Jailbroken iphone - PUSH / ACTIVATION problem

i used the advice many others gave me previously and have done exactly as you guys said to get PUSH notifications to work on a jailbroken 3g. with 3.1.2,

1) Create and ipsw with "activate" NOT checked.
2) Use the original carrier sim to activate the phone - THIS IS THE IMPORTANT PART ***

*** You see i live in Pakistan. I do not know for sure which carrier my 3g was locked to as i bought the phone from an electronics dealer here, who buy phones from all over the world and resell them here. (thats how they do over here).. anyways. I spoke to the guy who i bought the phone from and he said the original carrier was probably AT&T. He had a bunch of AT&T sims so he gave me one. to try it out with. Apart from this i have 2 FIDO sims, one which came with the OTB 3.1 / 5.11 3gs i just got :(( and the other was another FIDO sim (active) which my friend was using in Canada, and is on roaming at the moment... to summarize

1st SIM - AT&T
2nd SIM - FIDO - Came with 3gs- inactive
3rd SIM - FIDO - Friends Sim - Active - in use but NOT on an iphone

I have repeated the following steps over 6 - 8 times now..

So, i prepared the ipsw with the "active" not checked, restored it... now for the activation part i tried

SIM#1 - AT&T - in the phone when trying to activate.. did not work.. - itunes says that this is not the right carrier -

Tried SIM#2 - FIDO - same result as SiM#1 -

Then finally tried - SIM#3 - Voila - i get the message waiting for activation, and in a bit phone activated, and the itunes window now shows my phone with my frends number and the serial number etc etc..

So this means thats the phone was originally locked to FIDO as the official carrier????

Ok, so i then proceeded to Cydia, installed the ultrasn0w, and rebooted the phone...

This is where it gets complicated....

When i rebooted the phones, i changed SIMS. and put in the SIM of my local carrier. The second i insert that SIM (or any other SIM), the itunes logo comes on the phone screen and says SIm card changed and to replace original SIM. Itunes also gives me the same message that this is not the original carrier sim.

This is weird cause the phone is "unlocked/ultrasn0wed" at this point.

Additionally, if i wait a while with my local sim still in the phone, it will eventually catch my local network as well!, but i just cant get into the phone home screen because when i swipe it goes to the emergency call screen… This means that ultrasn0w is working as well right??

When i replace with the FIDO sim, everything is back to normal….

Please PLEASE PLEASE PLEASE someone, anyone help me… i have been at this for the last 3 days / nights… i cant get over why this is not working…

I have even restored to 3.0. used ultraslow to jailbreak then pwned with 3.1.4 but the same result the minute i insert my local sim or any other sim.

I have looked into the other push fixes, but they all say they have issues and are not working correctly.

That is strange behaviour from a 3G iPhone, I was under the impression that 3G and 3GS phones were wildcard activated (ie once activated, they did not need to be activated again when different SIM cards were swapped in)

The behaviour you describe sounds more like the way a 2G iPhone works (where you must activate every time you switch the sim. Of course this can be patched by hacktivation.

When activating using the SIM that works can you look at your iPhone via ssh or using a program that can browse the phone from your computer like diskaid look at the path

Code:

---

/var/root/Library/Lockdown/activation_records/

---

there should be a file called wildcard_record.plist

On a 2G the iphone activation_records directory does not exist.

I suspect you really have a 2G iPhone.

Regardless... You can solve this the following way

use the pushfix tool nimble to export out the valid certificates you generate when activating using the working SIM, copy them to your computer and keep them safe.

Then restore your phone again with an ipsw that does the activation for you.

Then follow the instructions contained in pushfix to use the inject tool to import the push certificates you exported from the working activation.

Olethros,
What is that nimble push fix tool ?
BTW, i agree that the OP should be using custom ipsw with hacktivation

Quote:

---

Originally Posted by dtube

Olethros,
What is that nimble push fix tool ?
BTW, i agree that the OP should be using custom ipsw with hacktivation

---

The push fix as created by the dev team (I think it was planetbeing) contains two iPhone command line programs nimble and inject.

