Tntsat + Oscam + Format von aeskeys

[cfleischmann]

so - habe heute das viacess secure 5.0 modul bekommen, und die aktivierung der Karte hat problemlos geklappt...
(Vu DUo 2, oscam, dvbapi,easymouse)
intern funktioniert die Karte problemlos...
der Schlafzimmer receiver, VU Solo allerdings verbindet auf meine Duo 2 problemlos, bekommt auch einen matching reader, aber der Bildschirm bleibt schwarz...
Muss man hier noch etwas beachten??

 

[Levis618]

Hi,

auch beim Client muss : disablecrccws = 1
in den Reader.

MfG Levis

 

[cfleischmann]

Ja, das wars... danke

 

[tyrotronic]

• 
  
  Spoiler

  [*]2018/01/07 10:41:40 0F43A139 r (reader) tntsat [internal] card detected
  [*]2018/01/07 10:41:41 0F43A139 r (reader) tntsat [internal] ATR: xxxxxxxxxxxxxxxxxxxxxxx
  
  [*]2018/01/07 10:41:44 0F43A139 r (reader) tntsat [internal] Buffers readed 0 bytes total time_us 3095769
  [*]2018/01/07 10:41:44 0F43A139 r (reader) tntsat [internal] Init card protocol T0, FI=1, F=372, D=12, N=0
  [*]2018/01/07 10:41:44 0F43A139 r (reader) tntsat [internal] Calculated work ETU is 6.89 us reader mhz = 450
  [*]2018/01/07 10:41:45 3A26EFE2 c (dvbapi) Demuxer 0 no enabled matching ecmpids -> decoding is waiting for matching readers!
  [*]2018/01/07 10:41:47 0F43A139 r (reader) tntsat [internal] Buffers readed 0 bytes total time_us 3098438
  [*]2018/01/07 10:41:48 0F43A139 r (reader) tntsat [internal] PLL Reader: ATR Fsmax is 5 MHz, clocking card to 4.50 Mhz (nearest possible mhz specified reader->mhz)
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] using ecm #701 for long viaccess ecm
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] type: Viaccess (non-standard atr), caid: 0500, serial: #########
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] providers: 2 (FFF400,030B00)
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] Maturity level [F]=no age limit
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] Using PIN 0000!
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] Parental lock disabled
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] Maturity level [F]=no age limit
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] ready for requests
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] found card system viaccess
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [viaccess] THIS WAS A SUCCESSFUL START ATTEMPT No 1 out of max alloted of 1
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [viaccess] card detected
  [*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [viaccess] serial: #########
  [*]2018/01/07 10:41:50 0F43A139 r (reader) tntsat [viaccess] provider: 1, id: ####################, sa: ########, geo: empty
  [*]2018/01/07 10:41:50 0F43A139 r (reader) tntsat [viaccess] provider: 2, id: ####################, sa: ########, geo: 03 FF FF 00
  [*]2018/01/07 10:41:50 0F43A139 r (reader) tntsat [viaccess] class: 00, expiry date: 2016/11/05 - 2020/11/04
  [*]2018/01/07 10:41:50 0F43A139 r (reader) tntsat [viaccess] CA 28 initialisation successful!
  [*]2018/01/07 10:41:50 0F43A139 r (reader) tntsat [viaccess] ERROR: Cannot open EMM file '/etc/tuxbox/config/all' (errno=2 No such file or directory)
  [*]2018/01/07 10:41:51 3A26EFE2 c (dvbapi) Demuxer 0 no enabled matching ecmpids -> decoding is waiting for matching readers!

Das ist mein log die karte V5 war nun 1std im viacess smit 5.0 modul und zeigt das denn bei tieers in OSCam r11086

Type Caid Provid ID Class Start Date Expire Date Name
class 0500 030B00 0000000000000000 00000000 2016-11-05 2020-11-04 0500@030B00 unknown

wird aber nix hell was tun ? länger ins modul ? ATR SERIAl alles da ausser bei VALID TO bei karten info in der oscam steht N/A

 

[tigitigi]

Karte sieht OK aus, poste mal deine config-Dateien.

