Make FIFA17 roster hostname configurable

fifa17-recon/tools/blaze_responder_v3b.py

@@ -147,14 +147,13 @@ def refresh_account_identity():
 
 # ================================================================== config
 #
-# Client/server split support (OpenFUT dev-container): two env vars, both
-# defaulting to loopback so the original all-on-localhost flow is byte-identical.
-#   OPENFUT_BIND       — the address the listeners bind (0.0.0.0 in a container).
-#   OPENFUT_ADVERTISE  — the address this server hands back to the client for the
-#                        NEXT hop (Blaze host, roster/UTAS/telemetry/QoS URLs). On
-#                        105-local this is 127.0.0.1; on the 120 server it is the
-#                        server's LAN IP so the game dials 120 directly after the
-#                        first (hook/DNAT-redirected) contact.
+# Client/server split support (OpenFUT dev-container): bind and advertise default
+# to loopback so the original all-on-localhost flow is byte-identical.
+#   OPENFUT_BIND        — address the listeners bind (0.0.0.0 in a container).
+#   OPENFUT_ADVERTISE   — address handed back for Blaze, UTAS, telemetry, QoS,
+#                         and (unless overridden) the roster service.
+#   OPENFUT_ROSTER_HOST — optional roster host:port advertised in HTTPS URLs.
+#                         Use a certificate dNSName and resolve it on the client.
 import os as _os_cfg
 _ADVERTISE = _os_cfg.environ.get("OPENFUT_ADVERTISE", "127.0.0.1")
 _BIND = _os_cfg.environ.get("OPENFUT_BIND", "127.0.0.1")
@@ -563,9 +562,11 @@ OSDK_TICKER = []
 # never gets advance/back -> the silent FUT loading-screen hang. The store is the
 # MERGED '_all' section (getSection @0x14719e050), so any fetched CFID works; this
 # branch does NOT wrap the value ("https://%s" is only the ini path) -> ABSOLUTE url.
-# Serve HTTPS (EA's production value is https; the DirtySDK download mgr may reject
-# http). Our ProtoSSL cert-verify is patched (autopatch), so a self-signed cert is OK.
-ROSTER_HOST = "%s:8081" % _ADVERTISE
+# Serve HTTPS (EA's production value is https; the DirtySDK download manager may
+# reject http). FIFA17's roster verifier accepts dNSName SANs but ignores
+# iPAddress SANs, so an IP-literal URL fails with certificate_unknown. A remote
+# deployment can advertise a certificate DNS name without changing other hosts.
+ROSTER_HOST = os.environ.get("OPENFUT_ROSTER_HOST") or "%s:8081" % _ADVERTISE
 POW_CONTENT_HOST = os.environ.get("POW_CONTENT_HOST", "127.0.0.1:8080")
 OSDK_ROSTER = [
     ("ROSTERUPDATE_URL", "https://%s/fifa17/fut/rosterupdate.xml" % ROSTER_HOST),

fifa17-recon/tools/test_roster_host_config.py

@@ -0,0 +1,61 @@
+#!/usr/bin/env python3
+"""Standalone contract test for Blaze roster-host advertisement."""
+
+import importlib
+import os
+import sys
+
+TOOLS = os.path.dirname(os.path.abspath(__file__))
+if TOOLS not in sys.path:
+    sys.path.insert(0, TOOLS)
+
+ADVERTISE = "192.0.2.10"
+DNS_HOST = "winter15.gosredirector.ea.com:8081"
+
+
+def assert_roster_config(blaze, host):
+    config = dict(blaze.OSDK_ROSTER)
+    assert blaze.ROSTER_HOST == host
+    assert config["ROSTERUPDATE_URL"] == (
+        f"https://{host}/fifa17/fut/rosterupdate.xml"
+    )
+    assert config["ROSTER_URL"] == f"https://{host}/fifa17/roster/"
+    assert config["ROSTER_VER"] == "0"
+    assert config["ROSTER_CSUM"] == ""
+
+
+def main():
+    old_advertise = os.environ.get("OPENFUT_ADVERTISE")
+    old_roster_host = os.environ.get("OPENFUT_ROSTER_HOST")
+    try:
+        os.environ["OPENFUT_ADVERTISE"] = ADVERTISE
+        os.environ.pop("OPENFUT_ROSTER_HOST", None)
+
+        import blaze_responder_v3b as blaze
+
+        blaze = importlib.reload(blaze)
+        assert_roster_config(blaze, f"{ADVERTISE}:8081")
+
+        os.environ["OPENFUT_ROSTER_HOST"] = DNS_HOST
+        blaze = importlib.reload(blaze)
+        assert_roster_config(blaze, DNS_HOST)
+
+        os.environ["OPENFUT_ROSTER_HOST"] = ""
+        blaze = importlib.reload(blaze)
+        assert_roster_config(blaze, f"{ADVERTISE}:8081")
+    finally:
+        if old_advertise is None:
+            os.environ.pop("OPENFUT_ADVERTISE", None)
+        else:
+            os.environ["OPENFUT_ADVERTISE"] = old_advertise
+        if old_roster_host is None:
+            os.environ.pop("OPENFUT_ROSTER_HOST", None)
+        else:
+            os.environ["OPENFUT_ROSTER_HOST"] = old_roster_host
+
+    print("PASS: roster host defaults, override, and URLs")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())