-->
Page 1 of 2

Securing Websockets

PostPosted: Tue Feb 02, 2016 8:19 am
by NatroN
Hi,

I'm testing a with websockets and as it seems that has MUUUCH potential in the IOT world with the ESP8266 I have some questions.

I got my example code running fine - a HTML site with a bit javascript as a websocket client. The websocket Server is the ESP which is switching LEDs (at the moment). The library I've used is LINKs Library.

But when we talk about Internet of things we talk about controlling things over the internet - means it has du be encryptet and authenticated. I didn't find much about that. Is any library out that supports WSS + authentication of websockets? Or did I miss something in LINKs library?

thank you and happy coding
mathias

Re: Securing Websockets

PostPosted: Tue Feb 02, 2016 1:46 pm
by ncnmra
I think for wss, you need SSL or TLS. From what I'm seeing, it only "sort of" works on the ESP8266 and Arduino (check out WiFiSecureClient library).

It seems to only work with smaller certificates, and even then, it hasn't been consistent enough for me. For me, the ESP8266 has only limited usefulness for IoT if it doesn't feature easy security.

Re: Securing Websockets

PostPosted: Thu Feb 04, 2016 9:38 am
by NatroN
yeah - same thought.

I found libraries supporting WSS as a client - but nothing out ther supporting it as a Websocket server.

Still searching - I'll report back if I find somehting

Re: Securing Websockets

PostPosted: Wed Jun 24, 2020 4:58 am
by Stein Jonker
Hello,

I know it has been a while since there has been a post here, but did you find a way to have a wss websocket server? I think I followed the same example you did, and built further upon it, but now I need my website client to have SSL, which means the ESP needs wss aswell.

Greetings,
Stein