 

[tyrotronic]

Spoiler

[reader]
label = tntsat
description = TNT SAT France0500:030B00
protocol = internal
device = /dev/sci0
readnano = all
cacheex_drop_csp = 1
cacheex_block_fakecws = 1
caid = 0500
boxkey = 014D902F
deskey = 22D60F37567BAB12F505D8C8C71A22E3
detect = cd
mhz = 450
cardmhz = 2700
aeskeys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
group = 1
emmcache = 1,3,2,0
blockemm-bylen = 183,81
lb_weight = 300
disablecrccws = 1
deprecated = 1

[account]
user = tnt-sat
pwd = tnt-sat
caid = 0500
au = 1
emmreassembly = 1
group = 1
cacheex_drop_csp = 1
cacheex_block_fakecws = 1
disablecrccws = 1
deprecated = 1

[global]
logfile = /dev/null
clienttimeout = 6000
netprio = 1
unlockparental = 1
nice = -1
maxlogsize = 1000
waitforcards = 0
waitforcards_extra_delay = 0
preferlocalcards = 2
dropdups = 1
emmlogdir = /usr/keys/
lb_mode = 1
lb_save = 500
lb_nbest_readers = 2
lb_min_ecmcount = 2
lb_max_ecmcount = 2000
lb_retrylimit = 2800
lb_stat_cleanup = 1
lb_auto_betatunnel = 0
lb_auto_betatunnel_mode = 5
lb_auto_timeout_p = 20
ecmfmt = c/s/l/y
suppresscmd08 = 1

[cache]
delay = 10
max_time = 10
max_hit_time = 7
cwcycle_maxlist = 1000
cwcycle_keeptime = 30
cwcycle_allowbadfromffb = 1
cwcycle_usecwcfromce = 1

[cs378x]
port = xxxxxx
suppresscmd08 = 1

[dvbapi]
enabled = 1
au = 1
pmt_mode = 0
delayer = 60
ecminfo_type = 1
user = dvbapiau
read_sdt = 2
write_sdt_prov = 1
boxtype = dreambox

 

[tigitigi]

Spoiler: config

[reader]
label = tnt
protocol = internal
device = /dev/sci0
caid = 0500
detect = cd
cardmhz = 2700
mhz = 450
group = 1
emmcache = 1,3,2
aeskeys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
disablecrccws = 1
ident = 0500:030B00
boxkey = 014D902F
deskey = 22D60F37567BAB12F505D8C8C71A22E3
P: 0500:030B00 1
[account]
user = tnt-sat
pwd = tnt-sat
au = 1
group = 1

[global]
nice = -1
logfile = stdout
cachedelay = 120
saveinithistory = 1
[dvbapi]
enabled = 1
au = 1
boxtype = dreambox
user = tnt-sat

 

[FoooLs]

Der Karte fehlt das Update auf 7cc. Im Log steht noch #701

[*]2018/01/07 10:41:49 0F43A139 r (reader) tntsat [internal] using ecm #701 for long viaccess ecm

 

[tyrotronic]

okay also noch länger drinne lassen im Viacess modul smit 5.0 orca ? welchen kanal soll ich schalten ?

 

[Delphin111]

Hallo zusammen, hab auch wieder mal problem mit TNT Sat

laut log ist update auf der karte

• 2018/01/09 07:32:31 2D0DA41E r (reader) TNTsat [mouse] using ecm #7cc for long viaccess ecm

aber bekomme diese Info von oscam
(0500@030B00/1319/21FD/168:8F807395AE634A70381866A8E65217FC): not found (277 ms) by TNTsat - France 4 HD (Viaccess nano E0 detected, n

was hat es mit dem Nano E0 auf sich?

