Trouble connecting to Pode WSS server using -SelfSigned option

[mtimperley]

Hi, I created a simple Pode WS server using the example code. This works great for a WS URL, but when I change that to WSS and use -SelfSigned option for Add-PodeEndpoint I get the following errors:

Pode Server side:

[Debug] HttpRequestException: Request is not for a WebSocket
   at Pode.PodeContext.SetContextType()
   at Pode.PodeContext.<Receive>d__74.MoveNext()

Client side:

Unable to connect to the remote server
No connection could be made because the target machine actively refused it 127.0.0.1:80

Sever Code is as follows:

Out-PodeHost "WSS PodeServer for wss://localhost:51443 (press Ctrl-C to terminate)"

Start-PodeServer {

    # log requests to the terminal
    New-PodeLoggingMethod -Terminal | Enable-PodeErrorLogging -Level Error, Debug, Verbose

    #Add-PodeEndpoint -Protocol Ws -Address localhost -Port 51499
    Add-PodeEndpoint -Protocol Wss -Address localhost -Port 51443 -SelfSigned

    # SIGNAL route, to return current date
    Add-PodeSignalRoute -Path '/' -ScriptBlock {

        #get data in the message field, to echo in our reply
        $msg = $SignalEvent.Data.Message

        #if @{ message = "[date]" }, reply with the date instead
        if ($msg -ieq '[date]') {
            $msg = [datetime]::Now.ToString()
        }

        Out-PodeHost "reply = $msg"

        Send-PodeSignal -Value @{ reply = $msg }
    }
}

My client is as follows:

#$uri = "ws://localhost:51499/" 
$uri = "wss://localhost:51443/" 

function Write-Exception
{
    param($ex)
    while ($ex) { Write-Host $ex.Message; $ex = $ex.InnerException; }
}

function Create-Websocket
{
    param($uri)
    Write-Host "Creating a websocket..."
    $webSocket = New-Object Net.WebSockets.ClientWebSocket
    $webSocket.Options.UseDefaultCredentials = $true

    $cts = New-Object Threading.CancellationTokenSource

    Write-Host "Connecting... $uri"
    $connectTask = $webSocket.ConnectAsync($uri, $cts.Token)

    do { Sleep(1) }
    until ($connectTask.IsCompleted)

    if ($connectTask.IsFaulted) { 
        Write-Exception($connectTask.Exception)
    }
    else {
        Write-Host "Connected!"
    }
    return $webSocket
}

$socket = Create-Websocket $uri

if ($socket.State -eq [System.Net.WebSockets.WebSocketState]::Closed) { 
    Write-Host "Websocket closed"
    exit 
}

$ct = New-Object Threading.CancellationToken($false)

#create a simple hello message
$json = @{ message = "Hello Server!" } | ConvertTo-Json
Write-Host "sending $json"
[ArraySegment[byte]]$segment = [Text.Encoding]::UTF8.GetBytes($json)
$socket.SendAsync($segment, [System.Net.WebSockets.WebSocketMessageType]::Text, $true, $ct).Wait()

#create a data request message
$json = @{ message = "[date]" } | ConvertTo-Json
Write-Host "sending $json"
[ArraySegment[byte]]$segment = [Text.Encoding]::UTF8.GetBytes($json)
$socket.SendAsync($segment, [System.Net.WebSockets.WebSocketMessageType]::Text, $true, $ct).Wait()

Write-Host "closing socket"
$closetask = $socket.CloseAsync([System.Net.WebSockets.WebSocketCloseStatus]::NormalClosure, "", $ct)
do { Sleep(1) }
until ($closetask.IsCompleted)
$socket.Dispose()

I'm new to Pode and secure websockets in PowerShell, so I'm not sure if I'm missing something in my client script or in the Pode Server side? Any help or advice would be appreciated.

[mtimperley]

I got the above client script to work for WSS by adding the following code:

add-type @"
    using System.Net;
    using System.Security.Cryptography.X509Certificates;
    public class TrustAllCertsPolicy : ICertificatePolicy {
        public bool CheckValidationResult(
            ServicePoint srvPoint, X509Certificate certificate,
            WebRequest request, int certificateProblem) {
            return true;
        }
    }
"@
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]'Tls11,Tls12'
[Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy

see https://stackoverflow.com/questions/11696944/powershell-v3-invoke-webrequest-https-error