howto create nodejs ssl server?

Question

nodejs version : 0.8.6
i have created a ssl csr file using using openssl with the following command: openssl req -nodes -newkey rsa:2048 -keyout myserver.key -out myserver.csr

csr content was sent to my SSL provider , certificate was sent back.

now i wanted to create a SSL secure server :

var fs = require("fs");
var https = require('https');
var credentials = {
            key: fs.readFileSync(options.base_project_folder + 'privatekey.pem'),
            cert: fs.readFileSync(options.base_project_folder + 'certificate.pem')
};
var server = https.createServer(credentials, app);
server.listen(port, address, function() {
    var addr = this.address();
    console.log('listening on %s:%d', addr.address, addr.port);
});

server is running , but i get : "SSL connection error"

trying to check the problem i did : openssl s_client -connect my_dns:443 // my_dns points to my nodejs server ofcourse

RESULT: CONNECTED(00000003) 139813382997664:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177:
no peer certificate available
No client certificate CA names sent
SSL handshake has read 0 bytes and written 226 bytes
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE

can anyone help me ? i lost my way in the SSL darkness :(

The server code you post is incomplete. Either you haven't posted the rest (if so, please post it as well), or you're just missing essential parts of creating an actual HTTPS server in Node. — robertklep
– robertklep, Commented Apr 7, 2013 at 17:14

talentedmrjones · Accepted Answer · 2013-04-07 17:54:26Z

8

Try adding the CA like so:

var credentials = {
  key: fs.readFileSync(options.base_project_folder + 'privatekey.pem'),
  cert: fs.readFileSync(options.base_project_folder + 'certificate.pem'),
  ca: fs.readFileSync(/path/to/CA/cert)
};

The docs say that the options argument is similar to tls.createServer

answered Apr 7, 2013 at 17:54

talentedmrjones

8,2311 gold badge28 silver badges27 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

IdanHen Over a year ago

what is the ca file ? what is the content of it ? i tried to find it out :(

IdanHen Over a year ago

problem was found , my files got a problem, and i also need the ca :)

Lawrence Over a year ago

benjiegillam.com/2012/06/node-dot-js-ssl-certificate-chain, which I found via a comment on a link in the other answer, has an important point. In newer versions of Node, the "ca" property will not take a bundled file; if you have more than one intermediate certificate, you must load them individually into an array and set the "ca" property to that array.

mr.freeze · Accepted Answer · 2013-04-07 17:26:50Z

1

I believe you need to specify a CA certificate for the signer as well. Since this is not a self signed certificate you should have received a bundle from wherever you got the cert.

A couple links that should help: http://qugstart.com/blog/node-js/install-comodo-positivessl-certificate-with-node-js/ http://www.gettingcirrius.com/2012/06/securing-nodejs-and-express-with-ssl.html

edited Apr 7, 2013 at 17:26

answered Apr 7, 2013 at 17:18

mr.freeze

14.1k5 gold badges39 silver badges46 bronze badges

1 Comment

talentedmrjones Over a year ago

+1 I agree the problem could very well be missing the CA cert.

user5216459 · Accepted Answer · 2019-04-21 07:48:21Z

0

How to do this through cloudflare?

Create your websocket.js with the obvious ssl credentials

var https = require('https');
var credentials = {
            key: fs.readFileSync('/location/to/privatekey.pem'),
            cert: fs.readFileSync(/location/to/certificate.pem')
};
var server = https.createServer(credentials, app);

1) Sign up to cloud flare

2) Point your domain dns server to cloudflare ns servers

3) Generate an origin certificate and save both the private key and certificate to your server privatekey.pem & certificate.pem

4) Make sure you're using an SSL port in your websocket and that your router firewall allows this port.

answered Apr 21, 2019 at 7:48

user5216459

Collectives™ on Stack Overflow

howto create nodejs ssl server?

3 Answers 3

3 Comments

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

3 Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related