qml websocket (wss) self signed certificate

poucz

Hello,
I would like to test my APP which using websocket in qml .
For test I created self signed certificate and now I need to load this cert to qml.
How to make it easily? Some C++ wraper ? (all my code is write in pure qml).

Thank you

SGaist

Hi,

IIRC, you would need to use QSslConfiguration. That part should be done in your main.cpp.

poucz

Thank you for answer.

I tryed this

	QList<QSslCertificate> certs;
	QSslCertificate cert(readFile("/tmp/cer/cert.pem"));
	certs.append(cert);

	QSslConfiguration config;
	config.setCaCertificates(certs);
	config.setLocalCertificateChain(certs);

	QSslConfiguration::setDefaultConfiguration(config);

without success.
Keys are generetad by :

openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes

Server is python script, and it seems it working (testing with python client).

SGaist

@poucz said in qml websocket (wss) self signed certificate:

QSslCertificate cert(readFile("/tmp/cer/cert.pem"));

Are you sure readFile returns the correct content ?

poucz

Yes I'm sure, In debugger I can see all bytes and variable 'cert' and 'cert2' contains valid field : "notValidAfter" and "notValidBefore"

I don't know if I generate cert correctly.

But with python client it works.

Server is Python script:

ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLS_SERVER)
ssl_context.load_cert_chain("/tmp/cer/cert.pem", "/tmp/cer/key.pem")
start_server = websockets.serve(server_handler, port=6789, ssl=ssl_context)
asyncio.get_event_loop().run_until_complete(start_server)
asyncio.get_event_loop().run_forever()

and with python's client I can connect:

     ssl_context = ssl.SSLContext(ssl.PROTOCOL_TLSv1_2)
     ssl_context.load_verify_locations("/tmp/cer/cert.pem")
     async with websockets.connect(uri, ssl=ssl_context) as websocket:

Pablo J. Rogina

@poucz said in qml websocket (wss) self signed certificate:

I tryed this

What if you try the ICS approach?

This is, creating a QSslCertificate and then adding that certificate to all SSL connections with QSslSocket::addDefaultCaCertificate()

Remember that WebSocket QML Type internally uses a QWebSocket after all, and it in turn uses a QTcpSocket.