fasferraz / nwu-non3gpp-5gc

NWu IKEv2/IPSec Dialer for 5GC / N3IWF

Hi there 👋

• 🔭 I’m currently working on almost everything ...
• 🌱 I’m always learning (at least trying to) ...
• 💬 Ask me about things related to mobile ...
• 📫 How to reach me: [email protected]
• ⚡ Fun fact: ...

Next project: gNB application similar to my eNB application, but for 5G.

nwu-non3gpp-5gc's Issues

Installation

I think this might be helpful to others as there are no installation instruction given and for someone who is starting freshly things may become complex.

sudo apt insatll libpcsclite-dev

pip3 install serial wheel pycrypto  pyscard swig requests cryptography

git clone https://github.com/mitshell/card.git
cd card
python3 setup.py install
cd ..

git clone https://github.com/mitshell/CryptoMobile.git
cd CryptoMobile/
python3 setup.py install
cd ..

This is what worked for me on ubuntu:22.04. You are welcome to improve it.

IKE Cert Fragmentation

There seems to be an issue with large or multiple Certificates due to fragmentation, due to the fragmentation the full certificates are not received and result in errors. Please see the attached output example
(venv) csyost@pivpn:~/NWu-Non3GPP-5GC $ sudo python3 nwu_emulator.py -m 10.1.13.136 -a ims -d wo.vzwwo.com -M 311 -N 480 -T SWU -k 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 -U 1468
[ 2024-03-02 17:58:50.673614 ] INTERFACE_TYPE 0
[ 2024-03-02 17:58:50.673821 ]

STATE 1:

[ 2024-03-02 17:58:50.676176 ] NAT SOURCE 89b995f88db990d5367ad25c89655d98a2e65a48
[ 2024-03-02 17:58:50.676355 ] NAT DESTINATION cf7e4962124a071b63c669db6081491aac1df744
[ 2024-03-02 17:58:50.676513 ] sending IKE_SA_INIT
[ 2024-03-02 17:58:50.733686 ] Received IKE message decoded:
[ 2024-03-02 17:58:50.733751 ] [[41, [0, 17, b'', b'\x00\x02']]]
[ 2024-03-02 17:58:50.733803 ] received IKE_SA_INIT
[ 2024-03-02 17:58:50.733857 ] REPEAT_STATE : INVALID_KE_PAYLOAD
[ 2024-03-02 17:58:50.733887 ]

STATE 1 (retry 1):

---

[ 2024-03-02 17:58:50.737045 ] NAT SOURCE 89b995f88db990d5367ad25c89655d98a2e65a48
[ 2024-03-02 17:58:50.737242 ] NAT DESTINATION cf7e4962124a071b63c669db6081491aac1df744
[ 2024-03-02 17:58:50.737397 ] sending IKE_SA_INIT
[ 2024-03-02 17:58:50.810652 ] Received IKE message decoded:
[ 2024-03-02 17:58:50.810700 ] [[33, [1, 1, b'', b'\x00\x00\x00,\x01\x01\x00\x04\x03\x00\x00\x0c\x01\x00\x00\x0c\x80\x0e\x00\x80\x03\x00\x00\x08\x02\x00\x00\x02\x03\x00\x00\x08\x03\x00\x00\x02\x00\x00\x00\x08\x04\x00\x00\x02']], [34, [2, b'\xec\xb2\x18\xdc\xeb\xb9\xdf_\x17-EcN\x958\x9b\xef\xa7\xf2\xa3\x88\xbfzx\xc6\xa2\\xfe\xaf5\x02s\x08\x0cg.\xc6\xf6\xcd\xc8\xa4\x07\x91\xdf\t\x9f\xe9\xfe\x9a\x16DG\xbf{\xc9\t\xec\x10\\r\xef8\x0c\x80$\x0b\xd1\x97\xd6\xaen\xb4J\xb5k/\xd6\xb2\xf2\xf6\x17\x11x\xac{b\xe2\x94\x8aouw\xe7a\xff[\tl\xd9\xf0\xaf\x18Tp\xb4p\xc9\x16\x0eK*\xfbc\x82\xf1\xcec5}\x99e,6\x03\xf5t\xb1p']], [40, [b'\xc8\xd7YW,\xa9\xb5q\xae\x96\xf8$D\xab\x97\xc8\xa0\xa9a\xa8q\xcf8\x038F\xd9e\xce\xbc\xcf\xb3']], [41, [0, 16388, b'', b'\x12\x10\xd2\x7f\xf9\x17D\xb2\xb50\x063\xd8\xeb2=\xc7\x82\x90R']], [41, [0, 16389, b'', b'\xe8\x1c,\xbd\xb4\xfbu\n\x11\x04ro\xec_h\x1c]\xcb5\xb9']]]
[ 2024-03-02 17:58:50.810774 ] received IKE_SA_INIT
[ 2024-03-02 17:58:50.813717 ] DIFFIE-HELLMAN KEY 5bdb7b45d330e8ac73536114dca1d70b8e8042a0fa900e9f4e016d6f5a952205d21166e6a797c412cd74606bbb8c6ceed2ed2bd0c553d55e0ade3faa5f19ac1a9a4836bf39662398296d30a6b0ad9ce63ca93987cee6dd031b36676b30eb0c573e0b063e4369c047a7731ac9e866eb0928311a5d8efdcd7e1927160c069ef36b
[ 2024-03-02 17:58:50.813821 ] NAT SOURCE RECEIVED 1210d27ff91744b2b5300633d8eb323dc7829052
[ 2024-03-02 17:58:50.814014 ] NAT SOURCE CALCULATED 1210d27ff91744b2b5300633d8eb323dc7829052
[ 2024-03-02 17:58:50.814069 ] NAT DESTINATION RECEIVED e81c2cbdb4fb750a1104726fec5f681c5dcb35b9
[ 2024-03-02 17:58:50.814181 ] NAT DESTINATION CALCULATED dfb8aec470875269850e21442bed812f3cb72782
[ 2024-03-02 17:58:50.814341 ] SKEYSEED 9d89eaa6db15ab728956deee12a4d22f3a433631
[ 2024-03-02 17:58:50.814383 ] STREAM cce21f597367e85c77acd20261cabdb7c8d759572ca9b571ae96f82444ab97c8a0a961a871cf38033846d965cebccfb36acead609fa5f5471da07653669c3f77
[ 2024-03-02 17:58:50.814897 ] SK_D 7f7247dcfd8ca420cf09645b09f1262a16a02170
[ 2024-03-02 17:58:50.814947 ] SK_AI 1caefbdec4d26c2b0098766c764995344d3d62c2
[ 2024-03-02 17:58:50.814977 ] SK_AR 84751f911f2d7afccd28d71685d1c69541766a0c
[ 2024-03-02 17:58:50.815006 ] SK_EI 214d2f7bef9563409c45ed14b67fbe66
[ 2024-03-02 17:58:50.815036 ] SK_ER e36989f1a5c2a54fe42aebdbd4ecbe17
[ 2024-03-02 17:58:50.815064 ] SK_PI 295babfd523c850f4655385e7fe75392fa7d8c42
[ 2024-03-02 17:58:50.815092 ] SK_PR bcede7efab9c7254ca2dbb62fcdbad08dbcbe9df
[ 2024-03-02 17:58:50.815161 ] IKEv2 DECRYPTION TABLE INFO (Wireshark):

