[From nobody Tue Nov 3 21:07:08 2026 Received: (at submit) by bugs.debian.org; 18 Jul 2024 09:48:12 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02 (2021-04-09) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-13.0 required=4.0 tests=BAYES_00, BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU, DKIM_VALID_EF,HAS_PACKAGE,MD5_SHA1_SUM,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE, SPF_PASS autolearn=ham autolearn_force=no version=3.4.6-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 46; hammy, 136; neutral, 40; spammy, 1. spammytokens:0.925-+--communications hammytokens:0.000-+--bookworm, 0.000-+--Bookworm, 0.000-+--GnuTLS, 0.000-+--H*r:ECDSA, 0.000-+--H*r:prime256v1 Return-path: <adamg@pobox.com> Received: from pb-smtp2.pobox.com ([64.147.108.71]:53187) by buxtehude.debian.org with esmtps (TLS1.2:ECDHE_SECP256R1__RSA_SHA512__AES_256_GCM:256) (Exim 4.94.2) (envelope-from <adamg@pobox.com>) id 1sUNkB-002d5Q-Gl for submit@bugs.debian.org; Thu, 18 Jul 2024 09:48:12 +0000 Received: from pb-smtp2.pobox.com (unknown [127.0.0.1]) by pb-smtp2.pobox.com (Postfix) with ESMTP id 8577D1F7A5 for <submit@bugs.debian.org>; Thu, 18 Jul 2024 05:42:08 -0400 (EDT) (envelope-from adamg@pobox.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed; d=pobox.com; h=date:from :to:subject:message-id:mime-version:content-type; s=sasl; bh=ea6 LmJFixsY5a/cImvqOnQnnmQCd61ew/mg4iXiGpMw=; b=bx69vr+Kv60nwK3svJw JpIXGW75A8Sl7w2flcppddw87nqHPah5DnprVnc3GHoRengEjEUHjAI/Ypx9FTi0 oPQ2ok8L9F86gHW4NHpl87vOCECzFz8MH1VDozeSk5ZVm6Bx0Orq1SpGyhxPyt0G 1FXO1dCBsGpPw7fA8CWzXW7g= Received: from pb-smtp2.nyi.icgroup.com (unknown [127.0.0.1]) by pb-smtp2.pobox.com (Postfix) with ESMTP id 6C6211F7A3 for <submit@bugs.debian.org>; Thu, 18 Jul 2024 05:42:08 -0400 (EDT) (envelope-from adamg@pobox.com) Received: from pogo.deviceside.com (unknown [71.19.144.253]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by pb-smtp2.pobox.com (Postfix) with ESMTPSA id C00B21F7A2 for <submit@bugs.debian.org>; Thu, 18 Jul 2024 05:42:07 -0400 (EDT) (envelope-from adamg@pobox.com) Received: from iguana.24-8.net (99-122-168-208.lightspeed.irvnca.sbcglobal.net [99.122.168.208]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature ECDSA (prime256v1) server-digest SHA256) (No client certificate requested) (Authenticated sender: iguana@pogo.deviceside.com) by pogo.deviceside.com (Postfix) with ESMTPSA id 9B46AC025E for <submit@bugs.debian.org>; Thu, 18 Jul 2024 02:42:06 -0700 (PDT) Date: Thu, 18 Jul 2024 02:42:04 -0700 From: Adam Goldman <adamg@pobox.com> To: submit@bugs.debian.org Subject: Built with wrong SSL lib, won't talk to iOS 5 Message-ID: <ZpjjbOd_e460a55t@iguana.24-8.net> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Pobox-Relay-ID: FF987B68-44E9-11EF-A785-965B910A682E-07713566!pb-smtp2.pobox.com X-Greylist: delayed 361 seconds by postgrey-1.36 at buxtehude; Thu, 18 Jul 2024 09:48:12 UTC Delivered-To: submit@bugs.debian.org Package: libimobiledevice6 Version: 1.3.0-6+b3 On Debian Bookworm, idevice* will communicate with an iOS 17 device, but not with an iOS 5 device. When running usbmuxd in the foreground, it prints the following error when the iOS 5 device is plugged in: [15:58:20.277][1] preflight_worker_handle_device_add: ERROR StartSession failed on device 6e8c5ae7c41b3fc71a6be705f1303343c7db53c6, lockdown error -5 >From that point, "idevice_id -l" produces no output, and ideviceinfo says "ERROR: No device found!". Apparently this is because iOS 5 uses SSLv3 to encrypt communications over the USB cable, but OpenSSL has intentionally removed SSLv3 interoperability. I installed libgnutls28-dev and libgcrypt20-dev, downloaded the libimobiledevice source package, added --disable-openssl to configure_flags, and built the libimobiledevice6 package. After I installed the modified libimobiledevice6 package and restarted usbmuxd, it no longer printed an error when the iOS 5 device was plugged in, and I was able to back up the device with idevicebackup2. I also tested the modified libimobiledevice6 with an iOS 17 device, and I was able to see that device with idevice_id, mount it with ifuse and copy files from the camera roll. I believe this is a regression that was introduced in 1.3.0-4 by changing from GnuTLS to OpenSSL. The corresponding 1.3.0-4 change should be reverted. To prevent this from happening again, a comment should be added to debian/rules above configure_flags, explaining why we build against GnuTLS instead of OpenSSL. -- Adam ]