termfront 0.1.1 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 361fd9f04e455824ea42245b3dae9c5eda732f7846a8345756809353bebc0b6d
-  data.tar.gz: 50480fe780ff0cc795004616228aa7042889fbe606289645cb3c973b3657005f
+  metadata.gz: 64c01550bc002aa40824296474323c7dc6126447fe52bd8acb8cf150514a68af
+  data.tar.gz: 07c871ac0a859394d94d98189700195a8a98469c0f319d8748482ff79f617883
 SHA512:
-  metadata.gz: ae66c3672d820736a3155a2d78b41456f90c4f4043421d32b4cbef5b610e4aa697886092e15f64ef086fff5232574bbdae82b977de099df2c9bd00440d1238c8
-  data.tar.gz: 56ad7d6332ac2828cbd75b0b8087a8230367be8c4462f161c4db731ae4f6203daeaeb77a49d10fd4063f09778b64091406ddd06026e6a9f08ecc3eef397b59eb
+  metadata.gz: 665f32c4d60b34330ba53c5beafed57826c5b1402a9855c613cd40941dbb4ea8bd29dd93eeb564b90513809d7f26e7f649624d1fe749054ead899884865f74c3
+  data.tar.gz: 5d5f99b125210dbf8980cea284f112279178d228499f1caad9880deb99869cced727bfd180d5b1b8db645c10aa6627c7ba79e218b6093fd8e74b37f2bf5bf102

data/.ruby-version

@@ -0,0 +1 @@
+4.0.5

data/CHANGELOG.md

@@ -6,6 +6,24 @@ The format is based on Keep a Changelog, and this project follows Semantic Versi
 
 ## [Unreleased]
 
+## [0.1.3] - 2026-05-24
+
+### Fixed
+
+- Fixed TLS server certificate loading to include intermediate certificates from `fullchain.pem`, allowing clients to verify Let's Encrypt chains correctly
+
+## [0.1.2] - 2026-05-23
+
+### Added
+
+- Added TLS verification coverage for multiplayer connection settings and certificate trust handling
+
+### Changed
+
+- Added visible remote shot tracer effects during PvP and Wavesfight multiplayer matches
+- Enabled TLS certificate chain and hostname verification for multiplayer client connections
+- Added support for `TERMFRONT_TLS_CERT_FILE` and `TERMFRONT_TLS_KEY_FILE` when loading the server certificate
+
 ## [0.1.1] - 2026-05-21
 
 ### Changed

data/README.md

@@ -54,6 +54,14 @@ Start a PvP server:
 termfront-server
 ```
 
+Use custom TLS certificate paths:
+
+```bash
+TERMFRONT_TLS_CERT_FILE=/path/to/fullchain.pem \
+TERMFRONT_TLS_KEY_FILE=/path/to/privkey.pem \
+termfront-server
+```
+
 Use a custom port:
 
 ```bash
@@ -110,7 +118,7 @@ Wavesfight is a PvE survival mode built on selected campaign maps.
 PvP is currently marked experimental.
 
 - The server listens on TCP and wraps traffic with TLS.
-- The client connects directly to `host:port`.
+- The client connects directly to `host:port` and verifies the server certificate and hostname.
 - The default multiplayer endpoint is `termfront.gamelinks007.net:443`.
 - Matchmaking now supports `1v1`, `2v2`, and `4v4`.
 - Players choose the match size on the client, and the server keeps separate queues for each mode.

data/lib/termfront/network/client.rb

@@ -336,6 +336,7 @@ module Termfront
         remote[:current].health = msg[:h]
         remote[:current].weapon = msg[:w]&.to_sym
         remote[:current].ammo = msg[:am]
+        spawn_remote_projectile_effect(msg) if (remote[:current].fire_flash || 0) <= 0 && (msg[:ff] || 0) > 0
         remote[:current].fire_flash = msg[:ff] || 0
         remote[:lerp_t] = 0.0
       end
@@ -377,6 +378,7 @@ module Termfront
 
         process_fire_pvp if @player.fire_flash == 4
         @player.fire_flash -= 1 if @player.fire_flash > 0
+        update_projectile_effects(dt)
 
         @player.update_shield(dt, @stdout, audio: @audio)
 