Danke für Info und Hilfe

 

[tyrotronic]

@Delphin111
hatte die tntsat karte v5 über nacht auf france 4 im viacess modul drinne abe kein update bekommen auf #7cc
was muss man denn beachten ? besondere einstellungen am modul oder welchen kanal wählen ?

Danke

 

[Delphin111]

kann ich Dir auch nicht genau sagen, hatte von halben Jahr jemanden hier aus dem Board die Karte geschickt, der hat update gemacht, lief bis letzte Woche auch problemlos

 

[peterdoo]

Habe heute eine V5 von #701 auf #7cc upgedatet. Auf TF1 geschaltet. Zuerst etwa 2 Stunden gbox 811 (etwa 21 EMMs) und danach noch etwa eine Stunde scam 3.59 (4 EMMs).

In den beiden konnte man die EMMs sehen. Da zwei Karten im Gerät laufen, funktionierte es erst nachdem Slot 2 im gbox wie auch im scam deaktiviert wurde. Vorher waren keine EMMs zu sehen. Jetzt läuft die Karte problemlos.

 

[tyrotronic]

wie rufst du in telnet denn den live log auf bei gbox ?
@peterdoo

 

[peterdoo]

gbox ?
scam ?

Mit Parameter Fragezeichen starten. So zeigen die beiden die Logdaten im telnet. Zum Abbrechen Strg-C.

/var/keys/gbox.cfg:

Spoiler

# gbox config file

# Trace, Debug
# xx yz ; xx=00 no konsole output
# xx yz ; xx=01 konsole output
# xx yz ; y=0 debug output (dont use)
# xx yz ; y=1 no debug output
# xx yz ; z=0 ouput to konsole
# xx yz ; z=1 output to /var/tmp/debug.txt
# xx yz ; z=2 Output to UDP (to capture with gboxt)
Z: { 01 11 } 192.168.1.2 8024

# gbox working mode
# 00 pure Emu
# 01 pure SoftCam (when card inside), Emu (when no card inside)
# 02 pure Net Client
# 03 Mixed mode !!!!! always use this !!!!!
G: { 03 }

# Display ECM messages on Konsole
# 00 dont show any ECMs
# 01 show only valid ECMs
# 02 show valid and bad ECMs with complete data display
C: { 01 }

# Display EMM messages on Konsole
# 00 dont show any EMMs
# 01 show only valid EMMs
# 02 show valid and bad EMMs with complete data display
# 1* Log any tier change on PW-Nagra-17xx cards into /var/keys/pwupdate.log
M: { 01 }

# Auto Update
# 00 AU disable (default)
# 01 AU enable
# 02 AU auto
# 03 AU enable with ua,sa and ga filter !!!!! always use this !!!!!
A: { 03 }

# Key Update
# 01 update only new keys, default setting
# 02 update all keys (used for valid PMK checking)
U: { 02 }

# Hash pids
# 00 hash all pids, DO NOT USE THIS OPTION, IT IS ONLY FOR TESTING STUFF
# 01 hash only pids with implemented algos and available keys !!!!! always use this
H: { 01 }

# Key files folder
# 00 keyfiles in /var/keys
# 01 keyfiles in /var/tmp
T: { 00 }

# On Screen Display for the Multysystemcam on com1/com2
# 00 No OSD (default)
# 01 display Smartcard messages in Neutrino
# 02 display Smartcard messages in Neutrino new nhttpd format
# 03 display Smartcard messages in Enigma
# 04 display Smartcard messages in Enigma2
O: { 00 } 192.168.0.3 coolstream

# Logger and NET-mode UDP port Init
# 00 do not init UDP port
# 01 Init UDP port for IP, port, UDP
L: { 00 } 192.168.0.251 7025

