Add WebSocket authentication options. (#1729)

* Add WebSocket authentication options. Signed-off-by: bgravenorst <byron.gravenorst@consensys.net> * Add additional content. Signed-off-by: bgravenorst <byron.gravenorst@consensys.net> * Apply suggestions from code review Peer review feedback. Co-authored-by: Alexandra Carrillo <12214231+alexandratran@users.noreply.github.com> Signed-off-by: Byron Gravenorst <50852695+bgravenorst@users.noreply.github.com> --------- Signed-off-by: bgravenorst <byron.gravenorst@consensys.net> Signed-off-by: Byron Gravenorst <50852695+bgravenorst@users.noreply.github.com> Co-authored-by: Alexandra Carrillo <12214231+alexandratran@users.noreply.github.com>
hyperledger · Nov 21, 2024 · 9db117d · 9db117d
1 parent 1b667f2
commit 9db117d
Show file tree

Hide file tree

Showing 2 changed files with 501 additions and 5 deletions.
diff --git a/docs/private-networks/how-to/configure/tls/client-and-server.md b/docs/private-networks/how-to/configure/tls/client-and-server.md
@@ -9,6 +9,18 @@ tags:
 
 Besu supports TLS for client and server communication. For example, you can configure TLS for communication between [Web3Signer](https://docs.web3signer.consensys.net/concepts/tls) and Besu, and Besu and [Tessera](https://docs.tessera.consensys.net/HowTo/Configure/TLS/).
 
+The following instructions allow you to configure client and server authentication to secure HTTP JSON-RPC
+calls.
+
+:::info Secure Websocket JSON-RPC calls
+
+You can configure SSL/TLS authentication for WebSocket calls by enabling
+[`--rpc-ws-ssl-enabled`](../../../../public-networks/reference/cli/options.md#rpc-ws-ssl-enabled) for
+server authentication, and
+[`--rpc-ws-ssl-client-auth-enabled`](../../../../public-networks/reference/cli/options.md#rpc-ws-ssl-client-auth-enabled) for client authentication.
+
+:::
+
 The following diagram displays an example client and server TLS configuration.
 
 ![Besu client and server TLS](../../../../assets/images/Besu_TLS.png)