@@ -476,6 +478,7 @@ module Termfront
         render_pvp_hud(buf, cols)
         render_view(buf, view_h, view_w, wtop, wbot, wcol)
         render_remote_players_3d(buf, view_h, view_w, virt_h, dists)
+        render_pvp_projectiles(buf, view_h, view_w, virt_h, dists)
         buf << "\e[#{3 + view_h};1H"
         render_pvp_radar(buf, cols, radar_h)
         render_crosshair(buf, view_h, view_w, cols)
@@ -635,6 +638,64 @@ module Termfront
         end
       end
 
+      def render_pvp_projectiles(buf, view_h, view_w, virt_h, dists)
+        dx = Math.cos(@player.angle)
+        dy = Math.sin(@player.angle)
+        px = -dy * Math.tan(Config::FOV / 2.0)
+        py = dx * Math.tan(Config::FOV / 2.0)
+        inv = 1.0 / (px * dy - py * dx)
+
+        sprites = []
+        @projectiles.each do |projectile|
+          ex = projectile[:x] - @player.x
+          ey = projectile[:y] - @player.y
+          tx = inv * (dy * ex - dx * ey)
+          tz = inv * (-py * ex + px * ey)
+          next if tz < 0.2
+
+          sprites << [tz, tx, projectile]
+        end
+        sprites.sort_by! { |sprite| -sprite[0] }
+
+        sprites.each do |tz, tx, projectile|
+          sx = ((view_w / 2.0) * (1 + tx / tz)).to_i
+          pw = (4.0 / tz).ceil.clamp(1, 5)
+          ph = (virt_h / tz * 0.15).ceil.clamp(2, 6)
+          vmid = virt_h / 2
+          draw_top = [(vmid - ph / 2), 0].max
+          draw_bot = [(vmid + ph / 2).clamp(draw_top + 2, virt_h), virt_h].min
+          start_x = [sx - pw / 2, 0].max
+          end_x = [sx + pw / 2, view_w - 1].min
+
+          start_x.upto(end_x) do |c|
+            next if c < 0 || c >= view_w
+            next if dists[c] < tz
+
+            r_top = (draw_top / 2.0).ceil
+            r_bot = [(draw_bot / 2.0).floor, r_top + 1].max
+            r_top.upto(r_bot - 1) do |r|
+              next if r < 0 || r >= view_h
+
+              vp0 = r * 2
+              vp1 = r * 2 + 1
+              top_in = vp0 >= draw_top && vp0 < draw_bot
+              bot_in = vp1 >= draw_top && vp1 < draw_bot
+              next unless top_in || bot_in
+
+              proj_color = projectile[:color]
+              buf << "\e[#{3 + r};#{c + 1}H"
+              buf << if top_in && bot_in
+                       "\e[38;2;#{proj_color}m\xE2\x96\x88\e[0m"
+                     elsif top_in
+                       "\e[38;2;#{proj_color}m\xE2\x96\x80\e[0m"
+                     else
+                       "\e[38;2;#{proj_color}m\xE2\x96\x84\e[0m"
+                     end
+            end
+          end
+        end
+      end
+
       def tint_player_color(color, mode)
         return nil unless color
         return color if mode == :ally
@@ -822,6 +883,30 @@ module Termfront
         STDIN.raw { |s| s.getc }
       end
 
+      def spawn_remote_projectile_effect(msg)
+        shock = msg[:w].to_s.start_with?("shock")
+        color = shock ? "80;220;255" : "255;210;80"
+        speed = shock ? 18.0 : 14.0
+        angle = msg[:a]
+        @projectiles << {
+          x: msg[:x],
+          y: msg[:y],
+          vx: Math.cos(angle) * speed,
+          vy: Math.sin(angle) * speed,
+          ttl: 0.18,
+          color: color
+        }
+      end
+
+      def update_projectile_effects(dt)
+        @projectiles.reject! do |projectile|
+          projectile[:x] += projectile[:vx] * dt
+          projectile[:y] += projectile[:vy] * dt
+          projectile[:ttl] -= dt
+          projectile[:ttl] <= 0 || @map.wall_at?(projectile[:x], projectile[:y])
+        end
+      end
+
       def notify_death_if_needed
         return unless @player.dead
         return if @sent_dead

data/lib/termfront/network/connection.rb

@@ -3,29 +3,47 @@
 require "socket"
 require "openssl"
 require "json"
+require "time"
 
 module Termfront
   module Network
     class Connection
+      PeerInfo = Struct.new(
+        :certificate_sha256,
+        :public_key_sha256,
+        :subject,
+        :issuer,
+        :not_after,
+        keyword_init: true
+      )
+
       attr_reader :rtt
+      attr_reader :peer_info
 
       def initialize
         @sock = nil
         @buf = +""
         @ping_ts = 0
         @rtt = 0
+        @peer_info = nil
       end
 