6acead609fa5f547,1da07653669c3f77,214d2f7bef9563409c45ed14b67fbe66,e36989f1a5c2a54fe42aebdbd4ecbe17,"AES-CBC-128 [RFC3602]",1caefbdec4d26c2b0098766c764995344d3d62c2,84751f911f2d7afccd28d71685d1c69541766a0c,"HMAC_SHA1_96 [RFC2404]"
1da07653669c3f77,6acead609fa5f547,e36989f1a5c2a54fe42aebdbd4ecbe17,214d2f7bef9563409c45ed14b67fbe66,"AES-CBC-128 [RFC3602]",84751f911f2d7afccd28d71685d1c69541766a0c,1caefbdec4d26c2b0098766c764995344d3d62c2,"HMAC_SHA1_96 [RFC2404]"

[ 2024-03-02 17:58:50.815214 ] IKE SPI INITIATOR 6acead609fa5f547
[ 2024-03-02 17:58:50.815245 ] IKE SPI RESPONDER 1da07653669c3f77
[ 2024-03-02 17:58:50.815279 ]

STATE 2:

[ 2024-03-02 17:58:50.816275 ] sending IKE_AUTH (1)
[ 2024-03-02 17:58:51.076000 ] Received IKE message decoded:
[ 2024-03-02 17:58:51.076084 ] [[46, [[36, [2, b'topon.lb4.epdg02.elss.sa008.so.node.epc.mnc480.mcc311.3gppnetwork.org']], [37, [4, b'0\x82\x04\x920\x82\x03z\xa0\x03\x02\x01\x02\x02\x14\x1bpp\x01q\xdad\xfa\xbc\x89\xc9\xc2\x8a?*\xf1\xa8\x9d0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x1e\x17\r220705134201Z\x17\r300219031211Z0[1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02TX1\x0f0\r\x06\x03U\x04\x07\x13\x06Euless1\x100\x0e\x06\x03U\x04\n\x13\x07Verizon1\r0\x0b\x06\x03U\x04\x0b\x13\x04VNOE1\r0\x0b\x06\x03U\x04\x03\x13\x04ePDG0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc8H\xaf\xd1\x03?[\xb9\xb3\x87ef\xd9\x15.\rZ\xbf\xd6\xcd\r\x82\xc2\xd4q8\x94\x9f\xb6\xa0\xc6\x80\xe6\x16A\x9c\xb7\xd4\x7f)\xbf]x\x18\\xa0N\xc5Z\xa6\x7f\xb8\x93\xf8#~\xd3\xfc\x8a:*\xba/\x88\x10\xd3\x16Hz\xf5\xf7{c?\xc32\xb5\xa9\x0e\x8d\xae&\x0c\x9a\x9d-\x1f4\xe8_\x8b\x0c.(\x91!\xd0\x8c\xbc\x80\xd6\xae\xf0\xbcT\xa7.nE\r\xeb\x92\xc64\xd1\xbb\xa71a\xd6\x19\x00Y\xbdN>\xb5\xd5p\x80\x13A\x92b\xad\x1dc\x80{\xa5\xd4\x950g\xb9\xd6\xe7Ac\xc5\xfd\x11\xa68\x8bj\xb9\xc62\x034[\x1e\xd3\xfd\n\xfd\xcc\x99\x19\xdd\x16\xa1\xe8"E(Cm>\xec\xc5N\x9b\xde\x9e\xc7q\x12.\xb1]F\xe0%\x0f\xad\xa3+4M%\xb8\x85\xa9\x0c/\xbd\x8cH\x1b\xde\x96}J,\xc8b\xc1\xc7e\x1bl\xd4ro\xa5&\x84\xb4+\xbf\xd2\xdd\(X\x99\xf5\xfe\xcb\xb7:lft\xf7\xb8\xba\xcf?\xb7\x02\x03\x01\x00\x01\xa3\x82\x01\x100\x82\x01\x0c0\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000^\x06\x03U\x1d\x11\x04W0U\x82Etopon.lb4.epdg02.elss.sa008.so.node.epc.mnc480.mcc311.3gppnetwork.org\x82\x0cwo.vzwwo.com0\x0b\x06\x03U\x1d\x0f\x04\x04\x03\x02\x05\xe00\x13\x06\x03U\x1d%\x04\x0c0\n\x06\x08+\x06\x01\x05\x05\x07\x03\x010\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14!\xed\xfc\x99\x9fq\xbau\x05\xd0H\xf2\xc0\x8eT\xc9j\xccQ\x0b0:\x06\x03U\x1d\x1f\x043010/\xa0-\xa0+\x86)http://secure.iot.myvzw.com/crl/volte.crl0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14r\xe57\xcc\xbbFcb\xa8X\x1bO\xb0\x07\xd0\x92ab\xd4H0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00#\xd70\xab\\x84'W\xda\xb3\xecm0\x82v\x0e\xdeD\x18\x02[C\x87\x16\xf2y\x95\xe8H6\xf8b\xd5B\xf8\xbel\xd98\x8b\x90\xa5?\xf7\t\xbc\xc2\xc2\x90\xc14\r\xe4\x85\xc68J\x8c\x8c;\xa0}\xf89D7\x80\xd9\x18|\xfb\xa0\xd5\xc6\x02Z\x9c>(\x01%\xa4f\rY\x86\x16\x8cl\xbbs8\xf5\x7fK\x8c\x97F[\x80'9\x0b\t\x8e\xd1\xbb|\t\xdfq\xc6\x80\x19\x9f\x85\xde,\xa3W\xb6\x11\x1b\n\xb5\x19\x95\x1fK\n\xec\xd6\ti2\x17.\xb07\xac\xe8\xd5\xacy\xc3\xc3\xa9\xa7\xec\x12\xd7\x80\x17\x84\xd2\x01\xe6\xba\xc4N\x07z\x94\x88\x9d8\xb6\xbf\xe7\xdf\x03V\x84\x1aN\x00Sn\xdd\x9e\x96X\x13\x8b\xccL \x9d\x9f>\xb2*\xf1\xdd7.\x18\xb6>\x02|Q\xaa3\t\x9c\x1c\x0c)[\xbb"\x8f\xe1\xeaO(|'\x99\xd7\xaf\ty\xd8\xc9\x97\xda\x19X\xc1\x0ea\xb0\x118\xeb\xe2\x81\xd7[\xcf^\xd5\xbe\x18\x90<"m\r)m']], [37, [4, b'0\x82\x04\xca0\x82\x03\xb2\xa0\x03\x02\x01\x02\x02\x14U\xaa\x97EK\x19\xa4yn\xe7\xa5\x02\xb4.\xb2]\x8e\x87\xb6\xee0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\xa41\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x170\x15\x06\x03U\x04\x07\x13\x0eBasking Ridge 1+0)\x06\x03U\x04\n\x13"Verizon Business Network Services 1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\'0%\x06\x03U\x04\x03\x13\x1eVerizon Wireless ROOT CA - RSA0\x1e\x17\r160219153341Z\x17\r300219151211Z0\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xcd\xdc\xe6\xe1?\xba\x11\xa2\xe0\xfe\x05S\x83\x1c\x9a\xc0\x10\xea\xa2\x85I\xb4\xff\xc9E$\xb5@\'\xef\xb4\t\xd5\x1f\xb5XN\xacR\xe7\xda\xec\xdf\xc5R\x87g\x19\x0c\x8f\xd4\x1b\xf4\xff\x84A:\xdd\xe3\x1e\xd3\xc7\x95\x9e\x87S\x01j]\x0b\x18\xbd\x94TQO:\xfa\xae[jt+u\x03\x81\xc8\xab\x08\x95\x8d\x14\xc8\xa3p^-w\x16D\xa6\xf4G\xe4\x95\xd8\xa8\x8f\xeb :\x91LS+\x01\xfb\xbcB\xc25bl\xe37\x85\tt\x14\xa7\x8f\x1d\xfe\xa3~\xdfC\xf8\x8f$\x82\xcfj\x89i\xba\xda\x01g\xcc\xb5\x86Z%\xb7@A2\xbb:\xe9\xb85\x90\xf9;K\xa7p\xb9\\x89\xfatS\x9c\\xf7\x8f\xc0i|\xbe\x7f']]]]]