The original idea was that you used nimble to extract a certificate from a friend with legitimate activation and then used inject to put the certificate into your hacktivated iPhone's keychain.

Because this user has a SIM that can be used to activate.. They can extract the certificate from the legitimate activation and then restore, hacktivate and install the valid certificate.

Because the iPhone is jailbroken, it's probably possible to bypass the reinstall stage by copying in a patched lockdownd

Olethros,

thank you for your reply, and your advice, im going to try it over the weekend...

But before i do, i have noticed the following

You mentioned that i should SSH to /var/root/Library/Lockdown/activation_records/

I have a jailbroken 3.1.2 3g working on a "hacktivated" - custom ipsw. The phone is also unlocked via ultrasn0w.

When i SSH my iphone in finder the following directories show up

1) Home
2) Root

#1) - The home directory also has a lockdown folder located at

/home/Library/Lockdown/

Within this folder there are the following

1) data_ark.plist
2) device_private_key.pem
3) device_public_key.pem
4) FOLDER called - pair_records, which contains 2 .plist files


#2) The story in the other directory "ROOT" is the same, when i SSH to

/root/var/root/library/lockdown,

the following files are present

1) data_ark.plist
2) device_private_key.pem
3) device_public_key.pem
4) FOLDER called - pair_records, which contains 2 .plist files


Both the directories, "home" & "root", (in the locations as described above) have no such directory called "activation records" in the Lockdown folder., and subsequently there is no file called wildcard_record.plist.

Now im really beginning to wonder if my phone is a 2g!?! its a 3g, with a black back (i am not retarded), ive pwned it several times and i know its a 3g, but then why doesnt it have this folder???

Is it because in on a hactivated ipsw right now?

Should i jailbreak and restore with custom ipsw and then activate with orig sim for the activation folder to be there??

Please help me out..

It is possible the whole activation_records/wildcard_record.plist is not important.

My first suggestion is to get the pushfix.zip file I linked to in an earlier post.

Firstly restore to a custom ipsw with activation off and official SIM inserted. Let it activate via iTunes.

Copy the files from the zip file to the iPhone and follow the steps under A in the instructions contained in the zip file. Copy the 4 files to your computer and keep them safe.

Restore again with a custom ipsw with activation set on and use your personal SIM.

Copy both the files from the zip file and the 4 files you backed up from step A to the iPhone and follow steps listed under B in the documentation.

You should now have working push notifications.

If this does not work. Can you post the contents of /var/logs/lockdownd.log if you want to be careful you can replace all occurrences of your ICCD with 00000000000000000000 to make the log anonymous before you post it. I would like to see the log file from both when you have the SIM that activates the phone inserted and when you have your own SIM inserted.

You also don't need to post the whole log, just the last day or two of the log.

I am assuming you are correct and it is a 3G iPhone. I am sure there is a good reason for the lack of this directory.

If you don't have success with pushfix. I have some other suggestions, but it would be valuable to see that log file first.

Quote:

---

Originally Posted by Olethros

The push fix as created by the dev team (I think it was planetbeing) contains two iPhone command line programs nimble and inject.

The original idea was that you used nimble to extract a certificate from a friend with legitimate activation and then used inject to put the certificate into your hacktivated iPhone's keychain.

Because this user has a SIM that can be used to activate.. They can extract the certificate from the legitimate activation and then restore, hacktivate and install the valid certificate.

Because the iPhone is jailbroken, it's probably possible to bypass the reinstall stage by copying in a patched lockdownd

---

Ahh. I remember now. It was done by CPICH (Dev Team). I believe this does not work, let me see if I can check with him again to confirm. Thanks

edit: Just checked with CPICH, the pushfix does work , follow the readme.txt and do it correctly.