Skip to content

Instantly share code, notes, and snippets.

@dellas60

dellas60/fix_cydia_error_20180811.md

Forked from justinsteven/fix_cydia_error_20180811.md
Created August 12, 2018 11:12
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save dellas60/6b11ad74c61a1a552975dc2dd4f2f977 to your computer and use it in GitHub Desktop.
Save dellas60/6b11ad74c61a1a552975dc2dd4f2f977 to your computer and use it in GitHub Desktop.
Download ZIP
How to fix Cydia Impactor "http-win.cpp:160" error as of 2018-08-11
Raw
fix_cydia_error_20180811.md

How to fix Cydia Impactor "http-win.cpp:160" error as of 2018-08-11

As per https://www.reddit.com/r/jailbreak/comments/95qb5d/discussion_cydia_impactor_ccp_160_error_megathread/ Cydia Impactor is currently throwing the following error on Windows:

---------------------------
Error
---------------------------
http-win.cpp:160
Peer certificate cannot be authenticated with given CA certificates
SSL certificate problem: self signed certificate in certificate chain
---------------------------
OK
---------------------------

tl;dr

Note: This very hacky fix is not thoroughly tested and may cause issues. Hopefully an updated Cydia Impactor is released soon to truly address the problem.

  1. Make a backup copy of the file Impactor.dat (it comes with Cydia Impactor and should be in the same directory as your Impactor.exe) just in case
  2. Open the original Impactor.dat in 7zip
  3. Delete verisign-2048-256.pem from inside of Impactor.dat using the 7zip window
  4. Use notepad.exe to save the following text to a new file on your hard drive. The file should be called verisign-2048-256.pem (without the usual .txt extension!)
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
  1. Add the file you created in step 4 to the inside of Impactor.dat using your 7zip window from step 2

The long version

By capturing some Cydia Impactor traffic using Wireshark, we see that the host https://developerservices2.apple.com is using the following certificate chain:

  • 0c:8b:7f:c5:c8:ed:73:80:29:7a:a7:d3:52:5a:4c:6a (Apple's leaf certificate, valid as of 2018-07-25)
  • Which is signed by 0c:8e:e0:c9:0d:6a:89:15:88:04:06:1e:e2:41:f9:af (Digicert Global CA G2)
  • Which is signed by 03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5 (Digicert Global Root G2 - the trusted root certificate for the chain)

This trusted root certificate can be obtained directly from DigiCert and then pem-encoded using the following:

% curl -s https://dl.cacerts.digicert.com/DigiCertGlobalRootG2.crt | openssl x509 -in - -inform der    
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Cydia Impactor ships with a file called Impactor.dat which contains several trusted root CA certificates:

  • geotrust-2048-256.pem
  • verisign-1024-128.pem
  • verisign-2048-128.pem
  • verisign-2048-256.pem

Replacing any of these with a PEM-encoded copy of the Digicert Global Root G2 certificate seems to fix the "http-win.cpp:160" error.

https://twitter.com/justinsteven

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment