tls_fixer 0.2.3

Automatic removal of incompatible TLS plugins

iTLS and vitals are incompatible with tls_fixer. This release automatically removes them before installing or refreshing any tls_fixer option: Full, Browser-only, System-only or Certificates-only.

• Deletes their plugin entries from both taiHEN configuration files, including duplicate and commented entries and relocated plugins using their standard filenames.
• Removes their kernel plugins and redirected modules, plus vitals settings.
• Preserves unrelated configuration, stock modules and the original Sony certificate backup.
• Stops installation if cleanup fails, before enabling the new tls_fixer installation.
• Adds the incompatibility notice to the installer and README.

This addresses the conflicting-plugin installation reported in issue #5. Do not reinstall iTLS or vitals alongside tls_fixer. Their installer app bubbles may remain; the running plugins and their configuration are removed.

Install or update

1. Install tls_fixer.vpk with VitaShell, then open tls_fixer.
2. Select Full and press Square to refresh an existing Full installation. If you use only Browser or System, refresh that component instead.
3. For a new installation, select Full and press Cross.
4. The Vita reboots when the operation succeeds.

Installing the VPK alone does not update the plugin or perform the compatibility cleanup.

Included downloads

• tls_fixer.vpk: version 0.2.3, with the new installer. TLS runtime modules and certificates are unchanged from 0.2.2. Runtime logging remains disabled and activation stays enabled across reboots.
• vita_tls_check.vpk: the unchanged optional TLS Check 1.3 tester.

The native Release build and installer failure-injection tests pass. The Linux host suite ran 144 tests with two optional dependency checks skipped. The new automatic migration has not yet been tested on a physical Vita.

tls_fixer 0.2.2

What's new

• Lower memory overhead: tls_fixer now uses the SSL memory each application already reserves, instead of adding a separate TLS heap. Receive buffers start small and grow within that budget.
• Better game compatibility: the modern TLS engine is embedded in Sony's HTTP module and follows its normal loading and cleanup. This avoids the separate-provider loading problems seen with games and Sony network/sign-in dialogs.
• PlayStation Store artwork: fixes missing covers for affected games, including 10 Second Ninja X, Blind Men and Brotherhood United.
• Mbed TLS 4.2.0: modern TLS 1.2/1.3 transport with compatibility support for Sony's HTTPS settings.

Runtime logging and diagnostics are disabled. Activation stays enabled across reboots.

Install or update

1. Install tls_fixer.vpk with VitaShell, then open tls_fixer.
2. For an existing Full installation, select Full and press Square to refresh it. If you use only the Browser or System component, refresh that component instead.
3. For a new installation, select Full and press Cross.
4. The Vita reboots automatically when the operation finishes.

Installing the VPK alone does not update the installed plugin.

Firmware profiles cover 3.60–3.74 on retail, testkit and devkit systems. Hardware validation is on retail 3.60; see the README for the exact firmware evidence.

Optional: Vita TLS Check 1.3

vita_tls_check.vpk is a separate diagnostic app for checking TLS versions, cipher information, certificate errors and PlayStation HTTPS connectivity. This version detects the embedded HTTP backend and works with or without tls_fixer installed.

tls_fixer 0.2.1

Fixes applications reporting tls_fix: not enabled and failing TLS 1.3 connections when reAuth or an older TLS plugin redirects Sony’s HTTP and SSL libraries. tls_fixer now recognizes those paths and loads its modern TLS provider correctly.

The fix has been confirmed by affected users and checked on a retail Vita. Runtime logging remains disabled.

Update

1. Install tls_fixer.vpk with VitaShell, then open tls_fixer.
2. Select System plugin only and press Square to refresh it.
3. The Vita will reboot automatically when the update finishes.

For a new installation, select Full and press Cross instead. Installing the VPK alone does not update the plugin.

Supports firmware 3.60–3.74 on retail, testkit and devkit systems, with static compatibility checks across the available firmware images.

Optional tester

vita_tls_check.vpk (TLS Check 1.2) is a separate app for checking TLS versions, negotiated ciphers, certificate errors and PlayStation server connectivity. It works with or without tls_fixer.

tls_fixer 0.2.1-test1: HTTP provider loading fix

Test build for issue #1.

