RouterOS/RouterOSAssistant/Core/Networking/CertificateTrustStore.swift

import Foundation

/// Trust-on-first-use store for self-signed RouterOS REST certificates.
final class CertificateTrustStore {
    private let defaults = UserDefaults.standard
    private let key = "RouterOSAssistant.TrustedCertificateFingerprints"

    func isTrusted(host: String, fingerprint: String) -> Bool {
        trustedFingerprints()[host] == fingerprint
    }

    func trust(host: String, fingerprint: String) {
        var all = trustedFingerprints()
        all[host] = fingerprint
        defaults.set(all, forKey: key)
    }

    private func trustedFingerprints() -> [String: String] {
        defaults.dictionary(forKey: key) as? [String: String] ?? [:]
    }
}