Enable self-signed certificates or third-party CA's in IOWebSocketChannel

[DrStefanFriedrich]

Class IOWebSocketChannel has only a very simple constructor.

By browsing a little bit through the code I saw internally the HttpClient class is used.

Are there any plans to expose the SecurityContext by an optional constructor parameter or another convenience constructor in IOWebSocketChannel, thus making self-signed certificates available? I think the solution would be to pass such a SecurityContext down to the HttpClient.

Please take a look at the following link:

https://dart-lang.github.io/server/tls-ssl.html#trusting-additional-cas

[au-top]

I agree with that. It's important

[magnatronus]

Not sure if this helps but I have found a workaround (obviously use with extreme care)

in your app main.dart add the following

import 'dart.io';

class MyHttpOverrides extends HttpOverrides {
  @override
  HttpClient createHttpClient(SecurityContext context) {
    return super.createHttpClient(context)
      ..badCertificateCallback =
          (X509Certificate cert, String host, int port) => true;
  }
}

void main() {
  HttpOverrides.global = MyHttpOverrides();
  runApp(MyApp());
}

The HttpOverride.global allows the connection of a self signed wss connection, or at least it does for me running in a simulator on iOS connecting to a proxied NGINX server running on a RPi.

To turn off the override just comment out the HttpOverrides.global line

[au-top]

thank , I generally understand the risks he brings, but he solves my problems .
I think we should try to use native code to add a specific certificate in Android project to avoid this kind of error reporting, although I didn't try

[DrStefanFriedrich]

@magnatronus, thanks a lot for your comment. I have never heard about HttpOverrides before. This is indeed a global hook to provide your own implementation of an HttpClient.

[monkingame]

void main() {
HttpOverrides.global = MyHttpOverrides();
runApp(MyApp());
}

It works for me!
Thanks!

[tmtong]

What about for flutter web ?