Harden Switch OTA install with TLS verification and reliable NRO replace.

Enable HTTPS peer checks via a romfs CA bundle, remove existing NROs before rename on sdmc, and surface launcher replace failures before writing version.txt.
This commit is contained in:
Andrew Quenehen
2026-08-06 08:58:22 -03:00
parent c7e72149f1
commit 84e1a5177b
7 changed files with 44 additions and 9 deletions
+1
View File
@@ -69,5 +69,6 @@ Manifest: `scripts/switch/ota_launcher.manifest`.
- Zip extraction uses `switch-zziplib` (`ota_unzip.c`) on device.
- OTA replaces launcher + game from the install zip (NACP versions stay aligned).
- HTTPS uses Mozilla CA bundle in romfs (`cacert.pem`, fetched at build time).
- Sphaira HOME forwarders cache metadata until reinstalled (see docs/switch-install.md).
- Release runner: `switch-dev` + (`install_devkitpro_deps.sh` **or** Docker)