[ 2024-03-02 17:58:51.076247 ] received IKE_AUTH (1)
[ 2024-03-02 17:58:51.076297 ] Item 0: [36, [2, b'topon.lb4.epdg02.elss.sa008.so.node.epc.mnc480.mcc311.3gppnetwork.org']]
[ 2024-03-02 17:58:51.076331 ] Sub-item 0: 36
[ 2024-03-02 17:58:51.076364 ] Sub-item 1: [2, b'topon.lb4.epdg02.elss.sa008.so.node.epc.mnc480.mcc311.3gppnetwork.org']
[ 2024-03-02 17:58:51.076427 ] Item 1: [37, [4, b'0\x82\x04\x920\x82\x03z\xa0\x03\x02\x01\x02\x02\x14\x1bpp\x01q\xdad\xfa\xbc\x89\xc9\xc2\x8a?*\xf1\xa8\x9d0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x1e\x17\r220705134201Z\x17\r300219031211Z0[1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02TX1\x0f0\r\x06\x03U\x04\x07\x13\x06Euless1\x100\x0e\x06\x03U\x04\n\x13\x07Verizon1\r0\x0b\x06\x03U\x04\x0b\x13\x04VNOE1\r0\x0b\x06\x03U\x04\x03\x13\x04ePDG0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc8H\xaf\xd1\x03?[\xb9\xb3\x87ef\xd9\x15.\rZ\xbf\xd6\xcd\r\x82\xc2\xd4q8\x94\x9f\xb6\xa0\xc6\x80\xe6\x16A\x9c\xb7\xd4\x7f)\xbf]x\x18\\xa0N\xc5Z\xa6\x7f\xb8\x93\xf8#~\xd3\xfc\x8a:*\xba/\x88\x10\xd3\x16Hz\xf5\xf7{c?\xc32\xb5\xa9\x0e\x8d\xae&\x0c\x9a\x9d-\x1f4\xe8_\x8b\x0c.(\x91!\xd0\x8c\xbc\x80\xd6\xae\xf0\xbcT\xa7.nE\r\xeb\x92\xc64\xd1\xbb\xa71a\xd6\x19\x00Y\xbdN>\xb5\xd5p\x80\x13A\x92b\xad\x1dc\x80{\xa5\xd4\x950g\xb9\xd6\xe7Ac\xc5\xfd\x11\xa68\x8bj\xb9\xc62\x034[\x1e\xd3\xfd\n\xfd\xcc\x99\x19\xdd\x16\xa1\xe8"E(Cm>\xec\xc5N\x9b\xde\x9e\xc7q\x12.\xb1]F\xe0%\x0f\xad\xa3+4M%\xb8\x85\xa9\x0c/\xbd\x8cH\x1b\xde\x96}J,\xc8b\xc1\xc7e\x1bl\xd4ro\xa5&\x84\xb4+\xbf\xd2\xdd\(X\x99\xf5\xfe\xcb\xb7:lft\xf7\xb8\xba\xcf?\xb7\x02\x03\x01\x00\x01\xa3\x82\x01\x100\x82\x01\x0c0\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000^\x06\x03U\x1d\x11\x04W0U\x82Etopon.lb4.epdg02.elss.sa008.so.node.epc.mnc480.mcc311.3gppnetwork.org\x82\x0cwo.vzwwo.com0\x0b\x06\x03U\x1d\x0f\x04\x04\x03\x02\x05\xe00\x13\x06\x03U\x1d%\x04\x0c0\n\x06\x08+\x06\x01\x05\x05\x07\x03\x010\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14!\xed\xfc\x99\x9fq\xbau\x05\xd0H\xf2\xc0\x8eT\xc9j\xccQ\x0b0:\x06\x03U\x1d\x1f\x043010/\xa0-\xa0+\x86)http://secure.iot.myvzw.com/crl/volte.crl0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14r\xe57\xcc\xbbFcb\xa8X\x1bO\xb0\x07\xd0\x92ab\xd4H0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00#\xd70\xab\\x84'W\xda\xb3\xecm0\x82v\x0e\xdeD\x18\x02[C\x87\x16\xf2y\x95\xe8H6\xf8b\xd5B\xf8\xbel\xd98\x8b\x90\xa5?\xf7\t\xbc\xc2\xc2\x90\xc14\r\xe4\x85\xc68J\x8c\x8c;\xa0}\xf89D7\x80\xd9\x18|\xfb\xa0\xd5\xc6\x02Z\x9c>(\x01%\xa4f\rY\x86\x16\x8cl\xbbs8\xf5\x7fK\x8c\x97F[\x80'9\x0b\t\x8e\xd1\xbb|\t\xdfq\xc6\x80\x19\x9f\x85\xde,\xa3W\xb6\x11\x1b\n\xb5\x19\x95\x1fK\n\xec\xd6\ti2\x17.\xb07\xac\xe8\xd5\xacy\xc3\xc3\xa9\xa7\xec\x12\xd7\x80\x17\x84\xd2\x01\xe6\xba\xc4N\x07z\x94\x88\x9d8\xb6\xbf\xe7\xdf\x03V\x84\x1aN\x00Sn\xdd\x9e\x96X\x13\x8b\xccL \x9d\x9f>\xb2*\xf1\xdd7.\x18\xb6>\x02|Q\xaa3\t\x9c\x1c\x0c)[\xbb"\x8f\xe1\xeaO(|'\x99\xd7\xaf\ty\xd8\xc9\x97\xda\x19X\xc1\x0ea\xb0\x118\xeb\xe2\x81\xd7[\xcf^\xd5\xbe\x18\x90<"m\r)m']] [ 2024-03-02 17:58:51.076486 ] Sub-item 0: 37 [ 2024-03-02 17:58:51.076545 ] Sub-item 1: [4, b'0\x82\x04\x920\x82\x03z\xa0\x03\x02\x01\x02\x02\x14\x1bpp\x01~q\xdad\xfa\xbc\x89\xc9\xc2\x8a?\xf1\xa8\x9d0\r\x06\t\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x1e\x17\r220705134201Z\x17\r300219031211Z0[1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02TX1\x0f0\r\x06\x03U\x04\x07\x13\x06Euless1\x100\x0e\x06\x03U\x04\n\x13\x07Verizon1\r0\x0b\x06\x03U\x04\x0b\x13\x04VNOE1\r0\x0b\x06\x03U\x04\x03\x13\x04ePDG0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc8H\xaf\xd1\x03?[\xb9\xb3\x87ef\xd9\x15.\rZ\xbf\xd6\xcd\r\x82\xc2\xd4q8\x94\x9f\xb6\xa0\xc6\x80\xe6\x16A\x9c\xb7\xd4\x7f)\xbf]x\x18\\\xa0N\xc5Z\xa6\x7f\xb8\x93\xf8#\xd3\xfc\x8a:\xba/\x88\x10\xd3\x16Hz\xf5\xf7{c?\xc32\xb5\xa9\x0e\x8d\xae&\x0c\x9a\x9d-\x1f4\xe8_\x8b\x0c.(\x91!\xd0\x8c\xbc\x80\xd6\xae\xf0\xbcT\xa7.nE\r\xeb\x92\xc64\xd1\xbb\xa71a\xd6\x19\x00Y\xbdN>\xb5\xd5p\x80\x13A\x92b\xad\x1dc\x80{\xa5\xd4\x950g\xb9\xd6\xe7Ac\xc5\xfd\x11\xa68\x8bj\xb9\xc62\x034[\x1e\xd3\xfd\n\xfd\xcc\x99\x19\xdd\x16\xa1\xe8"E(Cm>\xec\xc5N\x9b\xde\x9e\xc7q\x12.\xb1]F\xe0%\x0f\xad\xa3+4M%\xb8~\x85\xa9\x0c/\xbd\x8cH\x1b\xde\x96}J,\xc8b\xc1\xc7e\x1bl\xd4ro\xa5&\x84\xb4+\xbf\xd2\xdd\\(X\x99\xf5\xfe\xcb\xb7:lft\xf7\xb8\xba\xcf?