Could you add the ca-bundle path explicitly to the libcurl configuration:

--with-ca-bundle=$(WASM)/etc/ssl/cert.pem

Has https://webr.r-wasm.org/proxy-websockets/ been updated yet to this latest PR? We still need to set wss:// at runtime for this to work.

Sys.setenv(ALL_PROXY='socks5h://test:yolo@ws.opencpu.org:443')

install.packages('curl')
library(curl)

# Show that proxy works
curl_fetch_memory('http://hb.opencpu.org/get', handle = new_handle(verbose=TRUE))

# Run more complex examples
example(multi_run)
example(curl)

Perhaps we just need to rebuild libcurl and/or the curl R package with this new -s WEBSOCKET_URL=wss:// flag.

Has https://webr.r-wasm.org/proxy-websockets/ been updated yet to this latest PR?

Not yet, I trigger PR deployments manually. The wss:// line is not needed for my local build with the latest changes.

I'll add the ca-bundle path config to curl and deploy a new build once I'm back next week :)

Here is an example pushing this to download 200 files in parallel over HTTP2

This works on https://webr.r-wasm.org/proxy-websockets/

install.packages('curl')
Sys.setenv(ALL_PROXY='socks5h://test:yolo@ws.opencpu.org:443')
mirror <- 'https://cran.rstudio.com'
df <- read.dcf(curl::curl(sprintf('%s/src/contrib/PACKAGES', mirror)))
pkgs <- df[1:200,'Package']
urls <- sprintf('%s/web/packages/%s/DESCRIPTION', mirror, pkgs)
outdir <- file.path(tempdir(), 'descriptions')
files <- sprintf('%s/%s.txt', outdir, pkgs)
dir.create(outdir, showWarnings = FALSE)
results <- curl::multi_download(urls, files, progress = FALSE, multiplex = T, verbose=T)
all(results$status == 200)
list.files(outdir)

It seems the path to the CA bundle is different at build time than in the r-wasm runtime. I get an error in the WebR:

Error setting certificate file: /opt/webr/wasm/etc/ssl/cert.pem 

So I think we need to configure the runtime path location the CA bundle in curl:

--with-ca-bundle=/etc/ssl/cert.pem

Or alternatively the runtime needs a symlink /opt/webr/wasm -> /

OK, let’s try with --with-ca-bundle=/etc/ssl/cert.pem.

Thanks, all looks good now from my end. I think this is ready for public preview.