diff --git a/CHANGELOG/index.html b/CHANGELOG/index.html index b5137282..278d267c 100644 --- a/CHANGELOG/index.html +++ b/CHANGELOG/index.html @@ -91,6 +91,15 @@
All notable changes to this project will be documented in this file.
+ws httpd -L --redirect_url https://www.google.com
+
+
+make ws_test shell script test.To leverage TLS features, the library must be compiled with the option USE_TLS=1.
Then, secure sockets are automatically used when connecting to a wss://* url.
Additional TLS options can be configured by passing a ix::SocketTLSOptions instance to the
+setTLSOptions on ix::WebSocket (or ix::WebSocketServer or ix::HttpServer)
webSocket.setTLSOptions({
+ .certFile = "path/to/cert/file.pem",
+ .keyFile = "path/to/key/file.pem",
+ .caFile = "path/to/trust/bundle/file.pem"
+});
+
+
+Specifying certFile and keyFile configures the certificate that will be used to communicate with TLS peers.
On a client, this is only necessary for connecting to servers that require a client certificate.
+On a server, this is necessary for TLS support.
+Specifying caFile configures the trusted roots bundle file (in PEM format) that will be used to verify peer certificates.
+ - The special value of SYSTEM (the default) indicates that the system-configured trust bundle should be used; this is generally what you want when connecting to any publicly exposed API/server.
+ - The special value of NONE can be used to disable peer verification; this is only recommended to rule out certificate verification when testing connectivity.
For a client, specifying caFile can be used if connecting to a server that uses a self-signed cert, or when using a custom CA in an internal environment.
For a server, specifying caFile implies that:
+1. You require clients to present a certificate
+1. It must be signed by one of the trusted roots in the file
#include <ixwebsocket/IXWebSocketServer.h>