\xb7\x02\x03\x01\x00\x01\xa3\x82\x01\x100\x82\x01\x0c0\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000^\x06\x03U\x1d\x11\x04W0U\x82Etopon.lb4.epdg02.elss.sa008.so.node.epc.mnc480.mcc311.3gppnetwork.org\x82\x0cwo.vzwwo.com0\x0b\x06\x03U\x1d\x0f\x04\x04\x03\x02\x05\xe00\x13\x06\x03U\x1d%\x04\x0c0\n\x06\x08+\x06\x01\x05\x05\x07\x03\x010\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14!\xed\xfc\x99\x9fq\xbau\x05\xd0H\xf2\xc0\x8eT\xc9j\xccQ\x0b0:\x06\x03U\x1d\x1f\x043010/\xa0-\xa0+\x86)http://secure.iot.myvzw.com/crl/volte.crl0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14r\xe57\xcc\xbbFcb\xa8X\x1bO\xb0\x07\xd0\x92ab\xd4H0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00#\xd70\xab\\\x84\'W\xda\xb3\xecm0\x82v\x0e\xdeD\x18\x02[C\x87\x16\xf2y\x95\xe8H6\xf8b\xd5B\xf8\xbel\xd98\x8b\x90\xa5?\xf7\t\xbc\xc2\xc2\x90\xc14\r\xe4\x85\xc68J\x8c\x8c;\xa0}\xf89D7\x80\xd9\x18|\xfb\xa0\xd5\xc6\x02Z\x9c>(\x01%\xa4f\rY\x86\x16\x8cl\xbbs8\xf5\x7fK\x8c\x97F[\x80\'9\x0b\t\x8e\xd1\xbb|\t\xdfq\xc6\x80\x19\x9f\x85\xde,\xa3W\xb6\x11\x1b\n\xb5\x19\x95\x1fK\n\xec\xd6\ti2\x17.\xb07\xac\xe8\xd5\xacy\xc3\xc3\xa9\xa7\xec\x12\xd7\x80\x17\x84\xd2\x01\xe6\xba\xc4N\x07z\x94\x88\x9d8\xb6\xbf\xe7\xdf\x03V\x84\x1aN\x00Sn\xdd\x9e\x96X\x13\x8b\xccL \x9d\x9f>\xb2*\xf1\xdd~7.\x18\xb6>\x02|Q\xaa3\t\x9c\x1c\x0c)[\xbb"\x8f\xe1\xeaO(|\'\x99\xd7\xaf\ty\xd8\xc9\x97\xda\x19X\xc1\x0ea\xb0\x118~\xeb\xe2\x81\xd7[\xcf^\xd5\xbe\x18\x90<"m\r)m']
[ 2024-03-02 17:58:51.076617 ] Item 2: [37, [4, b'0\x82\x04\xca0\x82\x03\xb2\xa0\x03\x02\x01\x02\x02\x14U\xaa\x97EK\x19\xa4yn\xe7\xa5\x02\xb4.\xb2]\x8e\x87\xb6\xee0\r\x06\t\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\xa41\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x170\x15\x06\x03U\x04\x07\x13\x0eBasking Ridge 1+0)\x06\x03U\x04\n\x13"Verizon Business Network Services 1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1'0%\x06\x03U\x04\x03\x13\x1eVerizon Wireless ROOT CA - RSA0\x1e\x17\r160219153341Z\x17\r300219151211Z0\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xcd\xdc\xe6\xe1?\xba\x11\xa2\xe0\xfe\x05S\x83\x1c\x9a\xc0\x10\xea\xa2\x85I\xb4\xff\xc9E$\xb5@'\xef\xb4\t\xd5\x1f\xb5XN\xacR\xe7\xda\xec\xdf\xc5R\x87g\x19\x0c\x8f\xd4\x1b\xf4\xff\x84A:\xdd\xe3\x1e\xd3\xc7\x95\x9e\x87S\x01j]\x0b\x18\xbd\x94TQO:\xfa\xae[jt+u\x03\x81\xc8\xab\x08\x95\x8d\x14\xc8\xa3p^-w\x16D\xa6\xf4G\xe4\x95\xd8\xa8\x8f\xeb :\x91LS+\x01\xfb\xbcB\xc25bl\xe37\x85\tt\x14\xa7\x8f\x1d\xfe\xa3\xdfC\xf8\x8f$\x82\xcfj\x89i\xba\xda\x01g\xcc\xb5\x86Z%\xb7@A2\xbb:\xe9\xb85\x90\xf9;K\xa7p\xb9\\\x89\xfatS\x9c\\\xf7\x8f\xc0i|\xbe\x7f']] [ 2024-03-02 17:58:51.076662 ] Sub-item 0: 37 [ 2024-03-02 17:58:51.076731 ] Sub-item 1: [4, b'0\x82\x04\xca0\x82\x03\xb2\xa0\x03\x02\x01\x02\x02\x14U\xaa\x97EK\x19\xa4yn\xe7\xa5\x02\xb4.\xb2]\x8e\x87\xb6\xee0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\xa41\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x170\x15\x06\x03U\x04\x07\x13\x0eBasking Ridge 1+0)\x06\x03U\x04\n\x13"Verizon Business Network Services 1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\'0%\x06\x03U\x04\x03\x13\x1eVerizon Wireless ROOT CA - RSA0\x1e\x17\r160219153341Z\x17\r300219151211Z0\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xcd\xdc\xe6\xe1?\xba\x11\xa2\xe0\xfe\x05S\x83\x1c\x9a\xc0\x10\xea\xa2\x85I\xb4\xff\xc9E$\xb5@\'\xef\xb4\t\xd5\x1f\xb5XN\xacR\xe7\xda\xec\xdf\xc5R\x87g\x19\x0c\x8f\xd4\x1b\xf4\xff\x84A:\xdd\xe3\x1e\xd3\xc7\x95\x9e\x87S\x01j]\x0b\x18\xbd\x94TQO:\xfa\xae[jt+u\x03\x81\xc8\xab\x08\x95\x8d\x14\xc8\xa3p^-w\x16D\xa6\xf4G\xe4\x95\xd8\xa8\x8f\xeb :\x91LS+\x01\xfb\xbcB\xc25bl\xe37\x85\tt\x14\xa7\x8f\x1d\xfe\xa3~\xdfC\xf8\x8f$\x82\xcfj\x89i\xba\xda\x01g\xcc\xb5\x86Z%\xb7@A2\xbb:\xe9\xb85\x90\xf9;K\xa7p\xb9\\x89\xfatS\x9c\\xf7\x8f\xc0i|\xbe\x7f']
[ 2024-03-02 17:58:51.076779 ] Raw input data (i[0]): 37
[ 2024-03-02 17:58:51.076811 ] Raw input data (i[1][0]): 4
