What's new

[SOLVED] Downgrading Woes - iOS6 to 5.0.1/5.1.1

Darkenvy6

New Member
Joined
Sep 7, 2010
Messages
25
Reaction score
2
Hey guys,
I'm a forum lurker; I research as much as possible to avoid making questionable posts, but I am experienced with jailbreaking since the early iphone days. Anyways....

I am attempting to downgrade from iOS6 to 5.0.1 or 5.1.1 . Both of them I have the shsh blobs for. I stiched my own ipsw files for both and tried to downgrade using itunes and selecting that stitched ipsw. I have tried a magnatude of things but constantly get error 1600, 1601, 1602 (or occasionally a two digit error as I try random things out of frustration despite me knowing the process is wrong at this point)

iPhone4

Attempted the following:
-host file pointed to nothing
-host file pointed to "
127.0.0.1 gs.apple.com"
-host file pointed to "74.208.105.171 gs.apple.com"
-host file pointed to "74.208.10.249 gs.apple.com"
-Attempted using TinyUmbrella's TSS server (despite claims stating TSS wont work for 5.xx+. Confirmations?) with and without the host file pointed to cydia and not

Tried all those combinations above with the following:
-building custom ipsw with shsh blob 5.0.1
-building custom ipsw with shsh blob 5.0.1 without baseband
-building custom ipsw with shsh blob 5.1.1
-building custom ipsw with shsh blob 5.1.1 without baseband

I checked my checksums too. I am also in pwned-DFU mode. I really desire to get back to iOS5. If anyone knows why Im getting this please let me know. I heard that the cydia servers for the host files no longer work? is this true? I also heard TU's TSS service also doesnt work? Is this also true? I need some light shed as to why this won't work. I was last able to downgrade iOS4 to 3 and don't remember having this big of an issue.

Thanks guys!
Darkenvy

Solution:
I used Sn0wbreeze to create the IPSW (instead of redsn0w) and entered Pwned-DFU mode then restored using (windows) itunes. Sn0wbreeze removes any and all Baseband updates from the IPSW; This requires you to be in pwned-DFU mode when restoring.

Technicly my first attempt failed as I forgot to update my itunes and I was forced to use redsnow on my Mac then take the iPhone back over to windows. I don't believe being on windows made a difference for the actual restore process, however Sn0wbreeze is windows only.


I hope this helps others!
 
Last edited by a moderator:
It would help to include which iPhone you have. As of now, only the 3GS and 4 are downgradeable because of exploits. The 4S cannot be downgraded since there's no exploit as of yet like the Boot exploit on the 4.
 
View attachment 8564
These are my blobs, now which IPSW should I download ? I have tried to stich with "iPhone3,3_5.1.1_9B206_Restore" ipsw file and "iPhone4,1_5.1.1_9B206_Restore" they didn't match blob according to redsnow.
 
Try using 0.9.14beta2 RedSn0w.

Yes I'm using the iPhone4 not the 4S. Its a A4 chip and is exploitable via the limera1n exploit. I just checked the Redsn0w I'm using and 0.9.14beta2 is the dev release of redsn0w I'm using.

Thanks also guys for not getting into the 'hindsight' and helping :). I'm trying to downgrade now from another Mac.
 
Okay, Nothing new. I think its an authentication problem with cydia. The 16xx errors from what I can tell are denial errors. It's denying the signing of the ipsw's. Rumor is that TinyUmbrella doesn't work but all that does is change the host file. I tried both of the cydia servers and that didn't do anything either. However I did get an official denied message when using iTune's servers.
 
gabi771 said:
<img src="http://www.iphoneforums.net/forum/attachment.php?attachmentid=8564"/>
These are my blobs, now which IPSW should I download ? I have tried to stich with "iPhone3,3_5.1.1_9B206_Restore" ipsw file and "iPhone4,1_5.1.1_9B206_Restore" they didn't match blob according to redsnow.