-      def connect(host, port)
+      def connect(host, port, ca_file: nil)
         tcp = TCPSocket.new(host, port)
         tcp.setsockopt(Socket::IPPROTO_TCP, Socket::TCP_NODELAY, 1)
 
-        ctx = OpenSSL::SSL::SSLContext.new
-        ctx.verify_mode = OpenSSL::SSL::VERIFY_NONE
+        ctx = build_ssl_context(ca_file: ca_file)
         @sock = OpenSSL::SSL::SSLSocket.new(tcp, ctx)
         @sock.hostname = host if @sock.respond_to?(:hostname=)
         @sock.sync = true
         @sock.connect
+        @sock.post_connection_check(host)
+        @peer_info = build_peer_info(@sock.peer_cert)
+      rescue StandardError
+        tcp&.close
+        @sock = nil
+        @peer_info = nil
+        raise
       end
 
       def send_msg(hash)
@@ -76,6 +94,7 @@ module Termfront
           nil
         end
         @sock = nil
+        @peer_info = nil
       end
 
       def connected?
@@ -96,6 +115,31 @@ module Termfront
       def clock
         Process.clock_gettime(Process::CLOCK_MONOTONIC)
       end
+
+      def build_ssl_context(ca_file:)
+        ctx = OpenSSL::SSL::SSLContext.new
+        ctx.verify_mode = OpenSSL::SSL::VERIFY_PEER
+        ctx.verify_hostname = true if ctx.respond_to?(:verify_hostname=)
+        ctx.cert_store = build_cert_store(ca_file: ca_file)
+        ctx
+      end
+
+      def build_cert_store(ca_file:)
+        store = OpenSSL::X509::Store.new
+        store.set_default_paths
+        store.add_file(ca_file) if ca_file
+        store
+      end
+
+      def build_peer_info(cert)
+        PeerInfo.new(
+          certificate_sha256: OpenSSL::Digest::SHA256.hexdigest(cert.to_der),
+          public_key_sha256: OpenSSL::Digest::SHA256.hexdigest(cert.public_key.to_der),
+          subject: cert.subject.to_s,
+          issuer: cert.issuer.to_s,
+          not_after: cert.not_after.utc
+        )
+      end
     end
   end
 end

data/lib/termfront/network/server.rb

@@ -43,11 +43,12 @@ module Termfront
       end
 
       def run
-        cert, key = load_or_create_cert
+        cert, key, chain = load_or_create_cert
 
         ctx = OpenSSL::SSL::SSLContext.new
         ctx.cert = cert
         ctx.key  = key
+        ctx.extra_chain_cert = chain unless chain.empty?
 
         tcp_server = TCPServer.new("0.0.0.0", @port)
         ssl_server = OpenSSL::SSL::SSLServer.new(tcp_server, ctx)
@@ -589,11 +590,14 @@ module Termfront
       end
 
       def load_or_create_cert
-        cert_file = "termfront_server.crt"
-        key_file  = "termfront_server.key"
+        cert_file = ENV.fetch("TERMFRONT_TLS_CERT_FILE", "termfront_server.crt")
+        key_file  = ENV.fetch("TERMFRONT_TLS_KEY_FILE", "termfront_server.key")
 
         if File.exist?(cert_file) && File.exist?(key_file)
-          cert = OpenSSL::X509::Certificate.new(File.read(cert_file))
+          certs = OpenSSL::X509::Certificate.load(File.read(cert_file))
+          certs = [certs] unless certs.is_a?(Array)
+          cert = certs.first
+          chain = certs.drop(1)
           key  = OpenSSL::PKey::RSA.new(File.read(key_file))
           puts "Loaded existing certificate."
         else
@@ -601,8 +605,9 @@ module Termfront
           File.write(cert_file, cert.to_pem)
           File.write(key_file, key.to_pem)
           puts "Generated new self-signed certificate."
+          chain = []
         end
-        [cert, key]
+        [cert, key, chain]
       end
 
