Bug 7665 - (int-174742) cannot update official Nokia repos through wi-fi/wlan connection (akamai.com issue)
(int-174742)
: cannot update official Nokia repos through wi-fi/wlan connection (akamai.com ...
Status: NEW
Product: Settings and Maintenance
Application manager
: 5.0:(10.2010.19-1)
: N900 Maemo
: Low normal with 15 votes (vote)
: ---
Assigned To: unassigned
: application-manager-bugs
:
:
:
:
  Show dependency tree
 
Reported: 2010-01-05 06:16 UTC by krisse
Modified: 2010-11-19 05:13 UTC (History)
17 users (show)

See Also:


Attachments


Note

You need to log in before you can comment on or make changes to this bug.


Description krisse (reporter) 2010-01-05 06:16:09 UTC
SOFTWARE VERSION: 1.2009.42-11
(Settings > General > About product)

EXACT STEPS LEADING TO PROBLEM: 
(Explain in detail what you do (e.g. tap on OK) and what you see (e.g. message
Connection Failed appears))
1. Open Application Manager
2. Select Update
3. Wait for repos / software catalogues (Nokia and non-Nokia) to be updated

EXPECTED OUTCOME: All repos updated to latest version.

ACTUAL OUTCOME: If I use Wi-Fi/WLAN connection to update Nokia repos, the app
manager keeps trying for 10 minutes, then says that it cannot resolve the
addresses of the two official Nokia repos (Nokia Applications, Nokia System
Software Updates).

Please note that the Maemo Extras domain resolves fine on both cellular and
WLAN, but Nokia repos only resolve on cellular.

REPRODUCIBILITY: Always if I use Wi-Fi/WLAN. Never if I use cellular.
(always, less than 1/10, 5/10, 9/10)

EXTRA SOFTWARE INSTALLED: This happens even on a fresh N900.

OTHER COMMENTS:

The problem does not appear to be with my ISP, because the same domains resolve
fine on my N900's web browser while using the WLAN connection. They only fail
to resolve when I use the app manager through WLAN.

See the following Talk thread for a discussion of the problem:

http://talk.maemo.org/showthread.php?t=38267


With a CELLULAR connection (where the App Manager works perfectly) if I do
"nslookup downloads.maemo.nokia.com" in Xterminal I get:

Server: 127.0.0.1
Address 1: 127.0.0.1 Nokia-N900-42-11

Name: downloads.maemo.nokia.com
Address 1: 93.158.111.27 a93-158-111-27.deploy.akamaitechnologies.com
Address 2: 93.158.110.232 a93-158-110-232.deploy.akamaitechnologies.com 


With a WLAN connection (where the Nokia repo domains fail to resolve in App
Manager) if I do "nslookup downloads.maemo.nokia.com" in Xterminal I get:

Server: 127.0.0.1
Address 1: 127.0.0.1 Nokia-N900-42-11

Name: downloads.maemo.nokia.com
Address 1: 193.184.164.144 downloads.maemo.nokia.com


(there was no Address 2) 

Here is the log from the App Manager when trying to update the Nokia repos
using WLAN:

hildon-application-manager 2.2.35-3
E: Failed to fetch https://downloads.maemo.nokia.com/fremantle/apps/./Packages 
Resolving host timed out: downloads.maemo.nokia.com
E: Failed to fetch https://downloads.maemo.nokia.com/fremantle/mr0/./Packages 
Resolving host timed out: downloads.maemo.nokia.com
apt-worker: Ignoring version from wrong domain: facebook-installer 1.0-4+0m5
apt-worker:  
/var/lib/apt/lists/downloads.maemo.nokia.com_fremantle_apps_._Packages
apt-worker: Ignoring version from wrong domain: dtg-installer 1.0-4+0m5
apt-worker:  
/var/lib/apt/lists/downloads.maemo.nokia.com_fremantle_apps_._Packages
apt-worker: Ignoring version from wrong domain: tutorial-home-applet 0.6.14+0m5
apt-worker:  
/var/lib/apt/lists/downloads.maemo.nokia.com_fremantle_apps_._Packages
apt-worker: Ignoring version from wrong domain: foreca-installer 1.0+0m5
apt-worker:  
/var/lib/apt/lists/downloads.maemo.nokia.com_fremantle_apps_._Packages
apt-worker: Ignoring version from wrong domain: ap-installer 1.0+0m5
apt-worker:  
/var/lib/apt/lists/downloads.maemo.nokia.com_fremantle_apps_._Packages
apt-worker: Ignoring version from wrong domain: amazon-installer 1.0+0m5
apt-worker:  
/var/lib/apt/lists/downloads.maemo.nokia.com_fremantle_apps_._Packages

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.1.6)
Gecko/20091201 Firefox/3.5.6 (.NET CLR 3.5.30729)
Comment 1 Chris Dodwell 2010-01-12 20:18:46 UTC
*** This bug has been confirmed by popular vote. ***
Comment 2 Venomrush 2010-01-13 06:47:26 UTC
I updated to 44-1 successfully using WLAN connection without any problem.

