KLMS Known Issues and Debug Notes

# Known Issues

## TLS / CA Certificate

- `danger_accept_invalid_certs(true)` used — Clypeum Root CA PEM returns `BadSignature`
- Need correct CA certificate chain. The .p12 may contain intermediate certs.
- Without `danger_accept_invalid_certs`, server returns "client error (Connect)"

## Container 0x0900 — HTTP 500

- Error: "Failed to generate the requested CryptoContainer or insufficient rights"
- Possible causes:
    - Container type `0x0900` may not be registered for this account
    - Extra JSON format may be wrong
    - Insufficient permissions on the CCS endpoint
- Need to verify with Clypeum support

## Get Versions / Get Container Types — Empty Response

- Server returns 200 but parsed JSON is empty (0 entries)
- May need correct field names (case sensitivity)
- Possible: the response format differs from our expected JSON structure

## Tracing

- `tracing_subscriber` initialized with `kf_dev_station=info` level
- Use `RUST_LOG=kf_dev_station=info` env var to see API request/response details
- Tracing goes to stderr (not visible when running as GUI foreground process)

## Key File Locations

- `data/tls/jan.hunnius@breachlabz.com.cert.pem` — client cert (unencrypted)
- `data/tls/jan.hunnius@breachlabz.com.key.pem` — client key (ENCRYPTED PRIVATE KEY, PBKDF2-HMAC-SHA1)
- `data/tls/jan.hunnius@breachlabz.com.p12` — original PKCS#12 bundle
- `data/tls/Clypeum_Root_CA.pem` — root CA cert (currently not validating correctly)
- `data/klms-config.toml` — KLMS config (TOML, not JSON)

## Passphrase

- IKWGc4kTfGnt — confirmed working, decrypts private key correctly

id: d5ecd9fcaf4543e8828f7b4181aa70da
parent_id: beb251c3b3f9490285e6cb68942a5145
created_time: 2026-08-12T10:00:31.547Z
updated_time: 2026-08-14T16:59:00.855Z
is_conflict: 0
latitude: 0.00000000
longitude: 0.00000000
altitude: 0.0000
author: 
source_url: 
is_todo: 0
todo_due: 0
todo_completed: 0
source: joplin-desktop
source_application: net.cozic.joplin-desktop
application_data: 
order: 1786528831547
user_created_time: 2026-08-12T10:00:31.547Z
user_updated_time: 2026-08-14T16:59:00.855Z
encryption_cipher_text: 
encryption_applied: 0
markup_language: 1
is_shared: 0
share_id: 
conflict_original_id: 
master_key_id: 
user_data: 
deleted_time: 0
is_locked: 0
extracted_resource_ids: 
type_: 1