Ws: SSL certificate issue and config options

[tomalex0]

I'm trying to connect secured websocket layer and getting DEPTH_ZERO_SELF_SIGNED_CERT.
Is there a way to pass certificate as config option to resolve this, I will anyway get proper certificate.
Like to know what all config options i can give.

var ws = new WebSocket('wss://test.com/websock');

[coolaj86]

Don't use self-signed certificates in a server. Instead, self-sign a CA, then use the CA to self-sign your certificate.

See this repo and follow the tutorial: https://github.com/coolaj86/nodejs-self-signed-certificate-example

If you get it set up like that, it'll work.

[coolaj86]

Also, you need to create your websocket from your server:

var server = require('https').createServer({ /*ssl options*/ })
  , app = connect() // or express()
  , wss = new WebSocketServer({ server: server })
  ;

server.on('request', app);
server.listen(port, function () { console.log('Listening...'); });

In order to have your test work from your browser you must add a .p12 file to your keychain. I've got an example of that here: https://github.com/coolaj86/nodejs-ssl-trusted-peer-example/blob/master/make-root-ca-and-certificates.sh#L84

[tomalex0]

My node app is acting as client to websocket server in java.

I tried an https request using 'request' module with

secureProtocol: 'SSLv3_method

var options = {
        strictSSL: false,
        rejectUnauthorized: false,
        secureProtocol: 'SSLv3_method',
        agent: false,
        url : 'https://test.com/websock',
        method : 'GET'
    };
request(options, function(error, response, body) {
        console.log(response.statusCode);
        console.log('its in here');
 });

and got a response code but using websocket im getting

{ [Error: socket hang up] code: 'ECONNRESET', sslError: undefined }

what all options do we have in ws to pass ssl configs, i tried all these

var ws = new WebSocket('wss://test.com/websock',{ 
    rejectUnauthorized:false,
    strictSSL: false,
    secureProtocol: 'SSLv3_method'}
);
and still got same hangup issue

[coolaj86]

Well, you probably need to fix the java server so that it isn't using a self-signed cert. (you can use the bash script in the repo I showed to create the correct type of certificate)

You probably also need to include the .crt chain in the client app.

Can you get it working with curl for a normal request?

Can you get it working with a reference websocket implementation?

If you can't get it working with curl or a reference implementation you probably won't get it working with node.

[larsthorup]

Try adding this line to your client, before creating the WebSocket instance:

process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

[tomalex0]

I'm getting this error while connecting to wss,
[Error: socket hang up] code: 'ECONNRESET', sslError: undefined

ws works fine

[tomalex0]

This issue is resolved. It has something to do with Jetty installed in websocket server (tomcat). Once jetty was removed, wss worked fine