Marc Billow
d5dc92e673
Bundle certs/ocf_root_ca.pem as samsung_appliance/ocf_root_ca.pem and switch from SSL.VERIFY_NONE to SSL.VERIFY_PEER. The appliance's server certificate must now chain to the Samsung Electronics OCF Root CA, closing the ARP-spoof / MITM attack surface on the local network. .gitignore: carve out explicit exception for the bundled public CA cert.
39 lines
581 B
Plaintext
39 lines
581 B
Plaintext
# Secrets and per-instance config — never commit
|
|
.env
|
|
.DS_Store
|
|
|
|
# Certificates and keys — per-instance, never push
|
|
certs/
|
|
*.pem
|
|
*.crt
|
|
*.p12
|
|
*.pfx
|
|
*.key
|
|
|
|
# Exception: bundled Samsung OCF Root CA (public cert, no key material)
|
|
!samsung_appliance/ocf_root_ca.pem
|
|
token.txt
|
|
|
|
# Python artifacts
|
|
__pycache__/
|
|
*.pyc
|
|
.venv/
|
|
venv/
|
|
|
|
# Bridge runtime
|
|
bridge.log
|
|
course_mapper.log
|
|
|
|
# Capture / dump files
|
|
*.pcap
|
|
*.har
|
|
*.mitm
|
|
capture/
|
|
flows/
|
|
|
|
# Local-only research tools (not part of the bridge runtime)
|
|
local-tools/
|
|
|
|
# Claude Code per-project state (permissions allowlist, etc.)
|
|
.claude/
|