Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

iOS 15.1 for device iPhone10,3 IS NOT being signed! #169

Closed
vadimszzz opened this issue Oct 27, 2021 · 8 comments
Closed

iOS 15.1 for device iPhone10,3 IS NOT being signed! #169

vadimszzz opened this issue Oct 27, 2021 · 8 comments

Comments

@vadimszzz
Copy link 

x@192-168-10-195 Inferius-master % tsschecker -d iPhone10,3 -B d22ap -e 0x1664EA000BC02E -l -s --save-path /var/folders/4l/d2jt93c136j14cndh51s0l6h0000gn/T/tmp3t887ifs --nocache
Version: 9982b747450757cf01e9115ddc21c5c052f7733d - 325
libfragmentzip version: 0.60-120447d0f410dffb49948fa155467fc5d91ca3c8
[TSSC] manually specified ECID to use, parsed "0x1664EA000BC02E" to dec:6303405673529390 hex:1664ea000bc02e
[TSSC] opening firmwares.json
[DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed
[JSON] counting elements
[JSON] parsing elements
[TSSC] selecting latest version of firmware: 15.1
[TSSC] got firmwareurl for iOS 15.1 build 19B74
[TSSC] opening Buildmanifest for iPhone10,3_15.1_19B74
[LFZP] downloading BuildManifest.plist from https://updates.cdn-apple.com/2021FallFCS/fullrestores/071-63899/6CAB53E5-5411-4140-BA83-0E37B1397558/iPhone10,3,iPhone10,6_15.1_19B74_Restore.ipsw
100 [===================================================================================================>]
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... failure
[Error] ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)
Firmware version 15.1 19B74 IS NOT signed!

iOS 15.1 for device iPhone10,3 IS NOT being signed!
@vadimszzz
Copy link
Author

https://ipsw.me/iPhone10,3

Screenshot 2021-10-27 at 8 56 06 PM

@tihmstar
Copy link
Owner

Interesting, so requesting for iPhone10,3 doesn't work, but for iPhone8,2 does work

tMBP:kk tihmstar$ tsschecker -d iPhone10,3 -B d22ap -l
Version: 53b59b842899727793cc7bf7540bc9d0da79b527 - 321
libfragmentzip version: 0.61-8449abba5035b971eb39f24a986e3d4756fb5098
[TSSC] opening firmwares.json
[JSON] counting elements
[JSON] parsing elements
[TSSC] selecting latest version of firmware: 15.1
[TSSC] got firmwareurl for iOS 15.1 build 19B74
[TSSC] opening Buildmanifest for iPhone10,3_15.1_19B74
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... failure
[Error] ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)
Firmware version 15.1 19B74 IS NOT signed!

iOS 15.1 for device iPhone10,3 IS NOT being signed!
tMBP:kk tihmstar$ tsschecker -d iPhone8,2 -B N66AP -l
Version: 53b59b842899727793cc7bf7540bc9d0da79b527 - 321
libfragmentzip version: 0.61-8449abba5035b971eb39f24a986e3d4756fb5098
[TSSC] opening firmwares.json
[JSON] counting elements
[JSON] parsing elements
[TSSC] selecting latest version of firmware: 15.1
[TSSC] got firmwareurl for iOS 15.1 build 19B74
[TSSC] opening Buildmanifest for iPhone8,2_15.1_19B74
[TSSR] Checking BuildIdentity 0
[TSSR] Selected BuildIdentity for request
[TSSR] Request URL set to https://gs.apple.com/TSS/controller?action=2
[TSSR] Sending TSS request attempt 1... success
Firmware version 15.1 19B74 IS signed!

iOS 15.1 for device iPhone8,2 IS being signed!
tMBP:kk tihmstar$

Unfortunatelly i don't have an iPhone X :/
I'd need to compare iTunes' tss request to the one of tsschecker to figure out what's wrong.
Can you get a working tss request?

Does idevicerestore already support iPhone X iOS 15.1? Maybe they have the changes already

@vadimszzz
Copy link
Author

vadimszzz commented Oct 28, 2021 •
edited
Loading

@tihmstar it's not only with the iPhone X

iOS 15.1 for device iPhone10,3 IS NOT being signed!
iOS 15.1 for device iPhone10,6 IS NOT being signed!
iOS 15.1 for device iPhone11,2 IS NOT being signed!
iOS 15.1 for device iPhone11,4 IS NOT being signed!
iOS 15.1 for device iPhone11,6 IS NOT being signed!

