php_nub_qq php_nub_qq - 2 months ago 12
Node.js Question

WebSocket server does not work with SSL

I have a working chat application using websockets. I want to go one step further and enable encryption on my connections, however when I switch up the http server with a https one my connections start failing.

I have generated a self-signed certificate that I use on all of my websites (under the same TLD, which implies it is a wildcard certificate). I can confirm it is a valid certificate, so the problem should not be there.

This is what works (unencrypted)

var webSocketServer = require('websocket').server;
var http = require('http');

var server = http.createServer(function() {});
server.listen(webSocketsServerPort, function () {
log("system", "Server is listening on port " + webSocketsServerPort);
});

var wsServer = new webSocketServer({
httpServer: server
});


Using this I can now connect to
ws://my.domain:port
.

This is what does not work

var webSocketServer = require('websocket').server;
var http = require('https');
var fs = require('fs');

var server = http.createServer({
key: fs.readFileSync("path/to/host.key"),
cert: fs.readFileSync("path/to/host.pem")
});
server.listen(webSocketsServerPort, function () {
log("system", "Server is listening on port " + webSocketsServerPort);
});

var wsServer = new webSocketServer({
httpServer: server
});


With this code the server starts as well, I see the log message "Server is listening.." but when I try to connect at
wss://my.domain:port
the connection can not be established.

I have added an exception in my browser for the certificate because my client page and websocket server address are under the same tld and sub-domain.

What could be the problem?

Answer

Bad practices combined with bad logging habits were the cause of the problem.

On opening a new connection there was a check performed to validate the origin of the request which had hardcoded http:// in there and since I was requesting it from a secure page (https://) the check no longer passed and connections were impossible.