CFW Evilnat 4.91.2 [BETA 15] available with the following changes:
- Variants PEX and D-PEX only availables atm
- Reverted original PlayStation Home message in XMB (Thanks to @DeViL303)
- Fixed error 80710A06 while downloading PKGs/webMAN MODs update from the XMB with VSH DEX
- Fixed xai_plugin italian translation (Thanks to Weeddaa3)
- Updated xai_plugin updater to v1.5
- Available xai_plugin update from the XMB
The error code 80710A06 is a SSL connect handshake error, DEX VSH does not have any reference to a valid certificate authority (CA) from the file CA_LIST.cer
This is the data I have researched:
- Github and other URLs: Uses DigiCert Global Root G2 in CA_LIST.cer, in this case to download PKGs from Github
- DEX vsh.self file has no reference to this certificate (CEX does have it)
- We need to add DigiCert Global Root G2 hardcoded in DEX vsh.self in an offset with enough space
If we open DEX vsh.self (4.84) in a HEX Editor and we go to the offset 0x703A20, we can see info about the last CA available in CA_LIST.cer (Security Communication RootCA3) in 4.84 DEX.
![]()
Offset 0x703A20 - Value 0x6A8EA0: Reference to /dev_flash/data/cert/CA_LIST.cer
Offset 0x703A24 - Value 0x372B: Offset where starts the certificate in CA_LIST.cer, in this case Security Communication RootCA3 (-----BEGIN CERTIFICATE-----)
Offset 0x703A28 - Value 0x0x07D0: Certificate size
Offset 0x703A2C - Value 0xBC3436AAEB3459A7AAB55B5614467BB7E3B43AB5: SHA1 hash (Thanks to @aldostools for checking it)
Offset 0x703A40 - Value 0x6F7454B3: Unknown
Luckily, the next 0x28 bytes in offset 0x703A50 are available and are enough to be able to add the reference
![]()
It would look like this:
![]()
Now with DigiCert Global Root G2 data added, Github/Github.io pages (example: Unnoficial Flash Writer) and downloads (example: webMAN MOD or xai_plugin update) are now working again, I have only tested it there, if any error appears please contact me
Download: MEGA Folder
For CEX (4.84 and 4.85)
Search
6F 74 54 B3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 40 00 00 6A 0C B0
Replace
6F 74 54 B3 00 00 00 00 00 00 00 00 00 00 00 00 00 6A 08 B0 00 00 4C 57 00 00 05 24 2F 4C 84 5C 5B CA DB 94 CF E5 04 3C 38 63 E0 BC 3D EE 8A 4F C9 0B C3 7D 00 00 00 00 00 06 40 00 00 6A 0C B0
It also needs the 4.86 Certificate files, otherwise more patches will be needed.