Change NUS URL and add Nintendo certs.

This allows us to download via HTTPS.

Signed-off-by: Thomas Rohloff <v10lator@myway.de>

build.py

@@ -47,6 +47,12 @@ def checkAndDeleteDir(dir):
 checkAndDeleteFile("data/ca-certs.pem");
 urllib.request.urlretrieve("https://ccadb.my.salesforce-sites.com/mozilla/IncludedRootsPEMTxt?TrustBitsInclude=Websites", "data/ca-certs.pem");
 
+checkAndDeleteFile("data/nintendo.pem");
+urllib.request.urlretrieve("https://certs.larsenv.xyz/0005001B10054000/scerts/CACERT_NINTEND_BUNDLE.pem", "data/nintendo.pem");
+
+os.system(f"cat data/nintendo.pem >> data/ca-certs.pem");
+checkAndDeleteFile("data/nintendo.pem");
+
 checkAndDeleteDir("NUStmp")
 checkAndDeleteDir("out")
 

include/downloader.h

@@ -52,7 +52,7 @@ extern "C"
         size_t size;
     } RAMBUF;
 
-#define DOWNLOAD_URL "http://ccs.cdn.wup.shop.nintendo.net/ccs/download/"
+#define DOWNLOAD_URL "https://ccs.shop.wii.com/ccs/download/"
 
     bool initDownloader() __attribute__((__cold__));
     void deinitDownloader() __attribute__((__cold__));