Line 1: |
Line 1: |
− | This [[NCCH#CFA|CFA]] contains the following [[PSPXI:EncryptDecryptAes|encrypted]] files in the RomFS: | + | This [[NCCH#CFA|CFA]] (title id: [[Title_list#0004001B_-_System_Data_Archives|0004001b00010002]]) contains the following [[PSPXI:EncryptDecryptAes|encrypted]] files in the RomFS: |
− | * "ctr-common-1-cert.bin", this is the default SSL client cert used by the SSL module. | + | * "ctr-common-1-cert.bin", this is the default SSL client cert used by the SSL module in DER format. |
− | * "ctr-common-1-key.bin", this is the default SSL client private key used by the SSL module. | + | * "ctr-common-1-key.bin", this is the default SSL client private key used by the SSL module in DER format. |
| | | |
− | For retail this is the "CTR Common Prod 1" cert. | + | For retail this is the "CTR Common Prod 1" cert. The final sizes passed to a function used internally by SSL-module, are 0x4C7 for the cert DER, and 0x4AA for the key DER. |
| | | |
− | Each file is encrypted in CBC mode. The first 16 bytes of each file are the IV for decrypting the rest of the file. | + | Each file is encrypted in CBC mode using [[PSPXI:EncryptDecryptAes#Key_Types| keyslot 0xD]]. The first 16 bytes of each file are the IV for decrypting the rest of the file. |
| + | |
| + | The following servers require usage of ClCertA to connect: |
| + | |
| + | * https://account.nintendo.net/ (Account/OAuth2 related) |
| + | * https://ccif.ctr.shop.nintendo.net/ (CreditCardInfo(?), used for credit card/transaction related stuff) |
| + | * https://ecs.c.shop.nintendowifi.net/ (ECommerce SOAP, ticket-related) |
| + | * https://cas.c.shop.nintendowifi.net/ (Cataloging SOAP) |
| + | * https://ninja.ctr.shop.nintendo.net/ (eShop-related) |
| + | * https://nus.c.shop.nintendowifi.net/ (NetUpdate SOAP, used by [[NIM_Services|nim system module]]) |