From 014b11e9da8765b281b331a1edff15d12c365d7f Mon Sep 17 00:00:00 2001
From: Stephen Miller <56742918+StevenMiller123@users.noreply.github.com>
Date: Sat, 7 Mar 2026 01:15:32 -0600
Subject: [PATCH] Return an empty certificate (#4104)

This is enough to get past initialization checks in Rise of the Tomb Raider.
---
 src/core/libraries/network/ssl2.cpp     | 26 +++++++++++++------------
 src/core/libraries/network/ssl2.h       | 12 ++++++++++++
 src/core/libraries/network/ssl2_error.h |  8 ++++++++
 3 files changed, 34 insertions(+), 12 deletions(-)
 create mode 100644 src/core/libraries/network/ssl2_error.h

diff --git a/src/core/libraries/network/ssl2.cpp b/src/core/libraries/network/ssl2.cpp
index 682095801..0b408d094 100644
--- a/src/core/libraries/network/ssl2.cpp
+++ b/src/core/libraries/network/ssl2.cpp
@@ -5,6 +5,7 @@
 #include "core/libraries/error_codes.h"
 #include "core/libraries/libs.h"
 #include "core/libraries/network/ssl2.h"
+#include "core/libraries/network/ssl2_error.h"
 
 namespace Libraries::Ssl2 {
 
@@ -108,8 +109,13 @@ int PS4_SYSV_ABI sceSslEnableVerifyOption() {
     return ORBIS_OK;
 }
 
-int PS4_SYSV_ABI sceSslFreeCaCerts() {
-    LOG_ERROR(Lib_Ssl2, "(STUBBED) called");
+int PS4_SYSV_ABI sceSslFreeCaCerts(s32 ssl_ctx_id, OrbisSslCaCerts* certs) {
+    LOG_ERROR(Lib_Ssl2, "(DUMMY) called");
+    if (certs == nullptr) {
+        return ORBIS_SSL_ERROR_INVALID_ARGUMENT;
+    }
+    delete (certs->certs);
+    // delete (certs->pool);
     return ORBIS_OK;
 }
 
@@ -128,17 +134,13 @@ int PS4_SYSV_ABI sceSslGetAlpnSelected() {
     return ORBIS_OK;
 }
 
-struct OrbisSslCaCerts {
-    void* certs;
-    u64 num;
-    void* pool;
-};
-
-int PS4_SYSV_ABI sceSslGetCaCerts(int sslCtxId, OrbisSslCaCerts* certs) {
-    // check if it is same as libSceSsl
+int PS4_SYSV_ABI sceSslGetCaCerts(s32 ssl_ctx_id, OrbisSslCaCerts* certs) {
     LOG_ERROR(Lib_Ssl2, "(DUMMY) called");
-    certs->certs = nullptr;
-    certs->num = 0;
+    if (certs == nullptr) {
+        return ORBIS_SSL_ERROR_INVALID_ARGUMENT;
+    }
+    certs->certs = new OrbisSslData{nullptr, 0};
+    certs->num = 1;
     certs->pool = nullptr;
     return ORBIS_OK;
 }
diff --git a/src/core/libraries/network/ssl2.h b/src/core/libraries/network/ssl2.h
index 754dda40c..18fb205d3 100644
--- a/src/core/libraries/network/ssl2.h
+++ b/src/core/libraries/network/ssl2.h
@@ -10,5 +10,17 @@ class SymbolsResolver;
 }
 
 namespace Libraries::Ssl2 {
+
+struct OrbisSslData {
+    char* ptr;
+    u64 size;
+};
+
+struct OrbisSslCaCerts {
+    OrbisSslData* certs;
+    u64 num;
+    void* pool;
+};
+
 void RegisterLib(Core::Loader::SymbolsResolver* sym);
 } // namespace Libraries::Ssl2
\ No newline at end of file
diff --git a/src/core/libraries/network/ssl2_error.h b/src/core/libraries/network/ssl2_error.h
new file mode 100644
index 000000000..03bf94256
--- /dev/null
+++ b/src/core/libraries/network/ssl2_error.h
@@ -0,0 +1,8 @@
+// SPDX-FileCopyrightText: Copyright 2026 shadPS4 Emulator Project
+// SPDX-License-Identifier: GPL-2.0-or-later
+
+#pragma once
+
+#include "core/libraries/error_codes.h"
+
+constexpr int ORBIS_SSL_ERROR_INVALID_ARGUMENT = 0x8095F007;
\ No newline at end of file