# demux, multicam/comport configuration
# example: yz = 0x0A = 00001010 (use com2 with inverted CTS detection line)
# *x ** ; x = device nummber to be used (0= default)
# D* ** ; force use of /proc/bus/gtx for cw write operations
(in the dbox2 the gbox writes directly the CWs, 00 is the
recommended mode ! No drivers are required) use D* ** ONLY if
you have Problems. 0* ** should be prefered !!!
# F* ** ; write CWs in both devices (used for PVR in STB04xxx devices)
# ** y* ; y=0001b (0x1*) use slot1 as Multicam (only on STB04xxx)
# ** y* ; y=0010b (0x2*) use slot2 as Multicam (only on STB04xxx)
# ** y* ; y=0011b (0x3*) use slot1 and slot2 as Multicams (only on STB04xxx)
# ** *z ; z=0001b (0x*1) use com1 as Multicam
# ** *z ; z=0010b (0x*2) use com2 as Multicam
# ** *z ; z=0011b (0x*3) use com1 and com2 as Multicams
# ** yz ; yz=00110011b (0x33) use slot1+slot2+com1+com2 as Multicams
# ** *z ; z=0100b (0x*4) invert CTS detection on com1
# ** *z ; z=1000b (0x*8) invert CTS detection on com2
V: { 00 10 } #Slot 1
#V: { 00 20 } #Slot 2
#V: { 00 30 } #Slot 1+2
#V: { 00 3F } #Slot 1+2+SC8in1

# RS232 SSSP mode
# x debug messages, 1=on, 0=off
# y com port to use (0=none, 1=com1, 2=com2)
R: { 00 } 9600

# Task type
# 00 ** normal mode gbox mode (no season, use Multicam instead)
# 01 ** Season Emulation in a Irdeto allcam chid 0602 nonZ
# 10 ** Season Emulation in a Irdeto allcam chid 1702 nonZ
# 11 ** Season Emulation in a Irdeto allcam chid 1702 Z
# 12 ** Season Emulation in a Irdeto allcam chid 1722 Z
# 13 ** Season Emulation in a Irdeto allcam chid 1762 Z
# ** *1 Com port to use for season emulatiom (1 or 2)
# ** 0* Use CTS for RST detection
# ** 1* Use DCD for RST detection
# ** ** 9600 = Baudrate to be used (working only on dbox2)
W: { 00 00 } 9600

# =============================================================================
# extra options to override default setting in case you expirience Problems,
# normaly these setings are not required.

# Files, folders, devices
# folder/device comment
#F: { 01 } /var/tmp/pmt.tmp // pmt file
#F: { 02 } /var/tmp/emm.info // key update log file
#F: { 03 } /var/tmp/ecm.info // ecm info file
#F: { 04 } /var/tmp/atack.txt // atack info file
#F: { 08 } 1 // pmt mode (0 - pmt file mode, 1 - pmt socket mode)
#F: { 11 } /var/keys // folder for config files
#F: { 12 } /var/tmp // folder for temporary file
#F: { 13 } /var/tmp // folder for keyfiles
#F: { 21 } /dev/null // ca device
#F: { 22 } /dev/null // dvr device
#F: { 23 } /dev/null // demux device
#F: { 31 } /dev/null // second ca device to write cw's (recording)
#F: { 41 } /dev/sci0 // STB04xxx slot1
#F: { 42 } /dev/sci1 // STB04xxx slot1
#F: { 43 } /dev/tts/0 // rs232 com1
#F: { 44 } /dev/tts/1 // rs232 com2
#F: { 43 } /dev/ttyUSB0 // rs232 com1# für externen Cardreader an com1 SC8in1 oder MCR 4/8 oder Smargo
#F: { 44 } /dev/ttyUSB1 // rs232 com2# für externen Cardreader an com2 SC8in1 oder MCR 4/8 oder Smargo