The problem is that iPhone11,2,iPhone11,4,iPhone11,6,iPhone12,3,iPhone12,5_15.1_19B74_Restore.ipsw is one file for all devices, same as iPhone10,3,iPhone10,6_15.1_19B74_Restore.ipsw, all other devices that have one ipsw for one device are ok.

@vadimszzz
Copy link
Author

The same issue with futurerestore that uses tsschecker, I can't tethered-downgrade my iPhone

x@192-168-10-195 Inferius-master % futurerestore -t SHSH/6303405673529390_iPhone10,3_d22ap_15.1-19B74_27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae.shsh2 --latest-sep --latest-baseband IPSW/14_6_custom.ipsw
Version: 0ab9df3209ee599f581532d05d331e6abe0f53f3 - 194
img4tool version: 0.197-aca6cf005c94caf135023263cbb5c61a0081804f
libipatcher version: 0.82-0b2f79ff0917ef9b8a92475d93d9466b23fc2322
Odysseus for 32-bit support: yes
Odysseus for 64-bit support: yes
[INFO] 64-bit device detected
futurerestore init done
reading signing ticket SHSH/6303405673529390_iPhone10,3_d22ap_15.1-19B74_27325c8258be46e69d9ee57fa9a8fbc28b873df434e5e702a8b27999551138ae.shsh2 is done
user specified to use latest signed SEP (WARNING, THIS CAN CAUSE A NON-WORKING RESTORE)
[TSSC] opening firmwares.json
[DOWN] downloading file https://api.ipsw.me/v2.1/firmwares.json/condensed
[TSSC] selecting latest firmware version: 15.1
[TSSC] got firmwareurl for iOS 15.1 build 19B74
100 [===================================================================================================>]
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
downloading SEP
100 [===================================================================================================>]
[TSSC] opening /tmp/futurerestore/sepManifest.plist
[TSSR] Checking BuildIdentity 0
[TSSR] Checking BuildIdentity 1
[TSSR] Selected BuildIdentity for request
[TSSR] User specified to not request a baseband ticket.
Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=94&MESSAGE=This device isn't eligible for the requested build.
ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)
Sending TSS request attempt 1... futurerestore: failed with exception:
[exception]:
what=SEP firmware is NOT being signed!

code=16908296
line=258
file=main.cpp
commit count=194:
commit sha  =0ab9df3209ee599f581532d05d331e6abe0f53f3:

@tihmstar
Copy link
Owner

Yea i'd need to see a working tss request for these devices. Can you test the following:

  1. put your device in DFU mode
  2. attempt to restore with 'idevicerestore -d'

you can cancel/unplug the device as soon as idevice starts sending iBSS.

If it goes that far, it should print you a working tss request and response. If so, pls send me the request. If idevicerestore doesn't have it implemented either i'd need someone to grab a tss request from iTunes/Finder, however that's a bit more complicated :/

@vadimszzz
Copy link
Author

vadimszzz commented Oct 28, 2021 •
edited
Loading

idevicerestore - the same issue

Request URL set to https://gs.apple.com/TSS/controller?action=2
TSS server returned: STATUS=94&MESSAGE=This device isn't eligible for the requested build.
ERROR: TSS request failed (status=94, message=This device isn't eligible for the requested build.)
Sending TSS request attempt 1... ERROR: Unable to send TSS request
ERROR: Unable to get SHSH blobs for this device

I can capture iTunes requests, wait a minute

@vadimszzz
Copy link
Author

vadimszzz commented Oct 28, 2021 •
edited
Loading

iTunes request:

