import { existsSync, readFileSync } from "node:fs";
import { createServer } from "node:http";
import path from "node:path";
import { fileURLToPath } from "node:url";
const root = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
const certPath = process.env.IOS_CERT_PATH ?? path.join(root, "certs/inventory2026-local-ca.cer");
const host = process.env.IOS_CERT_HOST ?? "0.0.0.0";
const port = Number(process.env.IOS_CERT_PORT ?? 3002);
if (!existsSync(certPath)) {
console.error(`Missing certificate file: ${certPath}`);
process.exit(1);
}
function mobileConfig() {
const certBase64 = readFileSync(certPath).toString("base64");
return `
PayloadContent
PayloadCertificateFileName
SSS Inventory Local CA.cer
PayloadContent
${certBase64}
PayloadDescription
Installs the local SSS Inventory certificate authority for HTTPS testing on your private network.
PayloadDisplayName
SSS Inventory Local CA
PayloadIdentifier
com.inventory2026.local.ca
PayloadType
com.apple.security.root
PayloadUUID
96B1D15F-B9F6-4C7E-A4D5-D85AE9FCD12E
PayloadVersion
1
PayloadDescription
SSS Inventory local HTTPS certificate profile.
PayloadDisplayName
SSS Inventory Local HTTPS
PayloadIdentifier
com.inventory2026.local.https
PayloadOrganization
SSS Inventory
PayloadRemovalDisallowed
PayloadType
Configuration
PayloadUUID
64D32A5A-CB95-4D0B-89AF-5984B31B23E7
PayloadVersion
1
`;
}
createServer((request, response) => {
if (request.url === "/inventory2026-local-ca.mobileconfig") {
response.writeHead(200, {
"content-type": "application/x-apple-aspen-config",
"content-disposition": "attachment; filename=inventory2026-local-ca.mobileconfig"
});
response.end(mobileConfig());
return;
}
if (request.url === "/inventory2026-local-ca.cer") {
response.writeHead(200, {
"content-type": "application/x-x509-ca-cert",
"content-disposition": "attachment; filename=inventory2026-local-ca.cer"
});
response.end(readFileSync(certPath));
return;
}
response.writeHead(200, { "content-type": "text/html; charset=utf-8" });
response.end(`
Install SSS Inventory Certificate
SSS Inventory Local HTTPS
Install iPad Certificate Profile
After download, open Settings, tap Profile Downloaded, install it, then enable full trust in Settings > General > About > Certificate Trust Settings.
`);
}).listen(port, host, () => {
console.log(`SSS Inventory iOS certificate helper listening at http://${host}:${port}`);
});