The module you need to solve node's SSL woes when including a custom certificate.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
AJ ONeal 32de5c4178 rename latest cas in postinstall 10 years ago
.gitignore Initial commit 10 years ago
AUTHORS created module. yay. 10 years ago
LICENSE Initial commit 10 years ago
README.md Update README.md 10 years ago
ca-store-generator.js created module. yay. 10 years ago
package.json rename latest cas in postinstall 10 years ago
ssl-root-cas.js corrected name 10 years ago

README.md

SSL Root CAs

The module you need to solve node's SSL woes when including a custom certificate.

Let's say you're trying to connect to a site with a cheap-o SSL cert - such as RapidSSL certificate from name.com (the best place to get your domains, btw) - you'll probably get an error like UNABLE_TO_VERIFY_LEAF_SIGNATURE and after you google around and figure that out you'll be able to connect to that site just fine, but now when you try to connect to other sites you get CERT_UNTRUSTED or possibly other errors.

This module is the solution to your woes!

Usage

'use strict';

var https = require('https')
  , cas
  ;
  
cas = https.globalAgent.options.ca = https.globalAgent.options.ca || [];

cas = cas.concat(require('ssl-root-cas').getOnce());
cas.push(fs.readFileSync(path.join(__dirname, 'ssl', '01-cheap-ssl-intermediary-a.pem')));
cas.push(fs.readFileSync(path.join(__dirname, 'ssl', '02-cheap-ssl-intermediary-b.pem')));
cas.push(fs.readFileSync(path.join(__dirname, 'ssl', '03-cheap-ssl-site.pem')));

BAD IDEAS

Don't use dissolutions such as these. :-)

This will turn off SSL validation checking. This is not a good idea. Please do not do it. (really I'm only providing it as a reference for search engine seo so that people who are trying to figure out how to avoid doing that will end up here)

process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0"

The same dissolution from the terminal would be

export NODE_TLS_REJECT_UNAUTHORIZED="0"
node my-service.js