http://gs.apple.com:80/TSS/controller?action=2 
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0"> 
  <dict> 
  	<key>@ApImg4Ticket</key> 
  	<true /> 
  	<key>@BBTicket</key> 
  	<true /> 
  	<key>@HostPlatformInfo</key> 
  	<string>windows</string> 
  	<key>@Locality</key> 
  	<string>en_US</string> 
  	<key>@UUID</key> 
  	<string>D2F576AA-660D-6A42-B7D8-F5BA8EF722F2</string> 
  	<key>@VersionInfo</key> 
  	<string>libauthinstall_Win-573.200.43</string> 
  	<key>AOP</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 2fk5c5telRpKgrF6t4sFPbodfMBpOS7ZdsYjA9w3YUN7q2CrQH5cpcMa3jzL
  			Knh3 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<false /> 
  	</dict> 
  	<key>AVE</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> gigceEFHhwbGx4+ZPi4dD1ryD/w50JSwskYUX1udVOjlC65D1Egug/jVTpmJ
  			ySpT </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>Ap,SystemVolumeCanonicalMetadata</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 3UP2avopI1WPvJa0TRawehbYJTGmYjRR+FILzwyYMR3mMeXrVICE2B0JQiSj
  			WjOP </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>ApBoardID</key> 
  	<integer>6</integer> 
  	<key>ApChipID</key> 
  	<integer>32789</integer> 
  	<key>ApECID</key> 
  	<integer>6303405673529390</integer> 
  	<key>ApNonce</key> 
  	<data> znXRGhUyghboemk5alT6wCwQiYdsM0wZ2g2uIKxWeKY=</data> 
  	<key>ApProductionMode</key> 
  	<true /> 
  	<key>ApSecurityDomain</key> 
  	<integer>1</integer> 
  	<key>ApSecurityMode</key> 
  	<true /> 
  	<key>AppleLogo</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> y4ml5KwzNlpcHGmTYCeS12puUMJH3z9XNfz9Fe2UCdi2zmBSPO3QpVjp+0x0
  			rJmb </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>AudioCodecFirmware</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 6Ucq1A8Y4LZtfrtplJnWrRUs/8BlBOE/BcfE1h8AwRPrRgeiyYJao9EkW8tr
  			Wdlk </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<false /> 
  	</dict> 
  	<key>BatteryCharging0</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> g/oPwVuYDgz/eVX+GhYMihA5KGs5O/u+7zX/C7OXqkjBx1e/pXi4SmdBy7r0
  			YGiO </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>BatteryCharging1</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> brumfXa5nKDm1ISuwN58iFVzJi0gODYAmEYQWgGCT748s7zmDXTVtdtgTgEL
  			Uw8q </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>BatteryFull</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> gl/QMihKzTdl2MyRhG4xl0YPJrAopet5Yu8jZGaRoLwsdopvI7VKhY/dGQpG
  			489I </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>BatteryLow0</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> dMBwbJ0pQEmLDTcahizwsHLBG3nXi3F7iLJEMmLfa9b0CTWBKq1KiZczvE7i
  			COE3 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>BatteryLow1</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> B91qPg77+JcHDR3XvmX8rUy+42aEyE1DUKmrR0gArUTuWgAl5XFUu1H/Rhye
  			oV4s </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>BatteryPlugin</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> oYUCiWiJQDIU2/Ohi2kFAiFCBR5kwoCAmPpvyRTn+pygavB46IVnqifhU+wQ
  			twR+ </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>DeviceTree</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> G+m0JUjayd/fwc+YBvvD8uwHRd+YDtZdwSXhosvHpPZWhxYxSHlKlttw+eSH
  			7n50 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>ISP</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> z0T3HXRx+zsmQPkdg4k/jQJ3FuGZAK1E6y6PCZAaXe5ugl/Vli8rtZM5XZnh
  			VCE2 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>KernelCache</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> g67fBArCzcGcdFdQBxuQQGmvRW4NyiLo6kPL4xzW/w4tQwnAqv/FmXxPQETz
  			kJff </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>LLB</key> 
  	<dict> 
  		<key>BuildString</key> 
  		<string>iBoot-7429.42.2~1</string> 
  		<key>Digest</key> 
  		<data> drgrCtfkIeX4GDHJUHs9bbZqb+WQ4bDLbV5LySZL2+zhovNYhXHD2wQyoz6x
  			NZZp </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>Liquid</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> gQo9brYfjLd6sSQmCt3PRf8qDHxOxE4GoMiWQQx4lOOhXj/Cy51RdUbfUAe6