I have a UK variant device. 
Perhaps firewall issue with your WLAN.
Comment 3 krisse (reporter) 2010-01-14 16:09:59 UTC
(In reply to comment #2)
> I updated to 44-1 successfully using WLAN connection without any problem.
> 
> I have a UK variant device. 
> Perhaps firewall issue with your WLAN.
> 

No, because the same domains resolve on the same device on the same WLAN if I
access them through the device's web browser. The domains only fail to resolve
if I use the device's app manager.
Comment 4 Venomrush 2010-01-14 19:16:24 UTC
Try setting your WLAN on N900 to use Goggle's DNS

8.8.8.8
8.8.4.4
Comment 5 krisse (reporter) 2010-01-14 22:54:25 UTC
(In reply to comment #4)
> Try setting your WLAN on N900 to use Goggle's DNS
> 
> 8.8.8.8
> 8.8.4.4
> 

If it was the DNS, why would it resolve on the N900's web browser?
Comment 6 pepitoe 2010-01-15 17:43:54 UTC
The first post shows you are getting different DNS results between Cellular and
WLAN connections.  Whilst the address may resolve in the browser that does not
necessarily mean you are getting to the right server, there may be some
configuration problem in the caching network effecting your ISP.  

For anyone having this problem it would be worth trying different DNS servers, 
and posting what ISP you are using and your public IP address from
http://www.whatismyip.org/ so that it can be looked into.

(Should this be moved this to maemo.nokia.com website product for now so that
the appropraite people who can check the server config will see it?)
Comment 7 Andre Klapper maemo.org 2010-01-22 16:58:38 UTC
Has this happened again in version 2.2009.51-1?

(maemo.nokia.com has nothing to do with the repositories.)
Comment 8 Michael Klein 2010-01-23 11:30:31 UTC
From time to time I've got the same problem (with version 2.2009.51-1).
To work around I deactivate both repositories and reactivate them after a few
seconds.
Comment 9 Matthew 2010-01-25 14:53:02 UTC
I have had the same issue, I don't have a 3G data connection so it was quite
noticeable for me. My workaround was to manually set the DNS servers using the
maemo gui for the wifi connection. I set my primary as a local ISP dns server
and the secondary to one of the opendns servers.

This seems to have resolved the issue, but is still a royal pain to set for
each new wifi connection.

But at least I can now install apps from the official repo and install deps
that were required for apps in the extras repo.
Comment 10 Matthew 2010-01-25 14:55:54 UTC
(In reply to comment #9)

Also please note that when doing an nslookup on downloads.maemo.nokia.com did
return a pingable IP address! For some reason it returned an IP (after a few
seconds) that obviously didn't have the repo stored on it...
Comment 11 egoshin 2010-01-27 21:27:38 UTC
Please look into hot repository-and-HAM discussion -

http://talk.maemo.org/showthread.php?t=41544&page=10

It can explain why there is a difference between Akamai caching servers on
cellular access and wifi access.

Your cell provider uses akamai and it caches a repository Release and signature
file (look into discission a couple of pages). Your WiFi provider uses either
direct server address or another cache server.
Comment 12 Andre Klapper maemo.org 2010-02-16 20:31:13 UTC
So this is not a bug according to comment 11?
This still happens in 3.2010.02-8 I assume?
Comment 13 Matthew 2010-02-17 14:10:36 UTC
(In reply to comment #12)
> So this is not a bug according to comment 11?
> This still happens in 3.2010.02-8 I assume?
> 

I can't really comment on if it's the same as comment #11 or not as I don't
really understand what they are talking about there.

I do know the issue still exists in 3.2010.02-8.002 (according to "About
product") though. Also please note that it's not just the update manager that's
affected in my case. It also affects desktop widgets and pixelpipe and anything
seemingly that relies on a direct network connection. (MicroB seems to work
really slowly, but it works eventually strangely enough)

My fix for it is when I change from "nameserver 127.0.0.1" to "nameserver <isp
dns server ip>" in my resolv.conf, everything seems to function correctly.

Some sort of dnsmasq misconfiguration issue somewhere? (I haven't touched any
of the dnsmasq config outside /etc/resolv.conf)

If anyone needs more info, I'm more than happy to provide. (I don't have a
cellular data connection however) It's a very strange bug. 100% repeatable
though.
Comment 14 gidyn 2010-03-02 14:07:20 UTC
I've been having this since PR 1.1. I can't try PR 1.1.1, because the bug
breaks the updater, and UK doesn't get the update in any case.

