v7.10.0

aldinokemal/go-whatsapp-web-multidevicev7.10.0Nov 29, 2025by aldinokemal

AI Summary

A stability-focused release adding webhook TLS configuration options for Cloudflare tunnels and self-signed certificates, along with fixes for auto-reconnect issues.

Key Highlights

  • New WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY environment variable
  • Support for Cloudflare tunnels and self-signed certificates
  • Fixed auto-reconnect mechanism to prevent null pointer errors
  • Improved error handling and connection management

New Features

  • Webhook TLS configuration options
  • Auto-reconnect stability improvements
  • Cloudflare tunnel compatibility

Full Release Notes

## What's New in v7.10.0

✨ **New Features & Enhancements**
  - **Webhook TLS Configuration**: Added optional TLS certificate verification control for webhooks
    - **Insecure Skip Verify Option**: New `WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY` environment variable and `--webhook-insecure-skip-verify` CLI flag
    - **Cloudflare Tunnel Support**: Resolves TLS certificate verification errors when using Cloudflare tunnels
    - **Self-Signed Certificate Support**: Enables webhooks to work with self-signed certificates in development/internal environments
    - **Secure by Default**: Verification remains enabled by default, opt-in only for specific use cases
    - **Comprehensive Documentation**: Added security warnings and usage guidelines in README and .env.example

🐛 **Bug Fixes & Improvements**
  - **Auto-Reconnect Stability**: Fixed WhatsApp client auto-reconnect mechanism
    - **Null Pointer Prevention**: Ensures WhatsApp client exists before attempting auto-reconnect
    - **Root Cause Fix**: Addresses the underlying issue causing reconnection failures
    - **Enhanced Stability**: Prevents crashes during automatic reconnection attempts
    - **Better Error Handling**: Improved error detection and recovery in reconnection logic

## 🎯 **What This Means for You**

### For Cloudflare Tunnel Users
- **No More TLS Errors**: Webhook delivery now works seamlessly with Cloudflare tunnels
- **Simple Configuration**: Just set `WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true` in your environment
- **Maintained Security**: Cloudflare tunnels provide their own security layer

### For Self-Signed Certificate Users
- **Development Friendly**: Use webhooks with self-signed certificates in test environments
- **Internal Deployments**: Support for internal certificate authorities
- **Clear Warnings**: Security implications clearly documented

### For All Users
- **More Reliable Connections**: Auto-reconnect now handles edge cases properly
- **Fewer Crashes**: Null pointer errors in reconnection logic eliminated
- **Better Stability**: Enhanced connection management and error handling

## Important Notes

✅ **Webhook TLS Configuration**
- **Default Behavior**: TLS verification is ENABLED by default (secure)
- **Opt-In Only**: Must explicitly enable InsecureSkipVerify for specific use cases
- **For Development**: Set `WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true`
- **For Production**: Strongly recommended to use proper SSL certificates (e.g., Let's Encrypt)
- **Security Warning**: Disabling verification exposes webhooks to man-in-the-middle attacks

✅ **When to Use InsecureSkipVerify**
- Development/testing environments
- Cloudflare tunnels (which provide their own security)
- Internal networks with self-signed certificates
- **NOT recommended** for production with public webhooks

✅ **Breaking Changes**
- None - all changes are backward compatible
- Existing deployments continue to work without configuration changes
- Default behavior unchanged (TLS verification enabled)

🔧 **Recommended Actions**
- If using Cloudflare tunnels and experiencing TLS errors, enable InsecureSkipVerify
- For production deployments, use proper SSL certificates from trusted CAs
- Update your `.env` file based on the updated `.env.example`
- Review webhook configuration if you've had connection issues

## Configuration Examples

**Cloudflare Tunnel Setup (Environment Variables):**
\`\`\`bash
WHATSAPP_WEBHOOK=https://your-tunnel.trycloudflare.com/webhook
WHATSAPP_WEBHOOK_SECRET=super-secret-key
WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true
\`\`\`

**Self-Signed Certificate (CLI Flags):**
\`\`\`bash
./whatsapp rest --webhook="https://internal.example.com/webhook" --webhook-insecure-skip-verify=true
\`\`\`

**Production with Proper SSL (Recommended):**
\`\`\`bash
WHATSAPP_WEBHOOK=https://api.yourdomain.com/webhook
WHATSAPP_WEBHOOK_SECRET=super-secret-key
# WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=false (default - verification enabled)
\`\`\`

**Docker Compose:**
\`\`\`yaml
environment:
  - WHATSAPP_WEBHOOK=https://your-webhook.com/handler
  - WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true  # Only for Cloudflare/dev/self-signed
\`\`\`

## Summary

Version 7.10.0 introduces critical webhook TLS configuration options and auto-reconnect stability improvements. The new webhook TLS skip verification feature resolves certificate validation issues commonly encountered with Cloudflare tunnels and self-signed certificates, while maintaining secure defaults. The auto-reconnect fix prevents null pointer errors and enhances overall connection stability. This release focuses on improving webhook reliability and connection management while maintaining full backward compatibility.

## What's Changed
* Fix: ensure whatsapp client exists before auto reconnect—captures the root cause and the stabilization. by @donnimsipa in https://github.com/aldinokemal/go-whatsapp-web-multidevice/pull/462
* feat: add webhook TLS configuration option to support Cloudflare tunnels and self-signed certificates (#476)
* chore: bump app version to v7.10.0

## New Contributors
* @donnimsipa made their first contribution in https://github.com/aldinokemal/go-whatsapp-web-multidevice/pull/462

**Full Changelog**: https://github.com/aldinokemal/go-whatsapp-web-multidevice/compare/v7.9.0...v7.10.0