  			NwaN </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>Multitouch</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> g0u7wyv1mlhB3HlMdgxt1Swicvf50rL3kRAd9ekPIREhSRgvG2MSZWGbb1dK
  			4fE1 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<false /> 
  	</dict> 
  	<key>OS</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> oKJU/kV6N1OtbwltvTUtH7o3mhS48tSVoQdAWFkoiGtGAYx6FxWhUVUDN47l
  			B9Du </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>PearlCertificationRootPub</key> 
  	<data> BEBGXhKwc7q3iFvkUoGDP6j2drpxSCxsSCODaDQIqGwd53wZJ0xIJIv0RTf2TS7+/u4K
  		zhrANzb19r+TQzwqFJMphp3mI3yY4pukIFc/kWS7DLQAx/ftWBXX6vl4ig3wEg== </data> 
  	<key>RecoveryMode</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> zpNup/Hm0yJMBRfNpTIp7nD+XMyVqIrkxNBuA2xq0UF+mYoK+beiPMIM0GFg
  			hBbF </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>RestoreDeviceTree</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 0nJagwNA1556Z+QKzBuTcxNW9+/2zbsMM48KfdUBNOj3oGQexMgw8Y+rNkzL
  			S3pQ </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>RestoreKernelCache</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> oqk8xXD6VriWx6M2iMXOg7nf8JZ4kNSH0i2Wv5VVJL8l6QLH0hoWDITn24Gf
  			Y7p5 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>RestoreLogo</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> h3/lhUkLPyGqzufSpxUOZA4a5rP+UI9Z4xmNMmEIrabSRErVmdNLy1j17JXd
  			hgXg </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>RestoreRamDisk</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> xZoEg8fGwM6AcnosBhU0yKquNafSUZVonE0/XqmneWCoVQZk25C8SQdbMXC2
  			r0tP </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>RestoreSEP</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> US/glaQySFSb3fQcV+RKQD7DqtkJ6IDEDQFv3OdLouH+ZMGy5bWxR86QhBga
  			ptRw </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>RestoreTrustCache</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> D7/OxJa0NkdSIT1fATNZIemm/3PgJb4QlluEMyRfJ6gJrHMxcdjHUWe8DaXn
  			buDy </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>SEP</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> Aunw70MBtT3oW3ua1NNbe65ppBsvgjcol5qMtXgeiPM2OItGYMjwUvLXosxF
  			9V2a </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>SepNonce</key> 
  	<data> P6C2Cz6erY9vUTSu4Qzqy8kBfWM=</data> 
  	<key>StaticTrustCache</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> +2h22K2GU7DK3JCqnR5Cd9bV9f1TJEZyysjJyn3qS+8yiZZLWKtxiwAQ1Bzm
  			UMYd </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>SystemVolume</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 2xCHIyypq2pjvY/7KYM7FG3Z+8E4ZPG2HTA4xmNSGDnwcypulnLhoeB+w11u
  			mw2P </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>UniqueBuildID</key> 
  	<data> a4ZGET5TWM7s3LxHx7dDCpOKWC0=</data> 
  	<key>ftap</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 
  		</data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>ftsp</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 
  		</data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>iBEC</key> 
  	<dict> 
  		<key>BuildString</key> 
  		<string>iBoot-7429.42.2~1</string> 
  		<key>Digest</key> 
  		<data> qRH62LuHyIqhWz0BlOHqywjcvYM9ADtdDlp438l0WsdErx3mw6IGyx8Mc8Nf
  			F5Fa </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>iBSS</key> 
  	<dict> 
  		<key>BuildString</key> 
  		<string>iBoot-7429.42.2~1</string> 
  		<key>Digest</key> 
  		<data> /uIW4nBask6MHiHeVzStBrJMQWu6a4j0vMerR3SSg+o1+FHg+7DIvCmJWkdD
  			6En4 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>iBoot</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> cYljB5Bi6Cpdo5rzdf9F2U1thyoLSYDGcJP2+ktBioN+trLhsvGM61Y3HFrE
  			/zJ9 </data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>rfta</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 
  		</data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  	<key>rfts</key> 
  	<dict> 
  		<key>Digest</key> 
  		<data> 
  		</data> 
  		<key>EPRO</key> 
  		<true /> 
  		<key>ESEC</key> 
  		<true /> 
  		<key>Trusted</key> 
  		<true /> 
  	</dict> 
  </dict> 
</plist>

