From e0efa9f07830aca67d382754648d966abfbcd5a3 Mon Sep 17 00:00:00 2001
From: Infi <infi@infi.sh>
Date: Sun, 23 Nov 2025 01:59:06 +0100
Subject: [PATCH] chore: trust ssl.com root certificate

i do not have the patience to add a new trust anchor every time cloudflare decides it's time for a new one

Signed-off-by: Infi <infi@infi.sh>
---
 .../main/res/raw/sslcom_tls_ecc_root_ca_2022.crt   | 14 ++++++++++++++
 app/src/main/res/xml/network_security_config.xml   |  1 +
 2 files changed, 15 insertions(+)
 create mode 100644 app/src/main/res/raw/sslcom_tls_ecc_root_ca_2022.crt

diff --git a/app/src/main/res/raw/sslcom_tls_ecc_root_ca_2022.crt b/app/src/main/res/raw/sslcom_tls_ecc_root_ca_2022.crt
new file mode 100644
index 00000000..8d242451
--- /dev/null
+++ b/app/src/main/res/raw/sslcom_tls_ecc_root_ca_2022.crt
@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----
diff --git a/app/src/main/res/xml/network_security_config.xml b/app/src/main/res/xml/network_security_config.xml
index 6c0dbfad..506dd540 100644
--- a/app/src/main/res/xml/network_security_config.xml
+++ b/app/src/main/res/xml/network_security_config.xml
@@ -4,6 +4,7 @@
         <domain includeSubdomains="true">stoatusercontent.com</domain>
         <trust-anchors>
             <certificates src="@raw/cloudflare_tls_i_e1" />
+            <certificates src="@raw/sslcom_tls_ecc_root_ca_2022" />
         </trust-anchors>
     </domain-config>
 </network-security-config>
\ No newline at end of file