You need the 3,1 ipsw
 
OK, so on the basis you have an iPhone4 and you have blobs, you were definitely on the right track (probably just one little thing out of place), and this is what you need to do in summary...

If you don't already have a copy of the 5.1.1 firmware file downloaded onto your PC, download it now from the relevant link on our firmware thread here - http://www.iphoneforums.net/forum/i...ple-ios-firmware-download-links-iphone-17213/

Create a custom IPSW file and then stitch your blobs using the latest redsn0w. Note, this is a two step process.
In the Extras menu > Custom IPSW select the firmware you downloded and allow redsn0w to strip the baseband from it.
Then in Extras > SHSH Blobs > IPSW select your new custom firmware, then select "Local" and stitch the appropriate blobs into the firmware file. Once this is done you have a signed custom firmware without a baseband which will install on the iPhone4 to which the blobs belong without needing to verify anything with Apple.

Make sure you just get rid of all references to gs.apple.com from your hosts file. You don't need any kind of redirection if you are using a custom firmware with stitched blobs. This is probably the reason you are getting errors! ;)

The key to getting this installed is remembering you MUST use pwned DFU mode. Not standard DFU. I know you recognise this. I'm just confirming for clarity. Sometimes it doesn't stick when you try and enter pwned mode, so try a couple of times if it fails... Errors in the iTunes 1xxx range are another good indicator that pwned DFU may not be in effect when trying to restore a custom firmware.

Go back to the Extras menu in redsn0w and press "Pwned DFU" and follow that through.

Then you can open iTunes and press option-restore (OSX) or shift-restore (Windows) and select the Custom IPSW which redsn0w created.

If all goes well, you should then get 5.1.1 installed onto the iPhone4. No messing about with TinyUmbrella etc. :D

I did this myself on my iPhone4 and iPad1 recently, so I know it works :)

Good luck!
 
Last edited:
Just to be sure I did the whole process over and rebuilt all the IPSWs. Host file not pointed to anything.

First attempt I get a "Iphone cannot be restored. This device is not eligible for the requested build."
Second attempt (no baseband ipsw) I also get a "Iphone cannot be restored. This device is not eligible for the requested build."

Has anyone in the community actually performed a downgrade from iOS6 to 5.x.x? Perhaps apple stepped up their game to make the limera1n exploit more difficult?
 
Hi mate I have done everything in your post and im getting right to the end of the restore and getting error (1)?

edit: seen this on another forum

I had the same problem, error 1 is because iTunes is trying downgrade the iOS5.1 baseband to the iOS5.0.1 baseband, as this is not possible it throws you that error. To downgrade you have to create a custom firmware which preserves the iOS5.1 baseband but downgrades to iOS5.0.1 firmware. I used Sn0wbreeze v2.9.3 and used iFaith mode, I directed it to the stock iOS5.0.1 firmware and also located my iOS5.0.1 SHSH blobs and APT Tickets. For this use TinyUmbrella. After its created the custom firmware put your device in to "Pwned DFU Mode" using sn0wbreeze at the end of creating the firmware or iRebv5, then itunes will downgrade the [FONT=inherit !important][FONT=inherit !important]iOS[/FONT][/FONT].
 
Last edited:
Okay i making some progress. I have managed to stich a file that matched the firmware but when i go to try and restore at itunes i am getting an error (-1). Also the same result in Pwned DFU mode.
 
Last edited:
I made the the move from ios6 back to ios5.1.1...hit the same problems as you guys are having when using redsn0w..... finally tried sn0wbreeze v2.9.6...it worked first time....very happy now...:photos:
 
Ever since i got the error now i am tottaly stuck (on dfu mode). Tries to create a blob with ifaith got error that no firmware was recognized on device.

It seems i have dug a deeper hole. :(

*scratch that. i did a restore to ios 6 and the phone is back working.
 
Last edited:
Top