Download gs.apple.com_TSS_controller_action_2.txt

vs idevicerestore request:

http://gs.apple.com:80/TSS/controller?action=2 
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>@Locality</key>
  <string>en_US</string>
  <key>@HostPlatformInfo</key>
  <string>mac</string>
  <key>@VersionInfo</key>
  <string>libauthinstall-698.0.5</string>
  <key>@UUID</key>
  <string>50C4B6C9-EEED-D200-2EC7-607EA5171469</string>
  <key>ApECID</key>
  <integer>6303405673529390</integer>
  <key>UniqueBuildID</key>
  <data>
  oiJo9h7T2XG7V0z9T0aU5UyEM1M=
  </data>
  <key>ApChipID</key>
  <integer>32789</integer>
  <key>ApBoardID</key>
  <integer>6</integer>
  <key>ApSecurityDomain</key>
  <integer>1</integer>
  <key>AOP</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	2fk5c5telRpKgrF6t4sFPbodfMBpOS7ZdsYjA9w3YUN7q2CrQH5cpcMa3jzL
  	Knh3
  	</data>
  	<key>Trusted</key>
  	<false/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>AVE</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	gigceEFHhwbGx4+ZPi4dD1ryD/w50JSwskYUX1udVOjlC65D1Egug/jVTpmJ
  	ySpT
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>Ap,SystemVolumeCanonicalMetadata</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	3UP2avopI1WPvJa0TRawehbYJTGmYjRR+FILzwyYMR3mMeXrVICE2B0JQiSj
  	WjOP
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>AppleLogo</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	y4ml5KwzNlpcHGmTYCeS12puUMJH3z9XNfz9Fe2UCdi2zmBSPO3QpVjp+0x0
  	rJmb
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>AudioCodecFirmware</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	6Ucq1A8Y4LZtfrtplJnWrRUs/8BlBOE/BcfE1h8AwRPrRgeiyYJao9EkW8tr
  	Wdlk
  	</data>
  	<key>Trusted</key>
  	<false/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>BatteryCharging0</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	g/oPwVuYDgz/eVX+GhYMihA5KGs5O/u+7zX/C7OXqkjBx1e/pXi4SmdBy7r0
  	YGiO
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>BatteryCharging1</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	brumfXa5nKDm1ISuwN58iFVzJi0gODYAmEYQWgGCT748s7zmDXTVtdtgTgEL
  	Uw8q
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>BatteryFull</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	gl/QMihKzTdl2MyRhG4xl0YPJrAopet5Yu8jZGaRoLwsdopvI7VKhY/dGQpG
  	489I
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>BatteryLow0</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	dMBwbJ0pQEmLDTcahizwsHLBG3nXi3F7iLJEMmLfa9b0CTWBKq1KiZczvE7i
  	COE3
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>BatteryLow1</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	B91qPg77+JcHDR3XvmX8rUy+42aEyE1DUKmrR0gArUTuWgAl5XFUu1H/Rhye
  	oV4s
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>BatteryPlugin</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	oYUCiWiJQDIU2/Ohi2kFAiFCBR5kwoCAmPpvyRTn+pygavB46IVnqifhU+wQ
  	twR+
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>DeviceTree</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	G+m0JUjayd/fwc+YBvvD8uwHRd+YDtZdwSXhosvHpPZWhxYxSHlKlttw+eSH
  	7n50
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>ISP</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	z0T3HXRx+zsmQPkdg4k/jQJ3FuGZAK1E6y6PCZAaXe5ugl/Vli8rtZM5XZnh
  	VCE2
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>KernelCache</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	g67fBArCzcGcdFdQBxuQQGmvRW4NyiLo6kPL4xzW/w4tQwnAqv/FmXxPQETz
  	kJff
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>LLB</key>
  <dict>
  	<key>BuildString</key>
  	<string>iBoot-7429.42.2~1</string>
  	<key>Digest</key>
  	<data>
  	drgrCtfkIeX4GDHJUHs9bbZqb+WQ4bDLbV5LySZL2+zhovNYhXHD2wQyoz6x
  	NZZp