# For overclocking freaks, Clocking internal STB04xxx slots with:
# 1=7.80MHz 2=6.30MHz 3=5.25MHz 4=4.50MHz 5=3.94MHz 6=3.50MHz 7=3.15MHz
# Irdeto works fine on 7.8MHz, all other fine on 6.30MHz or 5.25MHz
# The Dream has not a clean clock signal, some cards that are sensitive will
# refuse to work even on 3.5MHz, thats why 3.15MHz is the default value there.
# On other STB04xxx recievers the same cards work with 6.30MHz
# Ist nicht Aktiv geschaltet ,also keine Funktion
#F: { 51 } 02 // irdeto
#F: { 52 } 03 // seca
F: { 53 } 01 // viaccess
#F: { 54 } 03 // nagra
#F: { 55 } 03 // crypto
#F: { 57 } 03 // conax
#F: { 58 } 03 // nds

# force a name change of the season or sssp rs232 device
#F: { 45 } /dev/ttyS1

# set stay alive ping time in seconds (default is 300)
#F: { A0 } 300

# disable direct serial port I/O access on 80x86cpus (win and linux)
# direct port i/o is used to set unusual Baudrates, if you want to
# a 3.579MHz card in a 6.000MHz reader etc ...
#
# Enabled (A1=0) is the default setting, has always been !!!
#
# Disable (set to 1) it ONLY if you have problems with ioperm or you want
# to use a usb-to-rs232 smartcard reader
F: { A1 } 1

# descrambler selection by camd.socket private descriptor (0 - index mode, 1 - mask mode), mask mode is default
#F: { AA } 1

/var/keys/softcam.cfg:

Spoiler

# CAS settings (NEW)
#
#[generic]
#reset_rs232_buffer = 1 ; (default: 1) empty RS232 buffer before writing
#
#[slot-n] ; slot section with n=1..18
#include = /foo/slot.cfg ; looking for section parameters in user defined configuration file, only outside of a section defined parameters will be used
#initialization = basic ; (default: basic) [basic,extended] init card in basic or extended mode
#disable_pts = 0 ; (default: 0) enable/disable protocol type selection (PTS) handshake
#enable_ice = 0 ; (default: 0) enable/disable irdeto cryptoworks enveloped support
#enable_onionmode = 0 ; (default: 0) enable/disable irdeto/nagra aladin onion mode (1833(1702)1833)
#alternative_frequency = 0 ; (default: 0) check additional osc frequency, value in kHz, example 8MHz=8000000
#alternative_baudrate = 0 ; (default: 0) check additional baudrate for atr, value in bit/s, example 81861
#byte_delay = 0 ; (default: 0) unit (1e-6 s)
#instruction_delay = 0 ; (default: 0) unit (1e-3 s)
#
#enable_unique_emm = 1 ; (default: 0) set unique emm section filter on demux device
#enable_shared_emm = 1 ; (default: 0) set shared emm section filter on demux device
#enable_global_emm = 1 ; (default: 0) set global emm section filter on demux device
#block_unique_emm = 0 ; (default: 1) block unique address/hex_serial emm
#block_shared_emm = 0 ; (default: 1) block shared address/provider emm
#block_global_emm = 0 ; (default: 1) block global address/all_card emm
#block_user_emm = 0 ; (default: 1) block user emm, read from /var/tmp/remm.txt
#save_processed_emm = 0 ; (default: 0) save processed EMMs to (/var/tmp/scXX.emmproc)
#save_processed_emm_file= /var/keys/sc0X.emmproc; (default: /var/tmp/scXX.emmproc) user defined output file
#save_rejected_emm = 0 ; (default: 0) save rejected EMMs to (/var/tmp/scXX.emmblock)
#save_rejected_emm_file = /var/keys/sc0X.emmblock; (default: /var/tmp/scXX.emmblock) user defined output file
#
#sidfilter = 000C,000D ; define sids can dispatch or not dispatch by card
#sidfilter_local_policy = allow_all ; (default: allow_all) [deny_all,allow_all,allow_defined,deny_defined]
# ; deny_all - old cwshare S-Line local rule 00
# ; allow_all - old cwshare S-Line local rule 01
# ; allow_defined - old cwshare S-Line local rule 02
# ; deny_defined - old cwshare S-Line local rule 03
#sidfilter_global_policy= allow_defined ; (default: allow_all) [deny_all,allow_all,allow_defined,deny_defined]
# ; deny_all - old cwshare S-Line global rule 00
# ; allow_all - old cwshare S-Line global rule 01
# ; allow_defined - old cwshare S-Line global rule 02
# ; deny_defined - old cwshare S-Line global rule 03
#sidfilter_teacher = card ; [card,network] use selected ecm request source to update sidfilter (add or delete current sid)
# ; card - old cwshare S-Line global rule 03, means allow defined and update by zone0
# ; network - old cwshare S-Line global rule 03, means allow defined and update by zone1
#
#pidfilter = 100C,100D ; define pids can dispatch or not dispatch by card
#pidfilter_local_policy = allow_all ; (default: allow_all) [deny_all,allow_all,allow_defined,deny_defined]
#pidfilter_global_policy= allow_defined ; (default: allow_all) [deny_all,allow_all,allow_defined,deny_defined]
#
########################################################################################
#V13/14 Karten
#Sobald für die Karte eine Verlängerung gesendet wird erstellt die gbox in/tmp eine Datei
#Namens SC01.emmblock.Den dort enthaltenen Verlängerer kopiert ihr dann in eine Datei Namens remm.txt
#und schiebt diese dann nach /tmp die gbox arbeitet diese Datei dann automatisch ab,
#und verlängert dann die Karte.Ihr könnt die V13/14 karte natürlich auch in einen anderen Slot stecken ,
#ihr müßt dann aber die config genauso anlegen wie die für Slot 1.
#Solltet ihr noch mehr Karten haben und ein/en externe/n Reader/s benutzen dann müßt ihr die Slots erweitern.
#Ihr könnt bis zu 18 Slots erstellen. Slot1 und Slot2 sind immer eure internen Reader der Box ,ab Slot3 beginen dann
#eure externen Reader.

