than 10.0 and its working with greater than 10.3 i hv no idea why its just not working with 10.2 ... its working with itunes its working with apple configurator as well

iApeiron commented 7 years ago

The activation error is only affecting A6 and A6X devices below iOS 10.

@nikias Would replay of a cached response be a possible solution?

NigthWolf commented 7 years ago

hmmm should I make a bypass server for it guys

I think I can ;)

iphone-activationunbrickactivation-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
NigthWolf commented 7 years ago

ActivationRemoval-Respond.txt

NigthWolf commented 7 years ago

@leftyfl1p

ActivationRemoval-Respond.txt

NigthWolf commented 7 years ago

iOS version is not important other values are

leftyfl1p commented 7 years ago

@NigthWolf What am I supposed to do with this?

NigthWolf commented 7 years ago

that was just proof its not from iOS version

vege226 commented 6 years ago

@NigthWolf Today i was starting one in python. But really dont know about this issue, i'm new in activation method. How is the plan? Php server? Socket server?

nikias commented 6 years ago

Replaying is not really an option because there is a randomness/nonce involved that would change for every request.

vege226 commented 6 years ago

I used to think the same but for example this code to bypass itunes login work for me every time i use:

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"><html xmlns="http://www.apple.com/itms/" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta name="keywords" content="iTunes Store" /><meta name="description" content="iTunes Store" /><title>iPhone Activation</title><link href="https://static.ips.apple.com/ipa_itunes/stylesheets/shared/common-min.css" charset="utf-8" rel="stylesheet" /><link href="https://static.ips.apple.com/deviceservices/stylesheets/styles.css" charset="utf-8" rel="stylesheet" /><link href="https://static.ips.apple.com/ipa_itunes/stylesheets/pages/IPAJingleEndPointErrorPage-min.css" charset="utf-8" rel="stylesheet" /><script id="protocol" type="text/x-apple-plist"><plist version="1.0">
  <dict>
    <key>iphone-activation</key>
    <dict>
      <key>ack-received</key>
      <true/>
      <key>show-settings</key>
      <true/>
    </dict>
  </dict>
</plist></script><script>var protocolElement = document.getElementById("protocol");var protocolContent = protocolElement.innerText;iTunes.addProtocol(protocolContent);</script></head><body></body></html>

I use Fiddler, i got this just looking information in google.