1. 创建证书文件

bash-3.2$

bash-3.2$ mkdir ssl

bash-3.2$ cd ssl

bash-3.2$ openssl genrsa -out key.pem 1024

Generating RSA private key, 1024 bit long modulus

....................................++++++

..........++++++

e is 65537 (0x10001)

bash-3.2$ openssl req -new -key key.pem -out certrequest.csr

You are about to be asked to enter information that will be incorporated

into your certificate request.

What you are about to enter is what is called a Distinguished Name or a DN.

There are quite a few fields but you can leave some blank

For some fields there will be a default value,

If you enter '.', the field will be left blank.

-----

Country Name (2 letter code) [AU]:

State or Province Name (full name) [Some-State]:

Locality Name (eg, city) []:

Organization Name (eg, company) [Internet Widgits Pty Ltd]:

Organizational Unit Name (eg, section) []:

Common Name (e.g. server FQDN or YOUR name) []:

Email Address []:


Please enter the following 'extra' attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:

bash-3.2$

bash-3.2$

bash-3.2$ openssl x509 -req -in certrequest.csr -signkey key.pem -out cert.pem

Signature ok

subject=/C=AU/ST=Some-State/O=Internet Widgits Pty Ltd

Getting Private key

bash-3.2$

bash-3.2$


2. vim app.js

1 var express = require('express'), https = require('https'), fs = require('fs');

2

3 var privateKey = fs.readFileSync('./ssl/key.pem').toString();

4 var certificate = fs.readFileSync('./ssl/cert.pem').toString();

5 var ca = fs.readFileSync('./ssl/certrequest.csr').toString();

6

7 var options = {

8 key : privateKey,

9 cert : certificate,

10 ca : ca

11 }

12

13 var app = express();

14

15 //RESTful API

16 app.get("/testapi", function(req, res){

17 res.send('test api');

18 });

19

20 app.get("/", function(req, res){

21 res.send('');

22 });

23

24 https.createServer(options, app).listen(443, function() {

25 console.log('https server started successfully.');

26 });

27

28 app.listen(80);



3. node app


4.用浏览器打开：https://127.0.0.1/testapi