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>Liquid</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	gQo9brYfjLd6sSQmCt3PRf8qDHxOxE4GoMiWQQx4lOOhXj/Cy51RdUbfUAe6
  	NwaN
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>Multitouch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	g0u7wyv1mlhB3HlMdgxt1Swicvf50rL3kRAd9ekPIREhSRgvG2MSZWGbb1dK
  	4fE1
  	</data>
  	<key>Trusted</key>
  	<false/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>OS</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	oKJU/kV6N1OtbwltvTUtH7o3mhS48tSVoQdAWFkoiGtGAYx6FxWhUVUDN47l
  	B9Du
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>RecoveryMode</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	zpNup/Hm0yJMBRfNpTIp7nD+XMyVqIrkxNBuA2xq0UF+mYoK+beiPMIM0GFg
  	hBbF
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>RestoreDeviceTree</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	0nJagwNA1556Z+QKzBuTcxNW9+/2zbsMM48KfdUBNOj3oGQexMgw8Y+rNkzL
  	S3pQ
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>RestoreKernelCache</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	oqk8xXD6VriWx6M2iMXOg7nf8JZ4kNSH0i2Wv5VVJL8l6QLH0hoWDITn24Gf
  	Y7p5
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>RestoreLogo</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	h3/lhUkLPyGqzufSpxUOZA4a5rP+UI9Z4xmNMmEIrabSRErVmdNLy1j17JXd
  	hgXg
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>RestoreRamDisk</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	EZbnC1RS8dD0vel5uUvWM02JOXQg3fRhMof6UZF9u+XluXYvRJJCGpnbsj9J
  	85CR
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>RestoreSEP</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	US/glaQySFSb3fQcV+RKQD7DqtkJ6IDEDQFv3OdLouH+ZMGy5bWxR86QhBga
  	ptRw
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  </dict>
  <key>RestoreTrustCache</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	1+ZyUucTfQUdHbNfTGOJQ70iqLjj0PI+qGaDv/nKXjJkGSkzEmqltiXKIAjO
  	LaoB
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>SE,UpdatePayload</key>
  <dict>
  	<key>DevelopmentUpdatePayloadHash</key>
  	<data>
  	NMiRGK18iQvp0PfeRQKGjFVyWg+VrviiTD66H40Wsco=
  	</data>
  	<key>ProductionUpdatePayloadHash</key>
  	<data>
  	ErU6YRGv0Rz/HZv+i/VWVVlRniXXrt1RVpM1ySjdQQc=
  	</data>
  </dict>
  <key>SEP</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	Aunw70MBtT3oW3ua1NNbe65ppBsvgjcol5qMtXgeiPM2OItGYMjwUvLXosxF
  	9V2a
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  </dict>
  <key>Savage,B0-Dev-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	cTtDYU1ZDmDBuieUfJNdKJlpAZ8rObgSoQeIGcWRiUk=
  	</data>
  </dict>
  <key>Savage,B0-Dev-PatchVT</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
  	</data>
  </dict>
  <key>Savage,B0-Prod-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	LirZbSpmoa3ztFi+QaHTZPEchkOttFQ7WaOh6l15ksE=
  	</data>
  </dict>
  <key>Savage,B0-Prod-PatchVT</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
  	</data>
  </dict>
  <key>Savage,B2-Dev-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	RY0sGivB+S56Z01P3RKvLSqsYbZXP0WajYHI5WVLkw4=
  	</data>
  </dict>
  <key>Savage,B2-Dev-PatchVT</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
  	</data>
  </dict>
  <key>Savage,B2-Prod-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	n5ORxL2JRSUUzKmUV3iiWReTI96JQ1tx1T+dvlixmJU=
  	</data>
  </dict>
  <key>Savage,B2-Prod-PatchVT</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
  	</data>
  </dict>
  <key>Savage,BA-Dev-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	8Wfh++DFgVgXcot1bWbbGrWrHVvfqqE8UhfxXdyLJc4=
  	</data>
  </dict>
  <key>Savage,BA-Prod-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	JUdhikubFbeoejbGuI6NoqGGkwzJtZY6OhnfquDqnt8=
  	</data>
  </dict>
