How to fix Cydia Impactor "http-win.cpp:160" error as of 2018-08-11

fix_cydia_error_20180811.md

How to fix Cydia Impactor "http-win.cpp:160" error as of 2018-08-11

As per https://www.reddit.com/r/jailbreak/comments/95qb5d/discussion_cydia_impactor_ccp_160_error_megathread/ Cydia Impactor is currently throwing the following error on Windows:

---------------------------
Error
---------------------------
http-win.cpp:160
Peer certificate cannot be authenticated with given CA certificates
SSL certificate problem: self signed certificate in certificate chain
---------------------------
OK
---------------------------

tl;dr

Note: This very hacky fix is not thoroughly tested and may cause issues. Hopefully an updated Cydia Impactor is released soon to truly address the problem.

1. Make a backup copy of the file Impactor.dat (it comes with Cydia Impactor and should be in the same directory as your Impactor.exe) just in case
2. Open the original Impactor.dat in 7zip
3. Delete verisign-2048-256.pem from inside of Impactor.dat using the 7zip window
4. Use notepad.exe to save the following text to a new file on your hard drive. The file should be called verisign-2048-256.pem (without the usual .txt extension!)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

5. Add the file you created in step 4 to the inside of Impactor.dat using your 7zip window from step 2

The long version

By capturing some Cydia Impactor traffic using Wireshark, we see that the host https://developerservices2.apple.com is using the following certificate chain:

• 0c:8b:7f:c5:c8:ed:73:80:29:7a:a7:d3:52:5a:4c:6a (Apple's leaf certificate, valid as of 2018-07-25)
• Which is signed by 0c:8e:e0:c9:0d:6a:89:15:88:04:06:1e:e2:41:f9:af (Digicert Global CA G2)
• Which is signed by 03:3a:f1:e6:a7:11:a9:a0:bb:28:64:b1:1d:09:fa:e5 (Digicert Global Root G2 - the trusted root certificate for the chain)

This trusted root certificate can be obtained directly from DigiCert and then pem-encoded using the following:

% curl -s https://dl.cacerts.digicert.com/DigiCertGlobalRootG2.crt | openssl x509 -in - -inform der    
-----BEGIN CERTIFICATE-----
MIIDjjCCAnagAwIBAgIQAzrx5qcRqaC7KGSxHQn65TANBgkqhkiG9w0BAQsFADBh
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBH
MjAeFw0xMzA4MDExMjAwMDBaFw0zODAxMTUxMjAwMDBaMGExCzAJBgNVBAYTAlVT
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzfNNNx7a8myaJCtSnX/RrohCgiN9RlUyfuI
2/Ou8jqJkTx65qsGGmvPrC3oXgkkRLpimn7Wo6h+4FR1IAWsULecYxpsMNzaHxmx
1x7e/dfgy5SDN67sH0NO3Xss0r0upS/kqbitOtSZpLYl6ZtrAGCSYP9PIUkY92eQ
q2EGnI/yuum06ZIya7XzV+hdG82MHauVBJVJ8zUtluNJbd134/tJS7SsVQepj5Wz
tCO7TG1F8PapspUwtP1MVYwnSlcUfIKdzXOS0xZKBgyMUNGPHgm+F6HmIcr9g+UQ
vIOlCsRnKPZzFBQ9RnbDhxSJITRNrw9FDKZJobq7nMWxM4MphQIDAQABo0IwQDAP
BgNVHRMBAf8EBTADAQH/MA4GA1UdDwEB/wQEAwIBhjAdBgNVHQ4EFgQUTiJUIBiV
5uNu5g/6+rkS7QYXjzkwDQYJKoZIhvcNAQELBQADggEBAGBnKJRvDkhj6zHd6mcY
1Yl9PMWLSn/pvtsrF9+wX3N3KjITOYFnQoQj8kVnNeyIv/iPsGEMNKSuIEyExtv4
NeF22d+mQrvHRAiGfzZ0JFrabA0UWTW98kndth/Jsw1HKj2ZL7tcu7XUIOGZX1NG
Fdtom/DzMNU+MeKNhJ7jitralj41E6Vf8PlwUHBHQRFXGU7Aj64GxJUTFy8bJZ91
8rGOmaFvE7FBcf6IKshPECBV1/MUReXgRPTqh5Uykw7+U0b6LJ3/iyK5S9kJRaTe
pLiaWN0bfVKfjllDiIGknibVb63dDcY3fe0Dkhvld1927jyNxF1WW6LZZm6zNTfl
MrY=
-----END CERTIFICATE-----

Cydia Impactor ships with a file called Impactor.dat which contains several trusted root CA certificates:

• geotrust-2048-256.pem
• verisign-1024-128.pem
• verisign-2048-128.pem
• verisign-2048-256.pem

Replacing any of these with a PEM-encoded copy of the Digicert Global Root G2 certificate seems to fix the "http-win.cpp:160" error.

https://twitter.com/justinsteven

Thanks its works :D

You are awsome !!

You are a genius buddy
Thanks so much
Had to sign up to thank you. Keep up bro

I love when the correct solution is on the first page of results after googling the problem. Thank you very much guys

You are a genius JustinSteven thank you

I did installed fine, however, the App doesn't launch, when I click on the Icon it shows the Niantic screen for a sec. then disappears

Thank you very much :D You're such a genius!

Not working at all. Causing new problem 95