[generic]
reset_rs232_buffer = 1

[slot-1] # Exklusiv für V13/14 Karten
initialization = extended
disable_pts = 0
enable_ice = 0 # ORF Karte 0=cryptoworks/Mode 1=irdeto/Mode
alternative_frequency = 0
alternative_baudrate = 0
byte_delay = 0
instruction_delay = 0
#
enable_unique_emm = 1
enable_shared_emm = 1
enable_global_emm = 1
block_unique_emm = 0
block_shared_emm = 0
block_global_emm = 0
block_user_emm = 0
save_processed_emm = 1
save_rejected_emm = 1

[slot-2] # Karten die nicht geblock werden brauchen
initialization = extended
disable_pts = 0
enable_ice = 0 # # ORF Karte 0=cryptoworks/Mode 1=irdeto/Mode
alternative_frequency = 0
alternative_baudrate = 0
#
enable_unique_emm = 1
enable_shared_emm = 1
enable_global_emm = 1
block_unique_emm = 0
block_shared_emm = 0
block_global_emm = 0
block_user_emm = 0
save_processed_emm = 0
save_rejected_emm = 0

/etc/scam/config/config:

Spoiler

/debug/disable_sci=1 # disable card slot 2

Bei gbox sehen die EMMs so aus:

Spoiler

===============================================
===== Via EMM on CaID 0x0500, pid 0x168C ======
prov: FFF40, MKey: 01, SA: 12 88 00
card 1 response in 232 ms
Card response: 90 00
===============================================

Und so bei scam (es gibt längere und kürzere):

Spoiler

[sci0] <- ca a4 04 00 03
[sci0] -> a4
[sci0] <- ff f4 00
[sci0] -> 90
[sci0] -> 00
[sci0] <- ca f4 00 01 2c
[sci0] -> f4
[sci0] <- 91 08 4c ... 65
[sci0] -> 90
[sci0] -> 00