"use strict"; // npm install spdy@3.x //var Greenlock = require('greenlock-express') var Greenlock = require("../"); var greenlock = Greenlock.create({ // Let's Encrypt v2 is ACME draft 11 version: "draft-11", server: "https://acme-v02.api.letsencrypt.org/directory", // Note: If at first you don't succeed, stop and switch to staging // https://acme-staging-v02.api.letsencrypt.org/directory // You MUST change this to a valid email address email: "jon@example.com", // You MUST NOT build clients that accept the ToS without asking the user agreeTos: true, // You MUST change these to valid domains // NOTE: all domains will validated and listed on the certificate approvedDomains: ["example.com", "www.example.com"], // You MUST have access to write to directory where certs are saved // ex: /home/foouser/acme/etc configDir: "~/.config/acme/", // Get notified of important updates and help me make greenlock better communityMember: true //, debug: true }); //////////////////////// // http-01 Challenges // //////////////////////// // http-01 challenge happens over http/1.1, not http2 var redirectHttps = require("redirect-https")(); var acmeChallengeHandler = greenlock.middleware(function(req, res) { res.setHeader("Content-Type", "text/html; charset=utf-8"); res.end( "

Hello, ⚠️ Insecure World!

Visit Secure Site" + '' ); }); require("http") .createServer(acmeChallengeHandler) .listen(80, function() { console.log("Listening for ACME http-01 challenges on", this.address()); }); //////////////////////// // http2 via SPDY h2 // //////////////////////// // spdy is a drop-in replacement for the https API var spdyOptions = Object.assign({}, greenlock.tlsOptions); spdyOptions.spdy = { protocols: ["h2", "http/1.1"], plain: false }; var server = require("spdy").createServer( spdyOptions, require("express")().use("/", function(req, res) { res.setHeader("Content-Type", "text/html; charset=utf-8"); res.end("

Hello, 🔐 Secure World!

"); }) ); server.on("error", function(err) { console.error(err); }); server.on("listening", function() { console.log("Listening for SPDY/http2/https requests on", this.address()); }); server.listen(443);