IXWebSocket Files

Philippe V le Long — named after the king of France featured in Maurice Druon's Les Rois maudits. This character has not been used for an earlier IXWebSocket release.

New features

• Native macOS TLS using Network.framework for HTTP and WebSocket clients and servers, including TLS 1.3, mutual TLS, and Apple certificate trust evaluation, without linking OpenSSL. Opt in with USE_NETWORK_FRAMEWORK=ON or make -f makefile.dev ws_network_framework. Requires macOS 10.15+. (#615)
• Server log callbacks expose errors occurring before a WebSocket connection is established. (#595)
• Close-on-exec support for listening and accepted sockets. (#604)
• Per-message deflate offers can omit the client/server window-bit parameters. (#599)

Fixes

• Prevent path traversal in the HTTP server's default file handler. (#608)
• Fix a shutdown race that could trigger an automatic reconnect and cause WebSocket::stop() to block indefinitely. (#609)
• Fix mbedTLS TLS 1.3 reads and Windows errno signaling. (#594)
• Release PSA crypto state during network-system teardown rather than per socket. (#613)
• Replace ssize_t with std::ptrdiff_t to avoid MSVC typedef clashes. (#597)
• Correct shared-library soversion metadata and build warnings. (#607, [#572])
• Align the runtime version header with the CMake project version.

Build and development

• Remove CMake FetchContent downloads; tools and tests use vendored dependencies. (#605)
• Use the preinstalled MinGW and Ninja toolchain in Windows CI. (#606)

The new native TLS backend remains opt-in. Secure Transport remains the default Apple backend. Custom cipher strings and adoption of existing BSD descriptors are not supported by the Network.framework backend; iOS/tvOS/watchOS builds are not enabled yet.

Full changelog: https://github.com/machinezone/IXWebSocket/compare/v12.0.1...v12.1.0