[Samsung Gear S3] adfree:
My last few attempts failed... :o

but Download Wireless is alive. :good: :cool:

So I can flash again.

Have tested only modify rootfs.img from BQC5...

Fail A.

I have tried my old BQC5 rootfs.img with su and Cert files changed...

Fail B.

I have tried my old BQH1 rootfs.img with only Certs file changed...

See my used Batch file...

I am using my SM-Z130H for rootfs.img "creation"...

sdb root on
sdb push .\GearS3root\fingerprint_list.xml /opt/usr/media/Others
sdb push .\GearS3root\partner_root.pem /opt/usr/media/Others
sdb push .\GearS3root\platform_root.pem /opt/usr/media/Others
sdb push .\GearS3root\public_root.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-developer-root-ca.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-developers-root.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-distributor-root-ca-partner.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-distributor-root-ca-partner-manufacturer.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-distributor-root-ca-partner-operator.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-distributor-root-ca-public.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-partner-class-developer-root.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-partner-class-root-authority.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-platform-class-developer-root.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-platform-class-root-authority.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-public-class-developer-root.pem /opt/usr/media/Others
sdb push .\GearS3root\tizen-public-class-root-authority.pem /opt/usr/media/Others
sdb shell mount -t ext4 -o loop,rw /opt/usr/media/Others/rootfs.img /opt/usr/media/Others/2
sdb shell rm /opt/usr/media/Others/2/usr/share/wrt-engine/fingerprint_list.xml
sdb shell cp /opt/usr/media/Others/fingerprint_list.xml /opt/usr/media/Others/2/usr/share/wrt-engine
sdb shell cp /opt/usr/media/Others/partner_root.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/platform_root.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/public_root.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-developer-root-ca.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-developers-root.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-distributor-root-ca-partner.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-distributor-root-ca-partner-manufacturer.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-distributor-root-ca-partner-operator.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-distributor-root-ca-public.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-partner-class-developer-root.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-partner-class-root-authority.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-platform-class-developer-root.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-platform-class-root-authority.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-public-class-developer-root.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cp /opt/usr/media/Others/tizen-public-class-root-authority.pem /opt/usr/media/Others/2/usr/share/cert-svc/certs/code-signing/tizen
sdb shell cd /opt/usr/media/Others/2
sdb shell sync
pause
sdb shell cd /
sdb shell umount /opt/usr/media/Others/2

Fail C.

Created BQC5 rootfs.img with Batch...

To be sure no differences between BQH1 and BQC5 rootfs.img

------------------------------------------------

I have prepared CSC TAR file from BQC5... without partition.pit

As netOdin/Odin set/write this file into device...

I have no idea if any kind of Flags inside RSA 2048 Signature.. as I have no public key to decrypt...

According to my knowlege of Tizen 3 and 4 and my SM-R732... long time ago:

https://xdaforums.com/showpost.php?p=72553023&postcount=171

I have downloaded today Tizen 5 crap from here:

http://download.tizen.org/prerelease/tizen/unified/

So I realized rootfs.img is still unsigned...

So next attempts are to remove 256 Byte Signature from BQC5... + additional 16 Byte... where Software Revision is stored... looks like this:

02000000000000000000000000000000

Later more...

Best Regards