Fixes a loading-path conflict: reAuth can redirect the HTTP and SSL libraries before tls_fixer sees their names, preventing the modern HTTP provider from starting. This build recognizes those redirected paths and the known legacy iTLS HTTP/SSL paths, then uses tls_fixer's installed libraries with the existing validation and private-mapping checks.

Test instructions

1. Install tls_fixer.vpk using VitaShell.
2. Open tls_fixer, select System plugin only, and press Square to refresh it. Installing the VPK alone does not update the installed plugin. The Vita will reboot after the refresh.
3. Open the existing Vita TLS Check app and share the result in issue #1, especially the tls_fix indicator and TLS 1.3 result.

If it still shows not enabled, attach the newest api-*.log and browserleaks-*.txt from ux0:data/vita-tls-check/. These include the loaded module paths and request results.

This is a prerelease awaiting confirmation on the affected Vita. The regression fails with 0.2 and passes with this change. All 367 sanitizer-enabled tests and 129 Python tests pass; the native kernel instruction check and static compatibility checks across 31 available firmware/hardware images also pass. The TLS providers and certificate files are unchanged from 0.2. Plugin logging and activation behavior are unchanged.

tls_fixer 0.2

TLS 1.2 and TLS 1.3 for the PS Vita browser and supported applications, with lower memory use and improved game compatibility.

Improvements

• Reduced the system HTTP provider's reserved heap from 2 MiB to 128 KiB per app.
• Root certificates are loaded on demand instead of keeping the whole parsed store in memory, for both apps and the browser.
• Games can use their own CA certificates alongside the system roots while keeping modern TLS.
• Added host redirects through ux0:data/tls_fixer/redirects.txt, with one old-host new-host pair per line.
• Included the PSN sign-in redirect for the Shell and PlayStation Store, without requiring a separate reAuth installation.

Install or update

Install tls_fixer.vpk with VitaShell, open tls_fixer, and select Full. Press Cross for a new installation or Square to update an existing installation. The installer reboots after completion and preserves your host redirect rules.

Supports firmware 3.60–3.74 on retail, testkit and devkit systems. The new features have been tested on hardware; compatibility across the available firmware images is also checked statically. Runtime logging remains disabled.

Optional tester

vita_tls_check.vpk (TLS Check 1.2) is a separate app for testing TLS connections, viewing cipher details and checking PlayStation server connectivity. It works with or without tls_fixer.

Thanks to @nyirsh for the memory, certificate handling, and redirect improvements.

tls_fixer 0.1

TLS 1.2 and TLS 1.3 for the PS Vita browser and supported applications using Sony’s sceHttp APIs.

Included

• Separate browser and system HTTP providers using Mbed TLS 4.2.0.
• Combined Sony + curl/Mozilla certificates, preserving the original Sony certificate layout for native service compatibility.
• Automatic Mozilla certificate refresh during Full/certificates installation, with an embedded fallback when the download is unavailable.
• Full, browser-only, system-only and certificates-only installer options.
• Persistent activation across reboots.
• Provider logging, kernel startup messages, kernel tracing and runtime UDP diagnostics disabled in this release.

Installation

Install tls_fixer.vpk through VitaShell, open tls_fixer, and choose Full for both providers and certificates. Use Cross to install or remove the selected component, or Square to refresh it. The installer reboots automatically after a successful operation.

The installer displays 0.1.0 and the VPK uses metadata version 00.10; both refer to release 0.1.

Compatibility

Functional validation on retail firmware 3.60 confirmed Browser TLS 1.3, certificate-verified sceHttp TLS 1.2/1.3 and PlayStation Store sign-in. The final console-output removal was checked by a native build, 357 sanitizer-enabled production tests and a packaged-import audit; the device checks used the preceding build. Firmware profiles cover the available 3.60–3.74 retail/testkit/devkit images; see the README’s compatibility matrix for static-only and unavailable combinations. The new providers intentionally exclude TLS 1.0/1.1, and unsupported/shared consumers retain Sony’s native path.

Third-party notices and licenses are included in the VPK.

Optional tester

vita_tls_check.vpk (TLS Check 1.2) is a separate app that tests TLS 1.0–1.3 connections, displays cipher details, and checks PlayStation server connectivity. Install it with VitaShell and open Vita TLS Check. It runs with or without tls_fixer, so you can compare your results before and after installing the plugin.