From b67251abbbab5811b1ac3eb5b9c0e86c7d6a696e Mon Sep 17 00:00:00 2001
From: zefie <zefie@zefie.net>
Date: Mon, 21 Jul 2025 11:00:06 -0400
Subject: [PATCH] testing ssl stuff (doesnt do anything yet)

---
 zefie_wtvp_minisrv/app.js                     |   1 +
 .../includes/ServiceDeps/https/ca.der         | Bin 0 -> 884 bytes
 .../wtv-head-waiter/download-ssl-certs.js     |   4 ++++
 .../wtv-head-waiter/login-stage-two.js        |   2 ++
 zefie_wtvp_minisrv/includes/classes/WTVSSL.js |  18 ++++++++++++++++++
 5 files changed, 25 insertions(+)
 create mode 100644 zefie_wtvp_minisrv/includes/ServiceDeps/https/ca.der
 create mode 100644 zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/download-ssl-certs.js
 create mode 100644 zefie_wtvp_minisrv/includes/classes/WTVSSL.js

diff --git a/zefie_wtvp_minisrv/app.js b/zefie_wtvp_minisrv/app.js
index b9d40e4d..6b34450a 100644
--- a/zefie_wtvp_minisrv/app.js
+++ b/zefie_wtvp_minisrv/app.js
@@ -19,6 +19,7 @@ const CryptoJS = require('crypto-js');
 const sharp = require('sharp')
 const process = require('process');
 const WTVSec = require(classPath + "/WTVSec.js");
+const WTVSSL = require(classPath + "/WTVSSL.js");
 const WTVLzpf = require(classPath + "/WTVLzpf.js");
 const WTVClientCapabilities = require(classPath + "/WTVClientCapabilities.js");
 const WTVClientSessionData = require(classPath + "/WTVClientSessionData.js");
diff --git a/zefie_wtvp_minisrv/includes/ServiceDeps/https/ca.der b/zefie_wtvp_minisrv/includes/ServiceDeps/https/ca.der
new file mode 100644
index 0000000000000000000000000000000000000000..1b1baf4edf71299d2d2603bf8eec5c4717ed5e97
GIT binary patch
literal 884
zcmXqLVlFUfVv1P6%*4pV#K~~3E3kgUSKoIAylk9WZ60mkc^Mg5Ss4sm3}p<Y*qB3E
zn0bVQgMG@36~a@KLc$bsGxIWwi^>ee4Mah*Ts(YHscD(13Vx|2<@rU~#fIDloFEA{
zVW!Yv0|jwjBU1x&BSS+IQv(y@C<%TeL!f|}kvUX=O7=7{Dj|D-k(GhDiIJbdpox)-
zsfm%1VPn6yD(~wJtd)X4w`v{G4U^6dv1Whk&n&;Z<fM*xqv(f|CV6Rl^ghkX{2r7m
zJEL^5NZRbVmyceH{AP9Hc%Wy&Tr;ofrd&IsG8V3!k|tWG{~_tV-eI$e^Y5IE4K?1h
z_vFMQ)6*hSZdOchIcxIKewUTylG-aejoYS1G+bNyaaDP5@U{otJ?h&{-@B;pD-qE#
z5Z`eoT_W=5OLaw|CzB68T&bMec=5h@z~!w|%HOemoaOMaQGn~yJND+;i_4CzY%FzU
z&+plH=+2$TC#TQ+*kC;2)FuDR^6W2o-aqs86>JLmz5M^=@-Jnpj_$gwe*Z!Jir}2T
zCl9vjt<0}_t2-yW&j0>xCT2zk#>L47i3YO3$dTn^5n~ZqVR6*1e24ut+sqFwq1UYf
z)_6DVG>`{LE3-%#h&5nWzz<R&%*gnkh1Gx=NEz^f1o%M$EWjkih8zvRbOekBMh1@Q
zxA?91>^|*%d`qcYjKMo8wFj0f`HCjy?Rit*QFva+(C%V$!yl&LOPyMVVPQ8lCuchS
zVqI(P{CK_c&2@LC7^yxmv}lW;wQ+)0wq2+1sy&sjjpwp#xNIe1*{>Gqs`E2VkKes{
zZR*kW{&(*m*uplkdE1UxuNRq5XP!{}^hVmQS@Ysp59L|&uKlUt>RvT-rgZkUe+~t=
zu1yIz95wglvc^E0yhXu_FTR_q>a$|T_793N88Qa<PA=rU%kssl>Yk5aQ)#yp>-KlO
zE9N!-S&-vw_Gi{!7xx3F1D<X1k$$r>DoJ{AeB`>q%je!Y-;;a1zsmpFw(hv)rOm+y
NEJ}m>-<UlQ0|2D<UYP&@

literal 0
HcmV?d00001

diff --git a/zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/download-ssl-certs.js b/zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/download-ssl-certs.js
new file mode 100644
index 00000000..0b495a99
--- /dev/null
+++ b/zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/download-ssl-certs.js
@@ -0,0 +1,4 @@
+header = `200 OK
+Content-type: wtv/ssl-certs`
+
+data = wtvssl.getCACert();
\ No newline at end of file
diff --git a/zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/login-stage-two.js b/zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/login-stage-two.js
index 47497770..f120b035 100644
--- a/zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/login-stage-two.js
+++ b/zefie_wtvp_minisrv/includes/ServiceVault/wtv-head-waiter/login-stage-two.js
@@ -134,6 +134,8 @@ wtv-messenger-enable: 0
 
 		headers += `wtv-log-url: wtv-log:/log
 wtv-ssl-log-url: wtv-log:/log
+wtv-ssl-certs-download-url: wtv-head-waiter:/download-ssl-certs
+wtv-ssl-certs-checksum: 9BD865819765B66A2756F98FB4EEFBD4
 `;
 
 		if (!limitedLogin && !limitedLoginRegistered) {
diff --git a/zefie_wtvp_minisrv/includes/classes/WTVSSL.js b/zefie_wtvp_minisrv/includes/classes/WTVSSL.js
new file mode 100644
index 00000000..ccbbff20
--- /dev/null
+++ b/zefie_wtvp_minisrv/includes/classes/WTVSSL.js
@@ -0,0 +1,18 @@
+class WTVSSL {
+    wtvshared = null;
+    constructor() {
+        const WTVShared = require("./WTVShared.js")['WTVShared'];
+        this.wtvshared = new WTVShared();
+    }
+
+    getCACert() {
+        // return the CA cert
+        const caCertFile = this.wtvshared.getServiceDep("https/ca.der")
+        if (!this.wtvshared.fs.existsSync(caCertFile)) {
+            throw new Error("CA certificate file not found");
+        }
+        return this.wtvshared.fs.readFileSync(caCertFile);
+    }
+}
+
+module.exports = WTVSSL;
\ No newline at end of file