FS is used for layeredfs isn't it? If we're all using an old kip isn't it potentially possible to run into conflicts with a current version of a cfw? I'm wondering if, instead of an old FS.kip file if there isn't a specific change to be made in a current one for whatever this is doing? Where did people find details about this particular patch? It's kind of freaky because everyone is discussing it as if there is a big detailed post and I don't see it (but I also don't see a deleted area.) If I google it the top result is information about spark plugs followed by a ton of other unrelated things (now if you need to cross check your E3 spark plugs I'm now your man. Apparently.)
You should stop using the GUI. You can get updates. Banned cert is used and works / you do not need a valid certificate as you have stated. Updates do not need a key to download because they come with the legit ticket direct from the CDN which contains the key. If you download NSPs from the wild there's a good chance that person didn't do it correctly, packed it using a different program or an older version, or doesn't contain the right titleid/region for your game. You should really be doing these things by your own hand from the files obtained via CDNSP.
If you stick to GUI, you're going to have a bad time trying to do the things that you want to accomplish and causes confusion when people do the bad methods and post "it doesn't work."
You should stop making assumptions... I tried the command line version
first. Both ultimately give me the same error (I ran the GUI version in a console so it would show the error messages and after getting the same error it would have a ton of others that makes it looks like the code didn't expect that problem): "Request rejected by server! Check your cert." There's only so much that one can do with a tool that is very explicitly not supported in its official location where absolutely no one will allow the actual tool or its required files to be posted anywhere even googling around (pretty much everything comes back to a thread here where there is no longer even a link to the github or anything.) It's great you have a working cert, but I can't even use the -i command without getting that error and the -g command explicitly requires a key to do anything at all (it won't even go so far as a server error, it just simply refuses to do anything without a key) so it apparently requires a working cert by its own statement or the server simply won't respond with anything useful and both are saying the exact same thing. It's well known that Nintendo is banning certificates, so when the tool itself tells me the server won't accept it I have to conclude that the server won't accept it.
EDIT: And to be clear, what I mean about key is whatever it requires that you put in
instead (or in addition to) a title ID just to get it to actually do a download (it's apparently 32 bytes if that tells you anything.) Stuff in the existing title key lists will have such a key available, but this one does not because it is not in such lists. All I have is a title ID and nothing else. Putting in an invalid key (like all zeros or one from another game) didn't seem to work (same error about the server rejecting the command and to check the cert.)
Enjoy yours while it works because we're not all this lucky.
I wouldn't exactly advise users to manually patch their kips when it's just a workaround. The CFW authors aren't going to add this in by default, as far as I can see.
I don't want to come off as harsh (yeah Raj can, but that's Raj,) however I believe the sentiment that this can be done without asking users to edit files they're unaccustomed to.
Honestly I have to agree with you. Using unsupported patches can be tricky in a lot of ways. Not just the technical expertise required to manually patch (and I guess it's illegal to download the pre-patched file? Which also means it won't be officially provided in places like this if so) but also the fact that it may not always be compatible (for instance, might this particular patch be firmware version specific?) Although I do wonder if whatever is required here isn't something CFWs could do anyway. Surely the actual signature check itself we're discussing here (whatever it is) isn't any more illegal to bypass than the
other signature checks?
Well, it's a work in progress. Hopefully we'll have a full blown XCI-to-NSP conversion with no unusual patches or updates required to get them to work someday. Which will particularly come in handy for stuff like homebrew and I'm hoping game modifications (undubs, translations, etc.)
EDIT: All that said, I will say that when I made the mentioned hex editing changes (thank goodness I went the right direction since there were zero details) it did get it to install via Tinfoil (devmenu crashes the console with that one.) So apparently the modified FS.kip can make at least these work temporarily, though it's not a great long term solution as it breaks other things I guess.