I tried to update a 3gs 3.1.2 jb with blackra1n to iOS4 using Pwngtool and it got stuck on recovery mode. I have been unable to kick it out of it. It keeps going back to it no matter what. I dont think this one had the shsh files saved either.

Any suggestions?

I also tried to update it to 4.0 with iTunes and I get the following itunes message.

the iphone cannot be restored at this time because the the iphone software update server

If you have a 3GS and you do not have the SHSH cached with saurik or stored on your machine, you cannot downgrade to 3.1.2 or 3.1.3. Your only option is to restore to a factory locked 4.0 iOS and wait for the jailbreak. You mention that you're not sure if you have SHSH files, I would recommend getting Firmware Umbrella and finding out. You can use the advanced mode to save your SHSH files from saurik's server and see which ones are stored there. Do this first -- you're really going to want those SHSH files.

This has been discussed many times on the forum -- if you didn't have an SHSH, it has been recommended that you take steps to get one and that you not attempt any flashing until you have one to secure your ability to restore in case of issue. While the tools provided by the dev-team are extremely robust and reliable, there will always be fringe cases and situations where the unthinkable happens -- it's best to be prepared for them opposed to rolling the dice, especially if you rely on an unlock (I'm not sure if you do or not). If you didn't need to upgrade, it was recommended that people didn't. At this point, Apple is not signing 3.1.2 or 3.1.3, so you cannot downgrade to them without the SHSH on a 3GS. Because of this, you will need to wait until a native/virgin 3GS jailbreak exists for iOS 4.0.

Sorry for the bad news but it's the way it is.

I don't think I said I want to downgrade. The phone was on 3.1.2 prob w/o the shsh saved. I wanted to update it to iOS4 using the pwngtool since it was jailbroken. The phone failed to update and now is stuck in recovery. So I thought why not just do a factory update and thats when it failed to with the error above.

Originally Posted by googs

I don't think I said I want to downgrade. The phone was on 3.1.2 prob w/o the shsh saved. I wanted to update it to iOS4 using the pwngtool since it was jailbroken. The phone failed to update and now is stuck in recovery. So I thought why not just do a factory update and thats when it failed to with the error above.

Sure, but in order to jailbreak 4.0, you MUST have a 3GS running a jailbroken 3.1.2 with a pwned LLB. Flashing the factory firmware removed your LLB pwn and unjailbroke -- so presently, you're sitting at a factory locked, factory jailed, non-pwned iOS 4.0. That said, you cannot meet that requirement of having a jailbroken 3.1.2 or 3.1.3 without the SHSH as flashing the firmware put you onto 4.0, and downgrades require the SHSH. While you didn't say you wanted to downgrade, it is required in order for you to get to a jailbroken iOS 4.0 on the 3GS.

What you are stating is way different than posted for pwngtool update. Can you provide me with your link?

So what about the update to factory iOS4?

Dev-Team Blog

iPhone 3GS
Summary: Currently, PwnageTool only works on previously jailbroken 3GS devices with the old bootrom.

"previously jailbroken" in this instance means "has pwned LLB". The iPhone 3GS (unlike the 2G and 3G) can only restore custom firmware if the LLB has been pwned. By default, on a factory firmware, restoring a custom firmware cannot be done. A factory firmware cannot restore a custom firmware, it checks the firmware, realizes it is not signed properly, and refuses the flash. A virgin 3GS cannot restore custom firmware unless the LLB has been pwned.

This help clarify?

So what about the update to factory iOS4

Not sure what you mean. Nowhere in the dev-team's post does it tell you to complete a factory restore to 4.0, and as always, the moderators here recommend you never, ever restore a factory OS because it takes you off of the jailbreak train. The closest thing I can find in the instructions on the dev-team's site is:'

"If you have a Jailbroken iPhone 3GS with the OLD BOOTROM and you DID NOT use Spirit to jailbreak then you can create the ipsw with PwnageTool 4.0 and restore with your jailbroken recovery mode."

That pretty much confirms what I was telling you -- in order to restore the custom firmware, you must restore with your 'jailbroken recovery mode', which is referring to the recovery mode where the SHSH check and sig checking have been removed. Also known as the pwned LLB. At this point, I think in order to get a working phone, if you cannot restore 3.1.2 and 3.1.3, you are going to have to restore 4.0 factory -- and relock/rejail your phone. You'll need a legit carrier SIM in order to activate and use the phone.

Sorry it's not good news, I'm not trying to specifically prove you wrong or anything, just trying to straighten out a common misconception (that even I had until about 3 weeks ago) regarding the jailbreak/pwn process and what the 'jailbreak train' really is.

That defies logic as my other phone was updated just fine with my above steps. I am bit stumped.

Here is another tutorial

iClarified - iPhone - How to Jailbreak Your iPhone 3GS Using PwnageTool (Mac) [4.0]

Jailbreaking would be pwning LLB

n1ckn4me were you talkn abt Mostly iPhone hacking: OLD BOOTROM + Spirit => 4.0 JB

Originally Posted by googs

That defies logic as my other phone was updated just fine with my above steps. I am bit stumped.

Effectively, it seems like we're quibbling over one piece of information. When you attempted to restore the factory 4.0 on your device, it either DID restore and unjailbroke and unpwned your device, or it errored out before starting and you're on a restore-mode 3.1.2.

I don't know which of those two it is. You'll need to use something like Firmware Umbrella to find out.

That said, what I'm saying is:

If you're on iOS 4.0 on a 3GS and you do not have the SHSH file on record, you cannot jailbreak. This is not something to be discussed, this is just the way it is. A virgin 3GS on 4.0 cannot be jailbroken at present.

If you're on iOS 3.1.2 on a 3GS, use redsn0w to jailbreak, then restore a custom iOS 4 that you create with PwnageTool.

I don't know for certain which version you are on, it really depends on how far along in the restore process it got before it errored out. You should use Firmware Umbrella and connect your phone to let it tell you what version firmware it's on.

I may have been incorrect in assuming that you were on 4.0, but based on your post, it looks like you attempted to flash a factory 4.0 to your device. If you were successful, you have locked and jailed the phone and cannot fix without the SHSH. If you were unsuccessful, then your phone is on 3.1.2 and stuck in recovery mode -- you can use iReb or iRecovery to kick it out of restore mode.

I assumed you were on 4.0 because that's the main problem people are having and you had said you tried. Apologies if it was an incorrect assumption, but the information still stands.

I cant tell anymore what I am on. I believe it still has to be 3.1.2 because it never completed the update using the custom. It gave me an Itunes error and from there on I cannot kick it out of recovery. I have tried Recboot and it does not work. Goes back to the recovery screen. I can get in dfu but I cannot do anything from there either. Since I couldnt do much, I thought lets update it to 4.0 and wait for tools to come down when ready to jb/unlock later on.

Originally Posted by googs

I cant tell anymore what I am on. I believe it still has to be 3.1.2 because it never completed the update using the custom. It gave me an Itunes error and from there on I cannot kick it out of recovery. I have tried Recboot and it does not work. Goes back to the recovery screen. I can get in dfu but I cannot do anything from there either. Since I couldnt do much, I thought lets update it to 4.0 and wait for tools to come down when ready to jb/unlock later on.

Download Firmware Umbrella and connect your iPhone. It should tell you what revision firmware you are running. I know it works on non-activated phones, I think it works on phones in restore mode.