Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need to use ssl connection with ws server #70

Open
roman-modelist-dev opened this issue Dec 5, 2018 · 3 comments
Open

Need to use ssl connection with ws server #70

roman-modelist-dev opened this issue Dec 5, 2018 · 3 comments
Assignees
Labels
enhancement New feature or request

Comments

@roman-modelist-dev
Copy link
Contributor

Need to use ssl connection with ws server.

@roman-modelist-dev roman-modelist-dev added the enhancement New feature or request label Dec 5, 2018
@roman-modelist-dev roman-modelist-dev self-assigned this Dec 5, 2018
@roman-modelist-dev
Copy link
Contributor Author

It seems that websocketd support ssl connection.
joewalnes/websocketd#17

@roman-modelist-dev
Copy link
Contributor Author

Need to generate ssl certificate with private key. Certificate must be signed by certificate agency.
Next need to run websocketd server with following parameters:
--ssl
--sslcert=cert_file_name
--sslkey=cert_priv_key_file
--sslca=cert_ca_file_name

@roman-modelist-dev
Copy link
Contributor Author

There is no clear solution for all platforms at this moment. Because of localhost we cannot use standard public CA for sign our ssl certificate. We need to use self signed certificate and import our certificate into system certificate storage. However, on Linux and Windows browser do not use system certificate storage for verifying ssl connection. Browser on Linux and Windows use self storage for storing CA certificates instead.

Summary:

  1. On MacOS we can import our certificate into keychain (macos system storage) during installation.
  2. On Linux and Windows we need
  • either use unsecured websocket connection and Well-known ports (< 1024)
  • or find all supported browsers in the OS and import our certificate into browser storage. Need to figure how to import our certificate to the browser storage and how difficult is it?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants