How to fix Node.js HTTPS Server "SSL Error"?

Question

I'm trying to use express in conjunction with a node.js https server, but I'm getting a warning when I connect.

The site's security certificate is not trusted!

My code is:

var WebSocketServer = require('ws').Server
    , https = require('https')
    , fs = require('fs')
    , express = require('express')
    , app = express();

app.use(express.static(__dirname + '/public'));

var options = {
    rejectUnauthorized: false,
    requestCert: true,
    agent: false,
    key: fs.readFileSync('private/key.pem'),
    cert: fs.readFileSync('private/cert.pem')
};

var server = https.createServer(options, app);
server.listen(8888);

var MainServer = new WebSocketServer({server: server});

How do I fix this warning (and effectively the Identity not verified problem)?

Thanks!

saurshaz · Accepted Answer · 2014-06-13 15:17:24Z

4

That's a warning your browser gives. When you take the solution live, buy a certificate and associate with your domain(be exact - wildcard or root certificate) and the warning will go away, and a beatiful lock will come to show the world how safe your site is. :-)

answered Jun 13, 2014 at 15:17

saurshaz

5095 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

jww Over a year ago

There's no need to buy a certificate. Startcom gives you a server certificate for free. They are trusted by most (all?) desktop and mobile browsers.

Michael · Accepted Answer · 2014-06-13 18:08:44Z

1

You need to purchase a SSL certificate from a certificate authority. A google search will reveal many venders with prices ranging significantly. If you are simply developing and it is not a production website you can find free certs or very cheap certs. The reason so many certs are expensive ( > 200 USD) is that the venders offer an insurance policy which guarantees the security of the certificate. Although if your cert is compromised and you request an insurance claim from the company, proving that the cert itself was due to fault is incredibly difficult and highly unlikely.

answered Jun 13, 2014 at 18:08

Michael

6,9195 gold badges43 silver badges61 bronze badges

1 Comment

jww Over a year ago

Startcom gives you a server certificate for free. They are trusted by most (all?) desktop and mobile browsers. Check out what Peter Gutmann has to say about those hundred or thousand dollar certificates: PKI Me Harder.

Collectives™ on Stack Overflow

How to fix Node.js HTTPS Server "SSL Error"?

2 Answers 2

1 Comment

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related