mirror of
https://github.com/gesellix/Bose-SoundTouch.git
synced 2026-08-19 09:06:14 +00:00
Tobias GesellchenandClaude Opus 4.7
b18272480a
Cloud-deploy reports (discussion #295 et al.) repeatedly came down to "does the speaker trust AfterTouch's cert?". Add a check that dials the configured HTTPS endpoint, attempts validation against the system trust store, and: - Says nothing when the chain validates — typical for a public CA chain (Let's Encrypt, etc.) the speaker firmware trusts natively. No action needed. - Warns when validation fails and surfaces the chain context: subject, issuer, SANs, expiry, and the underlying error so operators can copy a diagnosis into a bug report. Includes a copyable suggestion — install-ca when the leaf looks self-signed (Subject == Issuer heuristic), or an `openssl s_client` invocation for unknown/foreign chains. Reads the HTTPS URL via a closure on Server.GetSettings(), so later restarts pick up new URLs without re-registration. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>