Advertising
Calculating title update download links with HMAC key
Forum rules
Forum rule Nº 15 is strictly enforced in this subforum.
Forum rule Nº 15 is strictly enforced in this subforum.
Re: Calculating title update download links with HMAC key
Just so you are aware, when the Vita downloads a PKG file, it is over HTTP, not HTTPS.
Re: Calculating title update download links with HMAC key
That isn't very smart, why would it be over HTTP?Proxima wrote:Just so you are aware, when the Vita downloads a PKG file, it is over HTTP, not HTTPS.
I'm not calling you a liar, I'm calling Sony stupid.
Advertising
Ps Vita 1000 3.60 HenKaku
PSP 3000 03g 6.20 LME 2.3 Perm (Black)
PSP 3000 03g 6.20 LME 2.3 Perm (Silver)
PSP 3000 03g 6.20 LME 2.3 Perm (Black)
PSP 3000 03g 6.20 LME 2.3 Perm (Silver)
Re: Calculating title update download links with HMAC key
And why is Sony stupid? When has downloading large files over HTTPS even been a good idea? Do you even know what HTTPS is used for?
Re: Calculating title update download links with HMAC key
This means it is possible to create URL links for any game/app update .pkg with Game ID, right? So we can download the missing update .pkg files of PSM etc.?
Re: Calculating title update download links with HMAC key
You can't just hijack the https connection. The Vita will refuse to use the connection if the certificates don't match.MooMooMan wrote:I am willing to bet my manhood that what you are proposing is very difficult at the moment, or down right impossible.EchoDev wrote:If we could manipulate https data to the vita we prolly could feed it our own pkg files right? Change the pkg file to a different one from the Sony servers to see if it accepts it.
Does anyone know how the sha1sum is calculated in the xml file? It does not seem to be a standard sha1 calculation.
If it were that easy, all you would need to do is set up a router to search for a specific https connection, and reroute it to another site, or better yet, your own home server with the files you need.
The idea is nice though, I wonder if something will ever come of it. I guess all we need is the keys? I don't know, I only code in JavaScript. Lol
Re: Calculating title update download links with HMAC key
Pretty much.reprep wrote:This means it is possible to create URL links for any game/app update .pkg with Game ID, right? So we can download the missing update .pkg files of PSM etc.?
Another great contribution from Proxima. Thank you!
Re: Calculating title update download links with HMAC key
Very nice Proxima, always nice to see the things you do
Unfortunately, I'm not getting the same result. I'm getting the following link for PCSA00007:
This is the implementation of hmac_sha256 that I used:
https://gist.github.com/tsupo/112188/ac ... b58b6dff5e
Unfortunately, I'm not getting the same result. I'm getting the following link for PCSA00007:
Code: Select all
https://gs-sec.ww.np.dl.playstation.net/pl/np/PCSA00007/c6a6524d5018c043074f3d543b8940be043ad1cd8721ab4a66ccadbd98af2d92/PCSA00007-ver.xml
https://gist.github.com/tsupo/112188/ac ... b58b6dff5e
-
- Guru
- Posts: 2874
- Joined: Sat Apr 21, 2012 1:23 pm
- Location: The North Pole
Re: Calculating title update download links with HMAC key
yup, got a different result too using openssl hmac.
PSP 2001 - TA-085 - 6.61 PRO-C2
PS Vita 3G - PCH-1101 - 3.65 HENkaku Ensō
Alcatel phone - Android 8.1.0
Laptop - Toshiba Satellite L305D-S5974 - Ubuntu 16.04 LTS
PS Vita 3G - PCH-1101 - 3.65 HENkaku Ensō
Alcatel phone - Android 8.1.0
Laptop - Toshiba Satellite L305D-S5974 - Ubuntu 16.04 LTS
Re: Calculating title update download links with HMAC key
this one is working nice .. by frtomtomdu80
https://www.dropbox.com/s/nij7w3o29urgi ... e.exe?dl=0
https://www.dropbox.com/s/nij7w3o29urgi ... e.exe?dl=0
Re: Calculating title update download links with HMAC key
http://web.mit.edu/freebsd/head/contrib ... o/sha256.c
This is what I used for my implementation. Not sure why it would vary between implementations. Maybe differences in how the arguments processed.
This is what I used for my implementation. Not sure why it would vary between implementations. Maybe differences in how the arguments processed.