Fix root certificate issues for add-on store

[seanbudd]

Link to issue number:

None

Summary of the issue:

If a device doesn't trust NV Access's TLS certificate, fetches to the add-on store fails.
When performing an update check, we update windows root certificates if our certificate is invalid or out of date.

Description of user facing changes:

Users without a trusted NV Access TLS certificate installed already should be able to access the add-on store

Description of developer facing changes:

Code related to updating root certificates is deprecated as it is not intended for the public

Description of development approach:

Made the code to update certificates more generic

Testing strategy:

• Download NV Access's SSL certificate chain.
• Modify it to remove the last 2 certificates, which are used to verify our cert.
• Manually override requests.get in _fetchUrlAndUpdateRootCertificates to send our bad certificate chain. e.g. result = requests.get(url, timeout=_FETCH_TIMEOUT_S, verify=r"C:\Users\sean\Downloads\nvaccess-org-chain.pem")

Known issues with pull request:

none

Code Review Checklist:

• Documentation:
  • Change log entry
  • User Documentation
  • Developer / Technical Documentation
  • Context sensitive help for GUI changes
• Testing:
  • Unit tests
  • System (end to end) tests
  • Manual testing
• UX of all users considered:
  • Speech
  • Braille
  • Low Vision
  • Different web browsers
  • Localization in other languages / culture than English
• API is compatible with existing add-ons.
• Announce deprecations to mailing list
• Security precautions taken.

@coderabbitai summary

[Copilot]

Pull Request Overview

This pull request fixes root certificate issues for the add-on store by updating and centralizing certificate update logic. Key changes include:

• Introducing a new networking module (source/utils/networking.py) that implements generic functions for updating Windows root certificates and fetching URLs.
• Refactoring updateCheck.py to use the new certificate update function and removing deprecated legacy code.
• Updating addonStore/dataManager.py to utilize the new networking function for improved consistency.

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.

File	Description
source/utils/networking.py	New module to update Windows root certificates and handle URL fetches
source/updateCheck.py	Replaced legacy certificate update code with a call to the new function
source/addonStore/dataManager.py	Updated cache hash fetching to use the centralized networking logic