Tobias GesellchenandClaude Opus 4.8 788a6ced93 fix(setup): re-install the CA when it was regenerated, not just label-matched (refs #517) ...

checkCACertTrusted matched only the static "# AfterTouch" label in the
device's trust bundle. After the service CA was regenerated (e.g. a
recreated container with a fresh/empty data dir), the stale label was
still present, so the migration wrongly reported the speaker as already
trusting the new CA and skipped re-installing it, leaving the speaker
unable to validate TLS to the service.

When the service CA is available, compare the actual cert payload and
re-install on mismatch; fall back to the label only when the CA can't be
read (CLI callers without Crypto). Adds regression tests for the
stale-label and no-Crypto cases.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-27 19:58:19 +02:00

..

testdata

fix(setup): atomic CA-bundle install with PEM-frame verification

2026-05-15 15:05:41 +02:00

build_https_url_test.go

feat(service): validate server_url and surface resolved DNS intercept IP

2026-05-14 14:49:23 +02:00

ca_validation_test.go

docs(setup): record ST10 ≡ ST20 bundle equivalence + curl reproducer

2026-05-16 16:23:23 +02:00

ca_validation.go

fix(setup): atomic CA-bundle install with PEM-frame verification

2026-05-15 15:05:41 +02:00

device_info_parsing_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

enable_ssh_test.go

feat(setup): add enable-ssh --full-config for devices where sshd never starts (#515)

2026-06-22 21:23:15 +02:00

enable_ssh.go

feat(setup): add enable-ssh --full-config for devices where sshd never starts (#515)

2026-06-22 21:23:15 +02:00

factory_reset_test.go

feat(setup): add CLI setup command group for end-to-end speaker provisioning

2026-05-13 18:43:36 +02:00

factory_reset.go

feat(setup): add CLI setup command group for end-to-end speaker provisioning

2026-05-13 18:43:36 +02:00

init_plan_test.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

init_plan.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

inspect_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

inspect.go

feat(setup): add CLI setup command group for end-to-end speaker provisioning

2026-05-13 18:43:36 +02:00

issue218_regression_test.go

test(fakespeaker): wire issue-specific payloads via Config.FixtureOverrides

2026-05-15 14:13:24 +02:00

issue234_regression_test.go

fix(setup): fire <sourcesUpdated/> after data sync to recover post-factory-reset sources

2026-05-15 16:25:07 +02:00

issue235_regression_test.go

test(setup): wire issue #235 — Spotify Connect /now_playing reports IsPresetable=false

2026-05-15 14:13:24 +02:00

logutil.go

fix(lint): sec6/sec7 post-pass — static.go Close + remove unused sanitizeErr

2026-05-25 11:28:26 +02:00

marge_pairing_test.go

feat(telnet): add port-17000 migration method and account pairing

2026-05-10 12:43:36 +02:00

marge_pairing.go

feat(telnet): add port-17000 migration method and account pairing

2026-05-10 12:43:36 +02:00

migration_state_telnet_test.go

fix(setup): correct false-positive migration detection and plan command errors

2026-05-22 18:58:57 +02:00

migration_summary_telnet_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

peer_probe_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

peer_probe.go

feat(service): add passive peer-reachability probe handler

2026-05-11 20:31:24 +02:00

preflight_crosscheck_test.go

feat(service): capture speaker redirect config in diagnostic export

2026-05-31 12:56:45 +02:00

preflight_crosscheck.go

feat(service): capture speaker redirect config in diagnostic export

2026-05-31 12:56:45 +02:00

reboot_test.go

feat(telnet): add port-17000 migration method and account pairing

2026-05-10 12:43:36 +02:00

setup_session_test.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

setup_session.go

feat(setup): align <PairDeviceWithAccount> with the official Bose app shape

2026-05-16 12:14:18 +02:00

setup_test.go

fix(setup): re-install the CA when it was regenerated, not just label-matched (refs #517)

2026-06-27 19:58:19 +02:00

setup.go

fix(setup): re-install the CA when it was regenerated, not just label-matched (refs #517)

2026-06-27 19:58:19 +02:00

ssh_probe_apply.go

refactor(setup): split high-complexity functions into per-axis helpers

2026-05-13 18:43:36 +02:00

ssh_probe.go

feat(health): add speaker_ca_bundle integrity check

2026-05-27 01:25:56 +02:00

sync_deviceid_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

sync_regression_test.go

feat(sync): improve parity with upstream during data sync (#123)

2026-03-22 00:01:41 +01:00

telnet_migration_test.go

feat(setup): per-field telnet URLs with envswitch derivation rule

2026-05-11 00:37:11 +02:00

telnet_migration.go

feat(setup): per-field telnet URLs with envswitch derivation rule

2026-05-11 00:37:11 +02:00

telnet_preflight_test.go

feat(setup): read-only telnet preflight populating MigrationSummary

2026-05-11 00:37:11 +02:00

telnet_preflight.go

feat(setup): read-only telnet preflight populating MigrationSummary

2026-05-11 00:37:11 +02:00

telnet_urls_test.go

style(setup): satisfy govet shadow + thelper lints

2026-05-11 00:37:11 +02:00

url_overrides_test.go

feat(setup): XML migration honors per-field URL overrides

2026-05-11 00:37:11 +02:00

wifi_provision_test.go

test: sweep example data in test files to RFC-5737 + placeholders

2026-05-17 22:05:13 +02:00

wifi_provision.go

fix(cli): retry wifi-push once when the speaker's first ACK times out

2026-05-16 12:14:18 +02:00