[ 2024-03-02 17:58:51.076839 ] Raw input data (i[1][1]): b'0\x82\x04\x920\x82\x03z\xa0\x03\x02\x01\x02\x02\x14\x1bpp\x01q\xdad\xfa\xbc\x89\xc9\xc2\x8a?*\xf1\xa8\x9d0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x1e\x17\r220705134201Z\x17\r300219031211Z0[1\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02TX1\x0f0\r\x06\x03U\x04\x07\x13\x06Euless1\x100\x0e\x06\x03U\x04\n\x13\x07Verizon1\r0\x0b\x06\x03U\x04\x0b\x13\x04VNOE1\r0\x0b\x06\x03U\x04\x03\x13\x04ePDG0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc8H\xaf\xd1\x03?[\xb9\xb3\x87ef\xd9\x15.\rZ\xbf\xd6\xcd\r\x82\xc2\xd4q8\x94\x9f\xb6\xa0\xc6\x80\xe6\x16A\x9c\xb7\xd4\x7f)\xbf]x\x18\\xa0N\xc5Z\xa6\x7f\xb8\x93\xf8#~\xd3\xfc\x8a:*\xba/\x88\x10\xd3\x16Hz\xf5\xf7{c?\xc32\xb5\xa9\x0e\x8d\xae&\x0c\x9a\x9d-\x1f4\xe8_\x8b\x0c.(\x91!\xd0\x8c\xbc\x80\xd6\xae\xf0\xbcT\xa7.nE\r\xeb\x92\xc64\xd1\xbb\xa71a\xd6\x19\x00Y\xbdN>\xb5\xd5p\x80\x13A\x92b\xad\x1dc\x80{\xa5\xd4\x950g\xb9\xd6\xe7Ac\xc5\xfd\x11\xa68\x8bj\xb9\xc62\x034[\x1e\xd3\xfd\n\xfd\xcc\x99\x19\xdd\x16\xa1\xe8"E(Cm>\xec\xc5N\x9b\xde\x9e\xc7q\x12.\xb1]F\xe0%\x0f\xad\xa3+4M%\xb8\x85\xa9\x0c/\xbd\x8cH\x1b\xde\x96}J,\xc8b\xc1\xc7e\x1bl\xd4ro\xa5&\x84\xb4+\xbf\xd2\xdd\(X\x99\xf5\xfe\xcb\xb7:lft\xf7\xb8\xba\xcf?\xb7\x02\x03\x01\x00\x01\xa3\x82\x01\x100\x82\x01\x0c0\x0c\x06\x03U\x1d\x13\x01\x01\xff\x04\x020\x000^\x06\x03U\x1d\x11\x04W0U\x82Etopon.lb4.epdg02.elss.sa008.so.node.epc.mnc480.mcc311.3gppnetwork.org\x82\x0cwo.vzwwo.com0\x0b\x06\x03U\x1d\x0f\x04\x04\x03\x02\x05\xe00\x13\x06\x03U\x1d%\x04\x0c0\n\x06\x08+\x06\x01\x05\x05\x07\x03\x010\x1f\x06\x03U\x1d#\x04\x180\x16\x80\x14!\xed\xfc\x99\x9fq\xbau\x05\xd0H\xf2\xc0\x8eT\xc9j\xccQ\x0b0:\x06\x03U\x1d\x1f\x043010/\xa0-\xa0+\x86)http://secure.iot.myvzw.com/crl/volte.crl0\x1d\x06\x03U\x1d\x0e\x04\x16\x04\x14r\xe57\xcc\xbbFcb\xa8X\x1bO\xb0\x07\xd0\x92ab\xd4H0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x00\x03\x82\x01\x01\x00#\xd70\xab\\x84'W\xda\xb3\xecm0\x82v\x0e\xdeD\x18\x02[C\x87\x16\xf2y\x95\xe8H6\xf8b\xd5B\xf8\xbel\xd98\x8b\x90\xa5?\xf7\t\xbc\xc2\xc2\x90\xc14\r\xe4\x85\xc68J\x8c\x8c;\xa0}\xf89D7\x80\xd9\x18|\xfb\xa0\xd5\xc6\x02Z\x9c>(\x01%\xa4f\rY\x86\x16\x8cl\xbbs8\xf5\x7fK\x8c\x97F[\x80'9\x0b\t\x8e\xd1\xbb|\t\xdfq\xc6\x80\x19\x9f\x85\xde,\xa3W\xb6\x11\x1b\n\xb5\x19\x95\x1fK\n\xec\xd6\ti2\x17.\xb07\xac\xe8\xd5\xacy\xc3\xc3\xa9\xa7\xec\x12\xd7\x80\x17\x84\xd2\x01\xe6\xba\xc4N\x07z\x94\x88\x9d8\xb6\xbf\xe7\xdf\x03V\x84\x1aN\x00Sn\xdd\x9e\x96X\x13\x8b\xccL \x9d\x9f>\xb2*\xf1\xdd7.\x18\xb6>\x02|Q\xaa3\t\x9c\x1c\x0c)[\xbb"\x8f\xe1\xeaO(|'\x99\xd7\xaf\ty\xd8\xc9\x97\xda\x19X\xc1\x0ea\xb0\x118\xeb\xe2\x81\xd7[\xcf^\xd5\xbe\x18\x90<"m\r)m`'
[ 2024-03-02 17:58:51.076917 ] Before cert Type of i[1][1]: <class 'bytes'>
[ 2024-03-02 17:58:51.076953 ] Before Cert Length of i[1][1]: 1174
[ 2024-03-02 17:58:51.077676 ] After cert Type of i[1][1]: <class 'bytes'>
[ 2024-03-02 17:58:51.077762 ] After Cert Length of i[1][1]: 1174
[ 2024-03-02 17:58:51.078130 ] After write Type of i[1][1]: <class 'bytes'>
[ 2024-03-02 17:58:51.078182 ] After write Length of i[1][1]: 1174
[ 2024-03-02 17:58:51.078214 ] cert: <Certificate(subject=<Name(C=US,ST=TX,L=Euless,O=Verizon,OU=VNOE,CN=ePDG)>, ...)>
[ 2024-03-02 17:58:51.078803 ] cert_val: b'-----BEGIN CERTIFICATE-----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\nsBE4fuvigddbz17VvhiQPCJtDSltYA==\n-----END CERTIFICATE-----\n'
[ 2024-03-02 17:58:51.078896 ] The CERTIFICATE:
-----BEGIN CERTIFICATE-----
MIIEkjCCA3qgAwIBAgIUG3BwAX5x2mT6vInJwmCKPyrxqJ0wDQYJKoZIhvcNAQEL
BQAwgZYxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJOSjEWMBQGA1UEBxMNQmFza2lu
ZyBSaWRnZTEsMCoGA1UEChMjVmVyaXpvbiBFbnRlcnByaXNlIE5ldHdvcmsgU2Vy
dmljZXMxGTAXBgNVBAsTEFZlcml6b24gV2lyZWxlc3MxGTAXBgNVBAMTEFZvbHRl
IElzc3VpbmcgQ0EwHhcNMjIwNzA1MTM0MjAxWhcNMzAwMjE5MDMxMjExWjBbMQsw
CQYDVQQGEwJVUzELMAkGA1UECBMCVFgxDzANBgNVBAcTBkV1bGVzczEQMA4GA1UE
ChMHVmVyaXpvbjENMAsGA1UECxMEVk5PRTENMAsGA1UEAxMEZVBERzCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhIr9EDP1u5s4dlZmDZFS4NWr/WzQ2C
wtRxOJSftqDGgOYWQZy31H8pv114GFygTmDFWqZ/uJP4I37T/Io6KroviBDTFkh6
9fd7Yz/DMrWpDo2uJgyanS0fNOhfiwwuKJEh0Iy8gNau8LxUpy5uRQ3rksY00bun
MWHWGWAAWb1OPrXVcIATQZJirR1jgHul1JUwZ7nW50Fjxf0RpjiLarnGMgM0Wx7T
/Qr9zJkZ3Rah6CJFKENtPuzFTpvensdxEi6xXUbgJQ+toys0TSW4foWpDC+9jEgb
3pZ9SizIYsHHZRts1HJvpSaEtCu/0t1cKFiZ9f7LtzpsZnT3uLrPP7cCAwEAAaOC
ARAwggEMMAwGA1UdEwEB/wQCMAAwXgYDVR0RBFcwVYJFdG9wb24ubGI0LmVwZGcw
Mi5lbHNzLnNhMDA4LnNvLm5vZGUuZXBjLm1uYzQ4MC5tY2MzMTEuM2dwcG5ldHdv
cmsub3Jnggx3by52end3by5jb20wCwYDVR0PBAQDAgXgMBMGA1UdJQQMMAoGCCsG
AQUFBwMBMB8GA1UdIwQYMBaAFCHt/Jmfcbp1BdBI8sCOVMlqzFELMDoGA1UdHwQz
MDEwL6AtoCuGKWh0dHA6Ly9zZWN1cmUuaW90Lm15dnp3LmNvbS9jcmwvdm9sdGUu
Y3JsMB0GA1UdDgQWBBRy5TfMu0ZjYqhYG0+wB9CSYWLUSDANBgkqhkiG9w0BAQsF
AAOCAQEAI9cwq1yEJ1fas+xtMIJ2Dt5EGAJbQ4cW8nmV6Eg2+GLVQvi+bNk4i5Cl
P/cJvMLCkME0DeSFxjhKjIw7oH34OUQ3gNkYfPug1cYCWpw+KAElpGYNWYYWjGy7
czj1f0uMl0ZbgCc5CwmO0bt8Cd9xxoAZn4XeLKNXthEbCrUZlR9LCuzWCWkyFy6w
N6zo1ax5w8Opp+wS14AXhNIB5rrETgd6lIidOLa/598DVoQaTgBTbt2ellgTi8xM
IJ2fPrIq8d1+Ny4Ytj4CfFGqMwmcHAwpW7sij+HqTyh8J5nXrwl52MmX2hlYwQ5h
sBE4fuvigddbz17VvhiQPCJtDSltYA==
-----END CERTIFICATE-----

