{"action":"created","issue":{"url":"https://api.github.com/repos/civetweb/civetweb/issues/226","labels_url":"https://api.github.com/repos/civetweb/civetweb/issues/226/labels{/name}","comments_url":"https://api.github.com/repos/civetweb/civetweb/issues/226/comments","events_url":"https://api.github.com/repos/civetweb/civetweb/issues/226/events","html_url":"https://github.com/civetweb/civetweb/issues/226","id":116926166,"number":226,"title":"wss not connecting?","user":{"login":"CrackerHax","id":6037535,"avatar_url":"https://avatars.githubusercontent.com/u/6037535?v=3","gravatar_id":"","url":"https://api.github.com/users/CrackerHax","html_url":"https://github.com/CrackerHax","followers_url":"https://api.github.com/users/CrackerHax/followers","following_url":"https://api.github.com/users/CrackerHax/following{/other_user}","gists_url":"https://api.github.com/users/CrackerHax/gists{/gist_id}","starred_url":"https://api.github.com/users/CrackerHax/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CrackerHax/subscriptions","organizations_url":"https://api.github.com/users/CrackerHax/orgs","repos_url":"https://api.github.com/users/CrackerHax/repos","events_url":"https://api.github.com/users/CrackerHax/events{/privacy}","received_events_url":"https://api.github.com/users/CrackerHax/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/civetweb/civetweb/labels/Status:%20analysis","name":"Status: analysis","color":"fef2c0"},{"url":"https://api.github.com/repos/civetweb/civetweb/labels/Status:%20waiting%20for%20info%20from%20submitter","name":"Status: waiting for info from submitter","color":"5319e7"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":23,"created_at":"2015-11-14T13:59:18Z","updated_at":"2016-01-07T02:47:29Z","closed_at":null,"body":"I am using websocket on the same ports as a http server. I can connect fine via ws, http and https, but when I try to connect wss nothing happens. I get a error code 1000 (normal disconnect). Is this broken or s there something special I have to do beyond ws/http/http to get wss to work?"},"comment":{"url":"https://api.github.com/repos/civetweb/civetweb/issues/comments/169532232","html_url":"https://github.com/civetweb/civetweb/issues/226#issuecomment-169532232","issue_url":"https://api.github.com/repos/civetweb/civetweb/issues/226","id":169532232,"user":{"login":"CrackerHax","id":6037535,"avatar_url":"https://avatars.githubusercontent.com/u/6037535?v=3","gravatar_id":"","url":"https://api.github.com/users/CrackerHax","html_url":"https://github.com/CrackerHax","followers_url":"https://api.github.com/users/CrackerHax/followers","following_url":"https://api.github.com/users/CrackerHax/following{/other_user}","gists_url":"https://api.github.com/users/CrackerHax/gists{/gist_id}","starred_url":"https://api.github.com/users/CrackerHax/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/CrackerHax/subscriptions","organizations_url":"https://api.github.com/users/CrackerHax/orgs","repos_url":"https://api.github.com/users/CrackerHax/repos","events_url":"https://api.github.com/users/CrackerHax/events{/privacy}","received_events_url":"https://api.github.com/users/CrackerHax/received_events","type":"User","site_admin":false},"created_at":"2016-01-07T02:47:29Z","updated_at":"2016-01-07T02:47:29Z","body":"According to the documentation, as of QT5.3:\r\n\r\nQWebSocket currently does not support extensions and subprotocols.\r\n\r\nQWebSocket only supports version 13 of the WebSocket protocol, as outlined in RFC 6455.\r\n\r\nNote: Some proxies do not understand certain HTTP headers used during a WebSocket handshake. In that case, non-secure WebSocket connections fail. The best way to mitigate against this problem is to use WebSocket over a secure connection.\r\n\r\nWarning: To generate masks, this implementation of WebSockets uses the cryptographically insecure qrand() function. For more information about the importance of good masking, see http://w2spconf.com/2011/papers/websocket.pdf. The best measure against attacks mentioned in the document above, is to use QWebSocket over a secure connection (wss://). In general, always be careful to not have 3rd party script access to a QWebSocket in your application.\r\n\r\n\r\n\r\n"}}