mORMot Open Source

avis

Member

Registered: 2016-01-25

Posts: 2

SSL option for using WEBSockets

Hi,

Looked through SynBidirSock and couldn't find any option to use SSL for secured WEBSocket conenctions. Am I missing something? is it on the development roadmap?

Kind regards,

Avi S

Edit: Goal is to implement Secure WEBsocket (chat) server, should work with signed certificates and self-signed  sertificates (for testing purpose)

Last edited by avis (2016-01-25 14:38:09)

ab

Administrator

From: France

Registered: 2010-06-21

Posts: 14,604

Website

Re: SSL option for using WEBSockets

There is no SSL support yet.

We rather encrypt the WebSocket binary frames directly with AES-256 (after compression), and private shared keys.
So we do not need to propagate certificates.
But it works only between Delphi/FPC mORMot executables.

Since it works very well on production for us, there is no SSL support on the roadmap yet.
But it may be implemented for any SynCrtSock socket, I guess.
Any input is welcome.

avis

Member

Registered: 2016-01-25

Posts: 2

Re: SSL option for using WEBSockets

Hi,

This is actually needed for interfacing with another WEBsocket implementation therefore a standard solution is needed.

I haven't tested the proprietary solution but I suspect that a standard establishment of WEBSocket connections with SSL have a better chance of passing through firewalls which perfrom strict stateful inspection, so that's another consideration

Thanks,

Avi S