       def pvp_spawns

data/lib/termfront/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Termfront
-  VERSION = "0.1.1"
+  VERSION = "0.1.3"
 end

metadata

@@ -1,119 +1,119 @@
 --- !ruby/object:Gem::Specification
 name: termfront
 version: !ruby/object:Gem::Version
-  version: 0.1.1
+  version: 0.1.3
 platform: ruby
 authors:
-  - S-H-GAMELINKS
+- S-H-GAMELINKS
 bindir: exe
 cert_chain: []
 date: 1980-01-02 00:00:00.000000000 Z
 dependencies: []
-description: "A terminal-based first-person shooter with DDA raycasting, campaign mode, and PvP multiplayer."
+description: A terminal-based first-person shooter with DDA raycasting, campaign mode,
+  and PvP multiplayer.
 email:
-  - gamelinks007@gmail.com
+- gamelinks007@gmail.com
 executables:
-  - termfront
-  - termfront-server
+- termfront
+- termfront-server
 extensions: []
 extra_rdoc_files: []
 files:
-  - CHANGELOG.md
-  - LICENSE
-  - LICENSE.txt
-  - README.md
-  - Rakefile
-  - data/audio/THIRD_PARTY_NOTICES.md
-  - data/audio/beep_02.ogg
-  - data/audio/button1.ogg
-  - data/audio/complete.ogg
-  - data/audio/manifest.json
-  - data/audio/mission_bgm.wav
-  - data/audio/mission_clear_se.wav
-  - data/audio/on.ogg
-  - data/audio/page_se.wav
-  - data/audio/sector.mp3
-  - data/audio/sfx_22b.ogg
-  - data/audio/shield_alarm_se.wav
-  - data/audio/shield_regen_se.wav
-  - data/audio/shoot_01.ogg
-  - data/audio/terminal_se.wav
-  - data/audio/title.mp3
-  - data/audio/title_bgm.wav
-  - data/audio/victory.mp3
-  - data/events/corridor_sweep.json
-  - data/events/final_push.json
-  - data/events/stronghold.json
-  - data/events/the_gauntlet.json
-  - data/events/training_grounds.json
-  - exe/termfront
-  - exe/termfront-server
-  - lib/termfront.rb
-  - lib/termfront/audio_manager.rb
-  - lib/termfront/config.rb
-  - lib/termfront/demo_player.rb
-  - lib/termfront/drop_item/base.rb
-  - lib/termfront/drop_item/weapon.rb
-  - lib/termfront/enemy/base.rb
-  - lib/termfront/enemy/crawler.rb
-  - lib/termfront/enemy/executor.rb
-  - lib/termfront/game.rb
-  - lib/termfront/input.rb
-  - lib/termfront/map.rb
-  - lib/termfront/mission/base.rb
-  - lib/termfront/mission/corridor_sweep.rb
-  - lib/termfront/mission/event_loader.rb
-  - lib/termfront/mission/event_runtime.rb
-  - lib/termfront/mission/final_push.rb
-  - lib/termfront/mission/stronghold.rb
-  - lib/termfront/mission/the_gauntlet.rb
-  - lib/termfront/mission/training.rb
-  - lib/termfront/mission/training_grounds.rb
-  - lib/termfront/network/client.rb
-  - lib/termfront/network/connection.rb
-  - lib/termfront/network/server.rb
-  - lib/termfront/network/wavesfight_client.rb
-  - lib/termfront/opponent.rb
-  - lib/termfront/player.rb
-  - lib/termfront/projectile.rb
-  - lib/termfront/remote_enemy.rb
-  - lib/termfront/renderer.rb
-  - lib/termfront/scene_player.rb
-  - lib/termfront/sprite.rb
-  - lib/termfront/terminal_output.rb
-  - lib/termfront/title_screen.rb
-  - lib/termfront/version.rb
-  - lib/termfront/weapon/assault_rifle.rb
-  - lib/termfront/weapon/base.rb
-  - lib/termfront/weapon/pistol.rb
-  - lib/termfront/weapon/shock_pistol.rb
-  - lib/termfront/weapon/shock_rifle.rb
-  - sig/termfront.rbs
-homepage: "https://github.com/S-H-GAMELINKS/termfront"
+- ".ruby-version"
+- CHANGELOG.md
+- LICENSE
+- LICENSE.txt
+- README.md