[ 2024-03-02 17:58:51.082255 ] cert_key: b'0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xc8H\xaf\xd1\x03?[\xb9\xb3\x87ef\xd9\x15.\rZ\xbf\xd6\xcd\r\x82\xc2\xd4q8\x94\x9f\xb6\xa0\xc6\x80\xe6\x16A\x9c\xb7\xd4\x7f)\xbf]x\x18\\\xa0N\xc5Z\xa6\x7f\xb8\x93\xf8#\xd3\xfc\x8a:*\xba/\x88\x10\xd3\x16Hz\xf5\xf7{c?\xc32\xb5\xa9\x0e\x8d\xae&\x0c\x9a\x9d-\x1f4\xe8_\x8b\x0c.(\x91!\xd0\x8c\xbc\x80\xd6\xae\xf0\xbcT\xa7.nE\r\xeb\x92\xc64\xd1\xbb\xa71a\xd6\x19\x00Y\xbdN>\xb5\xd5p\x80\x13A\x92b\xad\x1dc\x80{\xa5\xd4\x950g\xb9\xd6\xe7Ac\xc5\xfd\x11\xa68\x8bj\xb9\xc62\x034[\x1e\xd3\xfd\n\xfd\xcc\x99\x19\xdd\x16\xa1\xe8"E(Cm>\xec\xc5N\x9b\xde\x9e\xc7q\x12.\xb1]F\xe0%\x0f\xad\xa3+4M%\xb8~\x85\xa9\x0c/\xbd\x8cH\x1b\xde\x96}J,\xc8b\xc1\xc7e\x1bl\xd4ro\xa5&\x84\xb4+\xbf\xd2\xdd\\(X\x99\xf5\xfe\xcb\xb7:lft\xf7\xb8\xba\xcf?\xb7\x02\x03\x01\x00\x01' [ 2024-03-02 17:58:51.083356 ] public_key: <cryptography.hazmat.backends.openssl.rsa._RSAPublicKey object at 0x7f9a31d610> [ 2024-03-02 17:58:51.083456 ] Raw input data (i[0]): 37 [ 2024-03-02 17:58:51.083488 ] Raw input data (i[1][0]): 4 [ 2024-03-02 17:58:51.083516 ] Raw input data (i[1][1]): b'0\x82\x04\xca0\x82\x03\xb2\xa0\x03\x02\x01\x02\x02\x14U\xaa\x97EK\x19\xa4yn\xe7\xa5\x02\xb4.\xb2]\x8e\x87\xb6\xee0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x0b\x05\x000\x81\xa41\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x170\x15\x06\x03U\x04\x07\x13\x0eBasking Ridge 1+0)\x06\x03U\x04\n\x13"Verizon Business Network Services 1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\'0%\x06\x03U\x04\x03\x13\x1eVerizon Wireless ROOT CA - RSA0\x1e\x17\r160219153341Z\x17\r300219151211Z0\x81\x961\x0b0\t\x06\x03U\x04\x06\x13\x02US1\x0b0\t\x06\x03U\x04\x08\x13\x02NJ1\x160\x14\x06\x03U\x04\x07\x13\rBasking Ridge1,0*\x06\x03U\x04\n\x13#Verizon Enterprise Network Services1\x190\x17\x06\x03U\x04\x0b\x13\x10Verizon Wireless1\x190\x17\x06\x03U\x04\x03\x13\x10Volte Issuing CA0\x82\x01"0\r\x06\t*\x86H\x86\xf7\r\x01\x01\x01\x05\x00\x03\x82\x01\x0f\x000\x82\x01\n\x02\x82\x01\x01\x00\xcd\xdc\xe6\xe1?\xba\x11\xa2\xe0\xfe\x05S\x83\x1c\x9a\xc0\x10\xea\xa2\x85I\xb4\xff\xc9E$\xb5@\'\xef\xb4\t\xd5\x1f\xb5XN\xacR\xe7\xda\xec\xdf\xc5R\x87g\x19\x0c\x8f\xd4\x1b\xf4\xff\x84A:\xdd\xe3\x1e\xd3\xc7\x95\x9e\x87S\x01j]\x0b\x18\xbd\x94TQO:\xfa\xae[jt+u\x03\x81\xc8\xab\x08\x95\x8d\x14\xc8\xa3p^-w\x16D\xa6\xf4G\xe4\x95\xd8\xa8\x8f\xeb :\x91LS+\x01\xfb\xbcB\xc25bl\xe37\x85\tt\x14\xa7\x8f\x1d\xfe\xa3~\xdfC\xf8\x8f$\x82\xcfj\x89i\xba\xda\x01g\xcc\xb5\x86Z%\xb7@A2\xbb:\xe9\xb85\x90\xf9;K\xa7p\xb9\\x89\xfatS\x9c\\xf7\x8f\xc0i|\xbe\x7f'
[ 2024-03-02 17:58:51.083579 ] Before cert Type of i[1][1]: <class 'bytes'>
[ 2024-03-02 17:58:51.083610 ] Before Cert Length of i[1][1]: 620
Traceback (most recent call last):
File "/home/csyost/NWu-Non3GPP-5GC/nwu_emulator.py", line 5409, in
main()
File "/home/csyost/NWu-Non3GPP-5GC/nwu_emulator.py", line 5404, in main
a.start_ike()
File "/home/csyost/NWu-Non3GPP-5GC/nwu_emulator.py", line 4605, in start_ike
if self.interface_type == SWU: self.start_ike_swu()
^^^^^^^^^^^^^^^^^^^^
File "/home/csyost/NWu-Non3GPP-5GC/nwu_emulator.py", line 4722, in start_ike_swu
result,info = self.state_2_swu()
^^^^^^^^^^^^^^^^^^
File "/home/csyost/NWu-Non3GPP-5GC/nwu_emulator.py", line 3159, in state_2_swu
cert = x509.load_der_x509_certificate(cert_der)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/usr/lib/python3/dist-packages/cryptography/x509/base.py", line 528, in load_der_x509_certificate
return rust_x509.load_der_x509_certificate(data)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
ValueError: error parsing asn1 value: ParseError { kind: ShortData }
(venv) csyost@pivpn:/NWu-Non3GPP-5GC $

