Tobias GesellchenandClaude Opus 4.8 788a6ced93 fix(setup): re-install the CA when it was regenerated, not just label-matched (refs #517) ...

checkCACertTrusted matched only the static "# AfterTouch" label in the
device's trust bundle. After the service CA was regenerated (e.g. a
recreated container with a fresh/empty data dir), the stale label was
still present, so the migration wrongly reported the speaker as already
trusting the new CA and skipped re-installing it, leaving the speaker
unable to validate TLS to the service.

When the service CA is available, compare the actual cert payload and
re-install on mismatch; fall back to the label only when the CA can't be
read (CLI callers without Crypto). Adds regression tests for the
stale-label and no-Crypto cases.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-27 19:58:19 +02:00

..

client

feat(cli,client): soundtouch-cli library command + ListMediaServers

2026-06-09 22:50:49 +02:00

config

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

discovery

fix(player,discovery): normalize uuid: prefix for STORED_MUSIC accounts; fill MediaServer.Address

2026-06-09 22:50:49 +02:00

dlna

feat(example-dlna-server): album art, real media via --media-dir, fix discovery, BrowseMetadata + access log

2026-06-14 21:36:01 +02:00

models

feat(cli,client): soundtouch-cli library command + ListMediaServers

2026-06-09 22:50:49 +02:00

service

fix(setup): re-install the CA when it was regenerated, not just label-matched (refs #517)

2026-06-27 19:58:19 +02:00

speaker

refactor(speaker): introduce pkg/speaker leaf for shared protocol constants

2026-05-11 23:18:08 +02:00

ssh

sec8: document Run() invariant — command must never come from user HTTP input

2026-05-25 21:01:01 +02:00

telnet

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

testutils

fix(ci): gate http-client tests on mock readiness; address semgrep findings (refs #451)

2026-06-06 19:11:24 +02:00