mirror of
https://github.com/boykopovar/AnyPS5.git
synced 2026-10-30 12:25:49 +00:00
Every libSceSsl context started without trust anchors, so a libSceHttp2 request without a verify callback failed the known-CA check. RetroArch's updater, PS5LM and Porpoise all use version-3 templates over https:// without one. libSceSsl now parses /<sandbox word>/common/cert/CA_LIST.cer, served by libkernel from the host trust store, once per process into its own pool, and SslTrustSystemRoots_nid_no_patch links those roots after the context's own authorities for one connection. The HTTP/2 transport calls it after creating each connection. Co-Authored-By: Claude Opus 5.5 <[email protected]>