Skip to content

fix: probe the retro wfc payload at its current https endpoint #529

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wiillownet wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix: probe the retro wfc payload at its current https endpoint #529

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 4 additions & 5 deletions WheelWizard/Features/Recomp/RecompRetroWfcPayloadProbe.cs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,12 +23,11 @@ public sealed class RecompRetroWfcPayloadProbe(IHttpClientFactory httpClientFact
/// <summary>
/// The fixed payload endpoint the setup host downloads from. It must stay identical to the value pinned
/// in the recomp's <c>RetroWfcPayload.CurrentRetroWfcPayloadUri</c>, since probing anything else says
/// nothing about whether the host's own download will succeed. Plain HTTP is what the service offers
/// and what the host pins; that is safe here because this probe decides nothing about trust. The host
/// verifies the payload's RSA signature itself, so a forged answer can at worst make the host attempt
/// a download that its own verification then rejects.
/// nothing about whether the host's own download will succeed. This probe decides nothing about trust:
/// the host verifies the payload's RSA signature itself, so a forged answer can at worst make the host
/// attempt a download that its own verification then rejects.
/// </summary>
public const string PayloadUri = "http://nas.play.rwfc.net/payload?g=RMCPD00";
public const string PayloadUri = "https://rwfc.net/api/wfc/payload?g=RMCPD00";

// A dead endpoint times out rather than refusing, so a short cap is what keeps the home page and the
// install flow from stalling on every status refresh while the service is down.
Expand Down