  <key>Savage,BE-Dev-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	l5MmP4wFfc69Avw7DUOIzXpgza+KzpkUWVzBHzIdATk=
  	</data>
  </dict>
  <key>Savage,BE-Prod-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	JTWZVGowljcccVhEHJSY8E4m4R0byoGkZePkJi4jhgE=
  	</data>
  </dict>
  <key>Savage,BF-Dev-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	nUXYuBWpWkmYYj53V+zyMLFwbJiPwKBPgtBYA3UyPHw=
  	</data>
  </dict>
  <key>Savage,BF-Prod-Patch</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	a0GqJA6tosMd9mulr/DqVLIcAawQgCe76Ug80O4SRio=
  	</data>
  </dict>
  <key>StaticTrustCache</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	+2h22K2GU7DK3JCqnR5Cd9bV9f1TJEZyysjJyn3qS+8yiZZLWKtxiwAQ1Bzm
  	UMYd
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>SystemVolume</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	2xCHIyypq2pjvY/7KYM7FG3Z+8E4ZPG2HTA4xmNSGDnwcypulnLhoeB+w11u
  	mw2P
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>ftap</key>
  <dict>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  	<key>Digest</key>
  	<data>
  	</data>
  </dict>
  <key>ftsp</key>
  <dict>
  	<key>Trusted</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>Digest</key>
  	<data>
  	</data>
  </dict>
  <key>iBEC</key>
  <dict>
  	<key>BuildString</key>
  	<string>iBoot-7429.42.2~1</string>
  	<key>Digest</key>
  	<data>
  	qRH62LuHyIqhWz0BlOHqywjcvYM9ADtdDlp438l0WsdErx3mw6IGyx8Mc8Nf
  	F5Fa
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>iBSS</key>
  <dict>
  	<key>BuildString</key>
  	<string>iBoot-7429.42.2~1</string>
  	<key>Digest</key>
  	<data>
  	/uIW4nBask6MHiHeVzStBrJMQWu6a4j0vMerR3SSg+o1+FHg+7DIvCmJWkdD
  	6En4
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>iBoot</key>
  <dict>
  	<key>Digest</key>
  	<data>
  	cYljB5Bi6Cpdo5rzdf9F2U1thyoLSYDGcJP2+ktBioN+trLhsvGM61Y3HFrE
  	/zJ9
  	</data>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  </dict>
  <key>rfta</key>
  <dict>
  	<key>Trusted</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  	<key>Digest</key>
  	<data>
  	</data>
  </dict>
  <key>rfts</key>
  <dict>
  	<key>Trusted</key>
  	<true/>
  	<key>ESEC</key>
  	<true/>
  	<key>EPRO</key>
  	<true/>
  	<key>Digest</key>
  	<data>
  	</data>
  </dict>
  <key>ApNonce</key>
  <data>
  znXRGhUyghboemk5alT6wCwQiYdsM0wZ2g2uIKxWeKY=
  </data>
  <key>@ApImg4Ticket</key>
  <true/>
  <key>ApSecurityMode</key>
  <true/>
  <key>ApProductionMode</key>
  <true/>
  <key>SepNonce</key>
  <data>
  P6C2Cz6erY9vUTSu4Qzqy8kBfWM=
  </data>
  <key>PearlCertificationRootPub</key>
  <data>
  BEBGXhKwc7q3iFvkUoGDP6j2drpxSCxsSCODaDQIqGwd53wZJ0xIJIv0RTf2TS7+/u4K
  zhrANzb19r+TQzwqFJMphp3mI3yY4pukIFc/kWS7DLQAx/ftWBXX6vl4ig3wEg==
  </data>
</dict>
</plist>

Download idevicerestore_gs.apple.com_TSS_controller_action_2.txt

@vadimszzz
Copy link
Author

@tihmstar please take a look at the diff https://editor.mergely.com/5d7hDFL4/

@vadimszzz vadimszzz mentioned this issue Oct 28, 2021
Closed
@vadimszzz vadimszzz mentioned this issue Oct 29, 2021
Closed
Cryptiiiic referenced this issue in 1Conan/tsschecker Nov 1, 2021
@tihmstar @Cryptiiiic
fix #169
a2bf4ef
DanTheMann15 added a commit to DanTheMann15/tsschecker that referenced this issue Nov 7, 2021
@DanTheMann15 @1Conan @tihmstar
0.335.0 Release
69e4511 
* Add support for the MacBookPro (M1 Pro and M1 Max) models.
* Add the ability to manually specify a URL for the TSS server with the "server-url" parameter.
* Fix tihmstar#169.
* Update tss.c and tss.h.
* Update versioning.
* Merge all existing changes.

Co-authored-by: 1Conan <me@1conan.com>
Co-authored-by: tihmstar <tihmstar@gmail.com>
This issue was closed.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@tihmstar @vadimszzz