Here is the tcpdump, the message is fragmented, however the additional fragment is missing

csyost@pivpn:/tmp $ sudo tcpdump -v | grep isakmp
tcpdump: listening on eth0, link-type EN10MB (Ethernet), snapshot length 262144 bytes
10.1.13.128.isakmp > 233.sub-141-207-169.myvzw.com.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[I]:
(p: #1 protoid=isakmp transform=4 len=40
(p: #2 protoid=isakmp transform=4 len=44
(p: #3 protoid=isakmp transform=4 len=44
233.sub-141-207-169.myvzw.com.isakmp > 10.1.13.128.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[R]:
10.1.13.128.isakmp > 233.sub-141-207-169.myvzw.com.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[I]:
(p: #1 protoid=isakmp transform=4 len=44
233.sub-141-207-169.myvzw.com.isakmp > 10.1.13.128.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[R]:
(p: #1 protoid=isakmp transform=4 len=44
10.1.13.128.ipsec-nat-t > 233.sub-141-207-169.myvzw.com.ipsec-nat-t: NONESP-encap: isakmp 2.0 msgid 00000001: child_sa ikev2_auth[I]:
233.sub-141-207-169.myvzw.com.ipsec-nat-t > 10.1.13.128.ipsec-nat-t: NONESP-encap: isakmp 2.0 msgid 00000001: child_sa ikev2_auth[R]: [|v2e] (len mismatch: isakmp 2908/ip 1468)
10.1.13.128.isakmp > 233.sub-141-207-251.myvzw.com.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[I]:
(p: #1 protoid=isakmp transform=4 len=40
(p: #2 protoid=isakmp transform=4 len=44
(p: #3 protoid=isakmp transform=4 len=44
233.sub-141-207-251.myvzw.com.isakmp > 10.1.13.128.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[R]:
10.1.13.128.isakmp > 233.sub-141-207-251.myvzw.com.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[I]:
(p: #1 protoid=isakmp transform=4 len=44
233.sub-141-207-251.myvzw.com.isakmp > 10.1.13.128.isakmp: isakmp 2.0 msgid 00000000: parent_sa ikev2_init[R]:
(p: #1 protoid=isakmp transform=4 len=44
10.1.13.128.ipsec-nat-t > 233.sub-141-207-251.myvzw.com.ipsec-nat-t: NONESP-encap: isakmp 2.0 msgid 00000001: child_sa ikev2_auth[I]:
233.sub-141-207-251.myvzw.com.ipsec-nat-t > 10.1.13.128.ipsec-nat-t: NONESP-encap: isakmp 2.0 msgid 00000001: child_sa ikev2_auth[R]: [|v2e] (len mismatch: isakmp 2908/ip 1468)

