summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWanja Schulze <rajaschu@googlemail.com>2018-04-04 00:46:44 +0200
committerTim Schumacher <timschumi@gmx.de>2018-04-04 20:25:43 +0000
commitcf37f0af1e3daf34771fc051d9d6d60122e8e7a8 (patch)
treedb1701ea526f8e0ee0896d678b291843182b9745
parentca7e3194b8d3da282321683e87981753b0afdc5a (diff)
downloadandroid_device_common-cm-11.0.tar.gz
android_device_common-cm-11.0.tar.bz2
android_device_common-cm-11.0.zip
Switch to a secure gps connectioncm-11.0
Because the XTRA and XTRA2 data files are served over HTTP without SSL, this allows an attacker to mount a MITM attack on the network level and modify the GPS assistance data while in transit. Informations and fix taken from: https://wwws.nightwatchcybersecurity.com/2016/12/05/cve-2016-5341/ Change-Id: I4b2c16acc7316c56d6d50d824bf951b248df16e0
-rw-r--r--gps/gps.conf_AS6
-rw-r--r--gps/gps.conf_AS_SUPL6
-rw-r--r--gps/gps.conf_EU6
-rw-r--r--gps/gps.conf_EU_SUPL6
-rw-r--r--gps/gps.conf_US6
-rw-r--r--gps/gps.conf_US_SUPL6
6 files changed, 18 insertions, 18 deletions
diff --git a/gps/gps.conf_AS b/gps/gps.conf_AS
index ce3a4e2..052aca0 100644
--- a/gps/gps.conf_AS
+++ b/gps/gps.conf_AS
@@ -1,3 +1,3 @@
-XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
-XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
-XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
+XTRA_SERVER_1=https://xtrapath1.izatcloud.net/xtra.bin
+XTRA_SERVER_2=https://xtrapath2.izatcloud.net/xtra.bin
+XTRA_SERVER_3=https://xtrapath3.izatcloud.net/xtra.bin
diff --git a/gps/gps.conf_AS_SUPL b/gps/gps.conf_AS_SUPL
index a0e2a7d..ddd2be3 100644
--- a/gps/gps.conf_AS_SUPL
+++ b/gps/gps.conf_AS_SUPL
@@ -1,5 +1,5 @@
-XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
-XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
-XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
+XTRA_SERVER_1=https://xtrapath1.izatcloud.net/xtra.bin
+XTRA_SERVER_2=https://xtrapath2.izatcloud.net/xtra.bin
+XTRA_SERVER_3=https://xtrapath3.izatcloud.net/xtra.bin
SUPL_HOST=supl.google.com
SUPL_PORT=7276
diff --git a/gps/gps.conf_EU b/gps/gps.conf_EU
index ce3a4e2..052aca0 100644
--- a/gps/gps.conf_EU
+++ b/gps/gps.conf_EU
@@ -1,3 +1,3 @@
-XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
-XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
-XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
+XTRA_SERVER_1=https://xtrapath1.izatcloud.net/xtra.bin
+XTRA_SERVER_2=https://xtrapath2.izatcloud.net/xtra.bin
+XTRA_SERVER_3=https://xtrapath3.izatcloud.net/xtra.bin
diff --git a/gps/gps.conf_EU_SUPL b/gps/gps.conf_EU_SUPL
index a0e2a7d..ddd2be3 100644
--- a/gps/gps.conf_EU_SUPL
+++ b/gps/gps.conf_EU_SUPL
@@ -1,5 +1,5 @@
-XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
-XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
-XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
+XTRA_SERVER_1=https://xtrapath1.izatcloud.net/xtra.bin
+XTRA_SERVER_2=https://xtrapath2.izatcloud.net/xtra.bin
+XTRA_SERVER_3=https://xtrapath3.izatcloud.net/xtra.bin
SUPL_HOST=supl.google.com
SUPL_PORT=7276
diff --git a/gps/gps.conf_US b/gps/gps.conf_US
index ce3a4e2..052aca0 100644
--- a/gps/gps.conf_US
+++ b/gps/gps.conf_US
@@ -1,3 +1,3 @@
-XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
-XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
-XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
+XTRA_SERVER_1=https://xtrapath1.izatcloud.net/xtra.bin
+XTRA_SERVER_2=https://xtrapath2.izatcloud.net/xtra.bin
+XTRA_SERVER_3=https://xtrapath3.izatcloud.net/xtra.bin
diff --git a/gps/gps.conf_US_SUPL b/gps/gps.conf_US_SUPL
index a0e2a7d..ddd2be3 100644
--- a/gps/gps.conf_US_SUPL
+++ b/gps/gps.conf_US_SUPL
@@ -1,5 +1,5 @@
-XTRA_SERVER_1=http://xtra1.gpsonextra.net/xtra.bin
-XTRA_SERVER_2=http://xtra2.gpsonextra.net/xtra.bin
-XTRA_SERVER_3=http://xtra3.gpsonextra.net/xtra.bin
+XTRA_SERVER_1=https://xtrapath1.izatcloud.net/xtra.bin
+XTRA_SERVER_2=https://xtrapath2.izatcloud.net/xtra.bin
+XTRA_SERVER_3=https://xtrapath3.izatcloud.net/xtra.bin
SUPL_HOST=supl.google.com
SUPL_PORT=7276