feat(websocket): Allow wss connections on IP addresses

[oblique]

Description

Notes & open questions

It is completely valid to establish TLS connection with just an IP if:

1. You add your self-sign certificate via add_trust.
2. You create a valid certificate for an IP. For example 1.1.1.1 has a valid certificate.

Example with rustls:

use rustls::{ClientConfig, ClientConnection, RootCertStore, Stream};
use std::io::{Read, Write};
use std::net::TcpStream;
use std::sync::Arc;
use webpki_roots::TLS_SERVER_ROOTS;

fn main() {
    let provider = rustls::crypto::ring::default_provider();
    let cert_store = TLS_SERVER_ROOTS.iter().cloned().collect::<RootCertStore>();

    let client = ClientConfig::builder_with_provider(provider.into())
        .with_safe_default_protocol_versions()
        .unwrap()
        .with_root_certificates(cert_store)
        .with_no_client_auth();

    let server_name = "1.1.1.1".try_into().unwrap();
    let mut conn = ClientConnection::new(Arc::new(client), server_name).unwrap();
    let mut sock = TcpStream::connect("1.1.1.1:443").unwrap();

    let mut io = Stream::new(&mut conn, &mut sock);

    io.write_all(b"GET / HTTP/1.1\r\n\r\n").unwrap();

    let mut resp = Vec::new();
    io.read_to_end(&mut resp).unwrap();

    println!("{}", String::from_utf8(resp).unwrap());
}

Change checklist

• I have performed a self-review of my own code
• I have made corresponding changes to the documentation
• I have added tests that prove my fix is effective or that my feature works
• A changelog entry has been made in the appropriate crates

[mergify]

This pull request has merge conflicts. Could you please resolve them @oblique? 🙏

[jxs]

LGTM Yiannis