||9 years ago|
|.gitignore||9 years ago|
|LICENSE||9 years ago|
|README.md||9 years ago|
|make-root-ca-and-certificates.sh||9 years ago|
|package.json||9 years ago|
|request-without-warnings.js||9 years ago|
|serve.js||9 years ago|
|test.sh||9 years ago|
The end off all your self-signed certificate woes (in node.js at least)
This is an easy-as-git-clone example that will get you on your way without
SSL certificate problem: Invalid certificate chain headaches.
See the explanation for the many details.
Test for yourself
An example that works.
example ├── package.json ├── make-root-ca-and-certificates.sh ├── serve.js ├── request-without-warnings.js ├── server | ├── my-private-root-ca.crt.pem | ├── my-server.crt.pem | └── my-server.key.pem └── client └── my-private-root-ca.crt.pem
Get the repo
git clone email@example.com:coolaj86/nodejs-self-signed-certificate-example.git pushd nodejs-self-signed-certificate-example npm install
For the super impatient:
Create certificates for your FQDN
local.ldsconnect.org points to
localhost, so it's ideal for your first test.
bash make-root-ca-and-certificates.sh 'local.ldsconnect.org'
Run the server
node ./serve.js 8043 & # use `fg` and `ctrl+c` to kill
Test in a client
Visit in a web browser
Test (warning free) in node.js
node ./request-without-warnings.js 8043
Test (warning free) with cURL
curl -v https://local.ldsconnect.org \ --cacert client/my-private-root-ca.crt.pem
Now season to taste
You can poke around in the files for generating the certificates,
but all you really have to do is replace
with your very own domain name.
But where's the magic?
Who's the man behind the curtain you ask?
Well... I lied. This demo doesn't use self-signed certificates. It uses a self-signed Root CA and a signed certificate.
It turns out that self-signed certificates were designed to be used by the Root Certificate Authorities, not by web servers.
So instead of trying to work through eleventeen brazillion errors about self-signed certs, you can just create an authority and then add the authority to your chain (viola, now it's trusted).