CDNSP - Download & repack your games, updates, and DLC's to NSP! (2024)

[EDIT]

• I have changed the way my script generates tiks and certs. It seems more games will install, but some reportedly won't launch. Attached files have been updated.
  
• It seems Nintendo is monitoring the situation. See later in the thread for more details

NOTE: Using this script to download unowned content (and most probably owned too) will lead to a ban. Don't hold me responsible for decisions YOU decided to take.

CDNSP is a Python3 CDN downloader. It needs the requests library (pip install request). tqdm (pip install tqdm) is optional and will make your progress bars look better. Maybe some more, I'm not sure.

What it can do:

• Print useful info about a titleid (name, available updates)
• Download games, updates, DLC's and even system update, in their entirety (that means all the available content, logo, legal info, ...) is downloaded
  
• Batch download everything explicited further up
• Resume downloads right were you left them at
• Repack games, DLC's, updates as ready-for-install NSP's

What it does:

• Download and extract the CNMT (content metadata) NCA, and parse it to find the other content to download
• If you want to repack your download as NSP, it will generate a CNMT.XML file
• Generate the TIK and CERT:
  
• for private content the CERT (non console nor game-unique) will be copied and renamed appropriately. The TIK will be generated using a blanked out file taken from BBB's Yooka-Laylee dump, and plug in the titlekey and titleid. To generate the TIK for private content, the titlekey is REQUIRED
• for public content, it will directly download the CETK from Nintendo's servers, and extract the TIK and CERT.
• Download everything else
• And finally, repack everything to an NSP

To get started, you need:

• hactool, and its keys
• A console-unique certificate, in PEM format (I have included a PFX to PEM converter script, simply drag your PFX over it)
• The ShopN certificate, in PEM format (this one is included in the zip)
• Edit your config in the CDNSPconfig.json

Use the command prompt to download your titles. Example are provided below, and a help message is included

Examples:

Cheers! To get you started, I have also included a small list of 859 TitleID's.

It's too bad this requires a console-unique cert. I see you added one more listing from 858 to 859.
It's funny that I had to wait less than 12 hours for this request to be made:
https://gbatemp.net/threads/manually-updating-romfs-bin-for-backups.509834/page-4#post-8113092
Thank you!

Draxzelex said:

Should have been called BanShop

Click to expand...

Heh, that's how the CDN works, not my doing.

kornychaos said:

It's too bad this requires a console-unique cert. I see you added one more listing from 858 to 859.
It's funny that I had to wait less than 12 hours for this request to be made:
https://gbatemp.net/threads/manually-updating-romfs-bin-for-backups.509834/page-4#post-8113092
Thank you!

Click to expand...

Yeah, that was 01006a600623e000: 70010000001564 - Yodanji. Not sure why it slipped through my script.

--------------------- MERGED ---------------------------

cearp said:

even game updates require a console unique cert?
because game update are not console unique, the ticket is generic (like wiiu, unlike 3ds)
anyway, this is really cool! very happy thanks

Click to expand...

Like I said in the OP, TIK and CERT are directly downloaded from Nintendo in the case of updates.
Downloading anything REQUIRES a console-unique cert. Updates, Sysupdates, ...

Jaimy said:

I get module not found error for 'requests' and 'urllib3' despite having installed required packages.

Click to expand...

Are you using python 3?

huma_dawii said:

This but to .Nca thanks

Click to expand...

Files are already downloaded as NCA (that's what the CDN returns). The script will let them sit in your folder.

rkk said:

Files are already downloaded as NCA (that's what the CDN returns). The script will let them sit in your folder.

Click to expand...

So I can download an update and all I will get is one .nca? Cause I need that to merge them with the stockgame.nca and get an updated romfs.bin for LAYEREDFS

huma_dawii said:

So I can download an update and all I will get is one .nca? Cause I need that to merge them with the stockgame.nca and get an updated romfs.bin for LAYEREDFS

Click to expand...

Merging NCA's is technically impossible. Downloading an update will get you several NCA's.

rkk said:

Merging NCA's is technically impossible. Downloading an update will get you several NCA's.

Click to expand...

But you can extract them and get a single romfs.bin it's been confirmed by a lot of people xD

rkk said:

Are you using python 3?

Click to expand...

I get "no module named openSSL" when trying to convert my certificate. How do i install it ?

rkk said:

Are you using python 3?

Click to expand...

Think I'm on 2.7, will try with 3.

huma_dawii said:

But you can extract them and get a single romfs.bin it's been confirmed by a lot of people xD

Click to expand...

Extracting != Repacking. NCA's are signed using a private key(s?) we don't have access to.

Mat37 said:

I get "no module named openSSL" when trying to convert my certificate. How do i install it ?

Click to expand...

pip install pyOpenSSL

rkk said:

Extracting != Repacking. NCA's are signed using a private key(s?) we don't have access to.

pip install pyOpenSSL

Click to expand...

I was missing the py before OpenSSL thank you

Omno said:

Working great here, thanks very much.

Click to expand...

Cool, good to know.
While we're at it, it's technically possible to add 'support' for pfx certs by converting them in a tempfile everytime the script is launched. I didn't add it because it would bloat you AppData/Local/Temp folder.
I'm also looking at listing available DLC's when printing info about a file.