Tried both OpenDNS and TalkTalk.
Comment 15 dglent 2010-03-06 15:26:45 UTC
i have changed the nameserver to the dns ip of my isp and now it works not only
the installation from ovi store but the imap.gmail too :)
thanks
Comment 16 dglent 2010-03-08 17:49:03 UTC
(In reply to comment #15)
> i have changed the nameserver to the dns ip of my isp and now it works not only
> the installation from ovi store but the imap.gmail too :)
> thanks
> 

the problem is that this setting works only at home because with wap i have to
put again 127.0.0.1
Comment 17 Andre Klapper maemo.org 2010-03-27 18:43:42 UTC
(Questions that miss technical background:)
So is this an application manager issue? Is a proxy setting somehow involved?
Comment 18 Matthew 2010-03-27 23:50:48 UTC
(In reply to comment #17)
> (Questions that miss technical background:)
> So is this an application manager issue? Is a proxy setting somehow involved?
> 

In my case at least, it seems to be a dnsmasq issue when using WLAN. No
proxies. Setting resolv.conf to point to my isp dns server when in WLAN mode
fixes the issue, but that's not ideal obviously.
Comment 19 Matt Giuca 2010-04-30 06:32:50 UTC
Ah, I've had a similar bug (Bug #9448) which was blocking my IMAP in Modest
(comment #15 had that problem too). I just realised this is a DNS problem. I
have a dodgy router (iiNet BoB) which also causes problems in Ubuntu.

Setting my DNS to 8.8.8.8 in resolv.conf instantly fixes this for me (for
email, apt-get, OM Weather, and everything else). However, what I don't get is
that setting the DNS server in the connection setup has no effect.

That is; if I select my WiFi connection, go to Advanced Settings, IP Addresses,
uncheck "Auto-retrieve DNS" and enter 8.8.8.8 and 8.8.4.4 in the Primary and
Secondary DNS addresses, it will still fail.

If I look in resolv.conf, I see 127.0.0.1 still. Why doesn't resolv.conf
reflect my active WiFi connection's DNS servers? I would like a way to fix this
without having to manually edit resolv.conf (because I want to use the custom
DNS servers only for this particular connection).
Comment 20 dwilms nokia 2010-05-11 13:32:08 UTC
*** Bug 8722 has been marked as a duplicate of this bug. ***
Comment 21 ffalty 2010-05-26 00:42:07 UTC
Timeouts for 
Modest (pop.gmx.de, pop.gmail.com) and 
App Manager with repositories at https://downloads.maemo.nokia.com/
but only in a certain router/isp combination:

Wifi Router: Alice Modem 1121 WLAN which is an ISP branded Siemens
S1621-Z220-A.
ISP: Alice Hansenet Germany.
N900: Global PR1.2 (Nearly vanilla - only root access is installed, so i could
use ping) and before with PR1.1, too 
No proxies; no router firewall enabled; browsing including https-sites does
work 

Using google DNS 8.8.8.8, 8.8.4.4 everything works fine.
Comment 22 kat 2010-05-30 05:25:38 UTC
I have the exact same problem after a fresh install of the newest firmware.

The problem is that Nokia is using an invalid Akamai Certificate, which is
publishing the Akamai domain name instead of the Nokia domain name which is
expected from the Apt manager.

Nokia needs to get the person who does the web certificates within their
organization to check that Akamai is also forwarding Nokia certificates instead
of their own.

(Akamai is a service hired by Nokia, NOT by anyones ISP).
Comment 23 kat 2010-05-30 05:29:07 UTC
This is the hint from the logging

apt-worker: =====Ignoring version from wrong domain=====: tutorial-home-applet
0.6.14+0m5

Because apt-worker is expecting nokia.com and getting the file from akamai.com
Comment 24 roberto.cardona 2010-06-14 16:19:35 UTC
When will this annoying bug get resolved? Who is taking care of it?
Comment 25 Philipp Burch 2010-06-23 23:20:56 UTC
Hi guys,

same issue for me. I've got the N900 a few weeks ago (I have a data option) and
everything worked fine. This month I've used the mobile connection more
intensively and used up the data volume. No problem so far I thought, since I
can fetch mail and updates on the Wifi. But it's not possible. Mail for
exchange (MfE) always says "Invalid host address for Exchange server" and the
update manager has problems with the repos located at nokia (As mentioned
before). Foreca-weather isn't able to get its data as well. However, browsing
the Internet and fetching IMAP-Mails works fine.
To do some research I then set up a Wifi connection using my notebook whilst
running Wireshark. Obviously, there is a problem with host name resolution.
If I run "nslookup downloads.maemo.nokia.com", the output looks like that:

Standard query AAAA downloads.maemo.nokia.com
Standard query response, No such name
Standard query AAAA downloads.maemo.nokia.com
Standard query response, No such name
Standard query A downloads.maemo.nokia.com
Standard query response CNAME downloads.maemo...
Standard query PTR 238.221...
Standard query response, No such name

wheras type "AAAA" means "IPv6 address" (Uh?!) and "A" means just "Host
address".

