https 需要證書，這裏用openssl生成證書文件
檢測openssl是否安裝
$ openssl version -a
生成證書
1. 生成私鑰，並指定名稱和長度
$ openssl genrsa -out private_key.pem 1024
2. 使用已有的私鑰生成證書請求
$ openssl req -new -out ca-req.csr -key private_key.pem
3. 請求證書，輸入文件爲請求的文件，-signkey 指定生成證書的私鑰
$ openssl x509 -req -in ca-req.csr -out ca-cert.pem -signkey private_key.pem -days 3650
Node中使用
var https = require('https');
var options = {
key: fs.readFileSync('./keys/private_key.pem'), //私鑰文件路徑
cert: fs.readFileSync('./keys/ca-cert.pem') //證書文件路徑
};
https.createServer(options).listen(8080, () => {
console.log(`server running success at 8080`)
});
異常處理
- Unable to load config info from c:/openssl/ssl/openssl.cnf
用下面內容創建文件：c:/openssl/ssl/openssl.cnf
####################################################################
# Sample OpenSSL configuration file #
####################################################################
RANDFILE = C:\\Progra~1\\OpenSSL\\.rnd
[ ca ]
default_ca = CA_default # The default ca section
[ CA_default ]
dir = C:\\CA
certs = $dir\\certs # Where the issued certs are kept
crl_dir = $dir\\crl # Where the issued crl are kept
database = $dir\\index.txt # database index file.
new_certs_dir = $dir\\newcerts # default place for new certs.
certificate = $dir\\CAcert.pem # The CA certificate
serial = $dir\\serial # The current serial number
crl = $dir\\crl.pem # The current CRL
private_key = $dir\\private\\CAkey.pem # The private key
RANDFILE = $dir\\private\\.rand # private random number file
x509_extensions = usr_cert # The extentions to add to the cert
default_days = 365 # how long to certify for
default_crl_days = 30 # how long before next CRL
default_md = md5 # which md to use.
preserve = no # keep passed DN ordering
####################################################################
[ policy_anything ]
countryName = optional
stateOrProvinceName = optional
localityName = optional
organizationName = optional
organizationalUnitName = optional
commonName = supplied
emailAddress = optional
####################################################################
[ req ]
default_bits = 1024
default_keyfile = privkey.pem
distinguished_name = req_distinguished_name
attributes = req_attributes
x509_extensions = v3_ca # The extentions to add to the self signed cert
string_mask = nombstr
[ req_distinguished_name ]
countryName = Country Name (2 letter code)
countryName_default = AU
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = Some-State
localityName = Locality Name (eg, city)
0.organizationName = Organization Name (eg, company)
0.organizationName_default = Internet Widgits Pty Ltd
organizationalUnitName = Organizational Unit Name (eg, section)
#organizationalUnitName_default =
commonName = Common Name (eg, YOUR name)
commonName_max = 64
emailAddress = Email Address
emailAddress_max = 40
[ req_attributes ]
challengePassword = A challenge password
challengePassword_min = 4
challengePassword_max = 20
unstructuredName = An optional company name
[ usr_cert ]
basicConstraints = CA:FALSE
nsComment = "OpenSSL Generated Certificate"
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid,issuer:always
[ v3_req ]
basicConstraints = CA:FALSE
keyUsage = nonRepudiation, digitalSignature, keyEncipherment
[ v3_ca ]
subjectKeyIdentifier = hash
authorityKeyIdentifier = keyid:always,issuer:always
basicConstraints = CA:true
[ crl_ext ]
authorityKeyIdentifier = keyid:always,issuer:always