CREATE CHILD SA request IPSEC

I am testing against the Amarisoft solution.
I identified the following problem in generate_keyring_material_child(reverse=true).

Traceback (most recent call last):
File "nwu_emulator.py", line 5406, in
main()
File "nwu_emulator.py", line 5401, in main
a.start_ike()
File "nwu_emulator.py", line 4603, in start_ike
if self.interface_type == NWU: self.start_ike_nwu()
File "nwu_emulator.py", line 4677, in start_ike_nwu
self.state_connected_nwu()
File "nwu_emulator.py", line 4429, in state_connected_nwu
self.state_n3iwf_create_sa_child_nwu()
File "nwu_emulator.py", line 4553, in state_n3iwf_create_sa_child_nwu
self.generate_keying_material_child(reverse=True)
File "nwu_emulator.py", line 2554, in generate_keying_material_child
KEY_LENGHT_TOTAL = 2AUTH_KEY_SIZE + 2ENCR_KEY_SIZE
TypeError: unsupported operand type(s) for *: 'int' and 'NoneType'

The calculated AUTH_KEY_SIZE is None instead of int.

I think the error happend somehow here: AUTH_KEY_SIZE = self.integ_key_len_bytes.get(self.negotiated_integrity_algorithm_child)

Any suggestions?

IKE and IPSec Rekeying Support for NWu

Hi,

I noticed that IKE and IPSec Rekeying are currently only supported for SWu.
Are there any plans to extend this support to NWu as well?
If there are no immediate plans to implement this, could you please provide some insights or ideas on how to approach the implementation?
Any guidance on the relevant parts of the codebase that I should focus on would be greatly appreciated.

Thanks in advance.

No connection found for UE to send NAS message. This message will be cached in N3IWF

Hi, i am getting the folllowing error in the n3iwf from free5gc,
No connection found for UE to send NAS message. This message will be cached in N3IWF

and from the logs from your script is :
[ 2023-05-23 13:43:15.048422 ]

Signaling SA CHILD created. Establishing TCP session towards NAS...

Cannot create namespace file "/run/netns/tcp_socket_signalling": File exists
[ 2023-05-23 13:43:15.154198 ] cmd: ip netns exec tcp_socket_signalling ip link set dev tun2 up
[ 2023-05-23 13:43:15.181579 ] cmd: ip netns exec tcp_socket_signalling ip addr add 10.0.0.247/32 dev tun2
[ 2023-05-23 13:43:15.200347 ] cmd: ip netns exec tcp_socket_signalling route add -net 0.0.0.0/0 gw 10.0.0.247
[ 2023-05-23 13:43:17.283005 ] Tcp connection to NAS timeouted. Ending TCP Process.
[ 2023-05-23 13:43:17.284410 ] Exiting TCP process. Process terminated.

empty

Can not find smartcard.System module

As I run python3 nwu_emulator.py, system prompt ModuleNotFoundError: No module named 'smartcard.System'.
How can I load smartcard.System module?

AttributeError: 'nwu_swu' object has no attribute 'kn3iwf'

Hello, i was using the latest version of free5gc with docker compose. in that they already create a IPSEC tunnel. so i didnt create it manually. when I run the NWu-Non3GPP-5GC, it fails at Stage4. is this because of the change in the versions of the free5gc or the fact that i am using it in docker ? (i dont use Python_n3iwf inside docker. its in the host machine)

PDUSessionResourceSetupResponseTransfer failed: sequence truncated

In the stage 7,

Preparing REGISTRATION COMPLETE to send...
Preparing UL NAS TRANSPORT message with container PDU SESSION ESTABLISHMENT REQUEST to send...

there was no tun3 created. tun2 was created. but i can see the UE in the dashboard of the webconsole of free5gc.

the free5gc logs:

2022-02-15T12:57:10Z [INFO][N3IWF][NGAP] [N3IWF] Handle PDU Session Resource Setup Request
2022-02-15T12:57:15Z [ERRO][N3IWF][GTP] Dial to UPF failed: read udp 192.168.57.103:2152: i/o timeout
2022-02-15T12:57:15Z [ERRO][N3IWF][NGAP] Setup GTP connection with UPF failed: Dial failed
2022-02-15T12:57:15Z [INFO][N3IWF][NGAP] [N3IWF] Send PDU Session Resource Setup Response
2022-02-15T12:57:15Z [INFO][AMF][NGAP][192.168.56.103/10.0.2.15/192.168.57.103/10.0.0.1:58100] Handle PDU Session Resource Setup Response
2022-02-15T12:57:15Z [INFO][SMF][PduSess] Receive Update SM Context Request
2022-02-15T12:57:15Z [INFO][SMF][PduSess] In HandlePDUSessionSMContextUpdate
2022-02-15T12:57:15Z [ERRO][SMF][PduSess] Handle PDUSessionResourceSetupResponseTransfer failed: sequence truncated
2022-02-15T12:57:15Z [WARN][SMF][PduSess] SM Context State [Active] shouldn't be here
2022-02-15T12:57:15Z [INFO][SMF][GIN] | 200 | 127.0.0.1 | POST | /nsmf-pdusession/v1/sm-contexts/urn:uuid:ba409af8-11e8-4eaa-b406-5c42034415cb/modify |

I am using two VM in the same host machine.

Hardware To Establish Wi-Fi using N3IWF

Hi,

Can i connect actual/real WiFi UE N3IWF to test non 3GPP access.
Actually we are able to attach UE in Simulator mode,
Now we are looking into hardware part to establish Wi-Fi by using N3IWF and need to connect with 5g core,
Could you please suggest suitable hardware which is useful for N3IWF?

Thanks in advance