v7.10.0
aldinokemal/go-whatsapp-web-multidevicev7.10.0Nov 29, 2025by aldinokemal
AI Summary
A stability-focused release adding webhook TLS configuration options for Cloudflare tunnels and self-signed certificates, along with fixes for auto-reconnect issues.
Key Highlights
- New WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY environment variable
- Support for Cloudflare tunnels and self-signed certificates
- Fixed auto-reconnect mechanism to prevent null pointer errors
- Improved error handling and connection management
New Features
- Webhook TLS configuration options
- Auto-reconnect stability improvements
- Cloudflare tunnel compatibility
Full Release Notes
## What's New in v7.10.0
✨ **New Features & Enhancements**
- **Webhook TLS Configuration**: Added optional TLS certificate verification control for webhooks
- **Insecure Skip Verify Option**: New `WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY` environment variable and `--webhook-insecure-skip-verify` CLI flag
- **Cloudflare Tunnel Support**: Resolves TLS certificate verification errors when using Cloudflare tunnels
- **Self-Signed Certificate Support**: Enables webhooks to work with self-signed certificates in development/internal environments
- **Secure by Default**: Verification remains enabled by default, opt-in only for specific use cases
- **Comprehensive Documentation**: Added security warnings and usage guidelines in README and .env.example
🐛 **Bug Fixes & Improvements**
- **Auto-Reconnect Stability**: Fixed WhatsApp client auto-reconnect mechanism
- **Null Pointer Prevention**: Ensures WhatsApp client exists before attempting auto-reconnect
- **Root Cause Fix**: Addresses the underlying issue causing reconnection failures
- **Enhanced Stability**: Prevents crashes during automatic reconnection attempts
- **Better Error Handling**: Improved error detection and recovery in reconnection logic
## 🎯 **What This Means for You**
### For Cloudflare Tunnel Users
- **No More TLS Errors**: Webhook delivery now works seamlessly with Cloudflare tunnels
- **Simple Configuration**: Just set `WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true` in your environment
- **Maintained Security**: Cloudflare tunnels provide their own security layer
### For Self-Signed Certificate Users
- **Development Friendly**: Use webhooks with self-signed certificates in test environments
- **Internal Deployments**: Support for internal certificate authorities
- **Clear Warnings**: Security implications clearly documented
### For All Users
- **More Reliable Connections**: Auto-reconnect now handles edge cases properly
- **Fewer Crashes**: Null pointer errors in reconnection logic eliminated
- **Better Stability**: Enhanced connection management and error handling
## Important Notes
✅ **Webhook TLS Configuration**
- **Default Behavior**: TLS verification is ENABLED by default (secure)
- **Opt-In Only**: Must explicitly enable InsecureSkipVerify for specific use cases
- **For Development**: Set `WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true`
- **For Production**: Strongly recommended to use proper SSL certificates (e.g., Let's Encrypt)
- **Security Warning**: Disabling verification exposes webhooks to man-in-the-middle attacks
✅ **When to Use InsecureSkipVerify**
- Development/testing environments
- Cloudflare tunnels (which provide their own security)
- Internal networks with self-signed certificates
- **NOT recommended** for production with public webhooks
✅ **Breaking Changes**
- None - all changes are backward compatible
- Existing deployments continue to work without configuration changes
- Default behavior unchanged (TLS verification enabled)
🔧 **Recommended Actions**
- If using Cloudflare tunnels and experiencing TLS errors, enable InsecureSkipVerify
- For production deployments, use proper SSL certificates from trusted CAs
- Update your `.env` file based on the updated `.env.example`
- Review webhook configuration if you've had connection issues
## Configuration Examples
**Cloudflare Tunnel Setup (Environment Variables):**
\`\`\`bash
WHATSAPP_WEBHOOK=https://your-tunnel.trycloudflare.com/webhook
WHATSAPP_WEBHOOK_SECRET=super-secret-key
WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true
\`\`\`
**Self-Signed Certificate (CLI Flags):**
\`\`\`bash
./whatsapp rest --webhook="https://internal.example.com/webhook" --webhook-insecure-skip-verify=true
\`\`\`
**Production with Proper SSL (Recommended):**
\`\`\`bash
WHATSAPP_WEBHOOK=https://api.yourdomain.com/webhook
WHATSAPP_WEBHOOK_SECRET=super-secret-key
# WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=false (default - verification enabled)
\`\`\`
**Docker Compose:**
\`\`\`yaml
environment:
- WHATSAPP_WEBHOOK=https://your-webhook.com/handler
- WHATSAPP_WEBHOOK_INSECURE_SKIP_VERIFY=true # Only for Cloudflare/dev/self-signed
\`\`\`
## Summary
Version 7.10.0 introduces critical webhook TLS configuration options and auto-reconnect stability improvements. The new webhook TLS skip verification feature resolves certificate validation issues commonly encountered with Cloudflare tunnels and self-signed certificates, while maintaining secure defaults. The auto-reconnect fix prevents null pointer errors and enhances overall connection stability. This release focuses on improving webhook reliability and connection management while maintaining full backward compatibility.
## What's Changed
* Fix: ensure whatsapp client exists before auto reconnect—captures the root cause and the stabilization. by @donnimsipa in https://github.com/aldinokemal/go-whatsapp-web-multidevice/pull/462
* feat: add webhook TLS configuration option to support Cloudflare tunnels and self-signed certificates (#476)
* chore: bump app version to v7.10.0
## New Contributors
* @donnimsipa made their first contribution in https://github.com/aldinokemal/go-whatsapp-web-multidevice/pull/462
**Full Changelog**: https://github.com/aldinokemal/go-whatsapp-web-multidevice/compare/v7.9.0...v7.10.0