In contrast to this, the update manager produces output as follows (running
apt-get update as root):

[...]
Standard query AAAA downloads.maemo.nokia.com
Standard query response, No such name
Standard query response, No such name
Standard query AAAA moff.mozilla.com
Standard query AAAA downloads.maemo.nokia.com
Standard query response, No such name
Standard query response, No such name
Standard query A moff.mozilla.com
Standard query AAAA downloads.maemo.nokia.com
Standard query response, No such name
Standard query response A 63.245...
[...]

There is no try to get the "Host address" of downloads.maemo.nokia.com, however
there is for moff.mozilla.com. The list contains many more such request, most
of them with this strange "AAAA" type and a negative answer.

Any ideas what to do? It's a bit annoying...
Thanks in advance.
Comment 26 egoshin 2010-06-23 23:27:59 UTC
Do you have IPv6 enabled in your WiFi router?
Comment 27 Philipp Burch 2010-06-23 23:44:22 UTC
(In reply to comment #26)
> Do you have IPv6 enabled in your WiFi router?
> 

Nope, since it does not support that. I wanted to try it with the ad-hoc
network (where I can see what really goes on), but I wasn't able to set it up
with IPv6 support.
I'm at school tomorrow and will try again with their network. I guess they have
IPv6 enabled. We will see...
Comment 28 Philipp Burch 2010-06-24 10:07:19 UTC
Just tried it in the school network, works like a charm here. *confused*
Comment 29 jom 2010-08-12 21:18:33 UTC
I had the same problem. It was something to do with the DNS in the Netopia
router on my network. I tried a Linksys router and it worked ok.
Comment 30 Philipp Burch 2010-08-28 23:43:56 UTC
Any news in this issue? I can't really believe that I should buy a new
Access-Point only because of a new mobile. I've tried a few other devices in
the WLAN and none of them had any trouble accessing the internet through this
AP. So it shouldn't be completely wrong...
The other thing is: What if it doesn't even work with another Access-Point?
Comment 31 Matt Giuca 2010-08-29 03:52:30 UTC
(In reply to comment #30)
> Any news in this issue? I can't really believe that I should buy a new
> Access-Point only because of a new mobile.

No news, but did you try what I said in comment #19: work around the issue by
changing your DNS servers to another one such as Google's (8.8.8.8 and
8.8.4.4). But as I said there, you have to do it by editing /etc/resolv.conf;
it doesn't seem to work by setting DNS servers in the UI.

Also try updating your router's firmware to the latest. I did and eventually
Belkin fixed the issue so I don't have to use that workaround any more.
Comment 32 Philipp Burch 2010-08-29 13:13:20 UTC
(In reply to comment #31)
> No news, but did you try what I said in comment #19: work around the issue by
> changing your DNS servers to another one such as Google's (8.8.8.8 and
> 8.8.4.4). But as I said there, you have to do it by editing /etc/resolv.conf;
> it doesn't seem to work by setting DNS servers in the UI.

Just tried it (with the google NS, as well as the one of my ISP), no
difference. APT still isn't able to resolve downloads.maemo.nokia.com.

> Also try updating your router's firmware to the latest. I did and eventually
> Belkin fixed the issue so I don't have to use that workaround any more.

I've this already with no success. The new firmware dates to Feb 2008, so it's
not that old...

I've also tried to add the IP of the server in question to my hosts file, not
even this works.

But what could cause this problem? It's really just APT with
downloads.maemo.nokia.com and Mail for exchange with our school server. Pinging
these servers for example works perfectly, so the device basically *can*
resolve the host name.

This issue is really annoying!
Comment 33 Philipp Burch 2010-08-29 14:02:14 UTC
(In reply to comment #32)
> (In reply to comment #31)
> > No news, but did you try what I said in comment #19: work around the issue by
> > changing your DNS servers to another one such as Google's (8.8.8.8 and
> > 8.8.4.4). But as I said there, you have to do it by editing /etc/resolv.conf;
> > it doesn't seem to work by setting DNS servers in the UI.
> 
> Just tried it (with the google NS, as well as the one of my ISP), no
> difference. APT still isn't able to resolve downloads.maemo.nokia.com.

UPDATE: Previously, I've added the Google NS as a secondary DNS, which didn't
work. Now I've made it the only entry in my resolv.conf and it works somehow.
Somehow because I can access the official repos, but it sometimes is terribly
slow (2Bytes/s o.O) and Mail for exchange still won't synchronize. It spins for
about a minute and then runs into a timeout.
Comment 34 deanclark1974 2010-09-12 22:20:44 UTC
very slow to do anything in app manager howerver, faster app manager works fine