+- Rakefile
+- data/audio/THIRD_PARTY_NOTICES.md
+- data/audio/beep_02.ogg
+- data/audio/button1.ogg
+- data/audio/complete.ogg
+- data/audio/manifest.json
+- data/audio/mission_bgm.wav
+- data/audio/mission_clear_se.wav
+- data/audio/on.ogg
+- data/audio/page_se.wav
+- data/audio/sector.mp3
+- data/audio/sfx_22b.ogg
+- data/audio/shield_alarm_se.wav
+- data/audio/shield_regen_se.wav
+- data/audio/shoot_01.ogg
+- data/audio/terminal_se.wav
+- data/audio/title.mp3
+- data/audio/title_bgm.wav
+- data/audio/victory.mp3
+- data/events/corridor_sweep.json
+- data/events/final_push.json
+- data/events/stronghold.json
+- data/events/the_gauntlet.json
+- data/events/training_grounds.json
+- exe/termfront
+- exe/termfront-server
+- lib/termfront.rb
+- lib/termfront/audio_manager.rb
+- lib/termfront/config.rb
+- lib/termfront/demo_player.rb
+- lib/termfront/drop_item/base.rb
+- lib/termfront/drop_item/weapon.rb
+- lib/termfront/enemy/base.rb
+- lib/termfront/enemy/crawler.rb
+- lib/termfront/enemy/executor.rb
+- lib/termfront/game.rb
+- lib/termfront/input.rb
+- lib/termfront/map.rb
+- lib/termfront/mission/base.rb
+- lib/termfront/mission/corridor_sweep.rb
+- lib/termfront/mission/event_loader.rb
+- lib/termfront/mission/event_runtime.rb
+- lib/termfront/mission/final_push.rb
+- lib/termfront/mission/stronghold.rb
+- lib/termfront/mission/the_gauntlet.rb
+- lib/termfront/mission/training.rb
+- lib/termfront/mission/training_grounds.rb
+- lib/termfront/network/client.rb
+- lib/termfront/network/connection.rb
+- lib/termfront/network/server.rb
+- lib/termfront/network/wavesfight_client.rb
+- lib/termfront/opponent.rb
+- lib/termfront/player.rb
+- lib/termfront/projectile.rb
+- lib/termfront/remote_enemy.rb
+- lib/termfront/renderer.rb
+- lib/termfront/scene_player.rb
+- lib/termfront/sprite.rb
+- lib/termfront/terminal_output.rb
+- lib/termfront/title_screen.rb
+- lib/termfront/version.rb
+- lib/termfront/weapon/assault_rifle.rb
+- lib/termfront/weapon/base.rb
+- lib/termfront/weapon/pistol.rb
+- lib/termfront/weapon/shock_pistol.rb
+- lib/termfront/weapon/shock_rifle.rb
+- sig/termfront.rbs
+homepage: https://github.com/S-H-GAMELINKS/termfront
 licenses:
-  - MIT
+- MIT
 metadata:
-  allowed_push_host: "https://rubygems.org"
-  homepage_uri: "https://github.com/S-H-GAMELINKS/termfront"
-  source_code_uri: "https://github.com/S-H-GAMELINKS/termfront"
-  changelog_uri: "https://github.com/S-H-GAMELINKS/termfront/blob/main/CHANGELOG.md"
+  allowed_push_host: https://rubygems.org
+  homepage_uri: https://github.com/S-H-GAMELINKS/termfront
+  source_code_uri: https://github.com/S-H-GAMELINKS/termfront
+  changelog_uri: https://github.com/S-H-GAMELINKS/termfront/blob/main/CHANGELOG.md
 rdoc_options: []
 require_paths:
-  - lib
+- lib
 required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
-    -
-      - ">="
-      - !ruby/object:Gem::Version
-        version: 3.2.0
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.2.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-    -
-      - ">="
-      - !ruby/object:Gem::Version
-        version: "0"
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
 requirements: []
-rubygems_version: 4.1.0.dev
+rubygems_version: 4.0.10
 specification_version: 4
 summary: Terminal FPS game with raycasting engine
 test_files: []