I use simple example from these link:
a link[a How to create an HTTPS server in Node.js?]
a link[a How to create an https server? docs.nodejitsu.com]
but I get error like
curl: (35) Unknown SSL protocol error in connection to localhost:-9838
why?
Add a comment
|
2 Answers
I use the wrong way to create certificate.
This one is wrong:
openssl genrsa -out key.pem
openssl req -new -key key.pem -out csr.pem
openssl x509 -req -days 9999 -in csr.pem -signkey key.pem -out cert.pem
This is the way to create certificate that could use:
openssl genrsa -out client-key.pem 2048
openssl req -new -key client-key.pem -out client.csr
openssl x509 -req -in client.csr -signkey client-key.pem -out client-cert.pem
7 Comments
Prabakaran Raja
Superb! I was searching for this. But why that is the wrong way? It would be great if you can explain
Yan Li
I am a rookie so I do not know the answer :)
Xavier Holt
The important difference for me was the 2048 on the
genrsa command - without it, the default key was a weak 512 bits. The only reference for that error code that I can find is Apple source code where it's a errSSLPeerInternalError (but only one away from a errSSLPeerInsufficientSecurity).
Vish
@YanLi you rock! I've spent one whole night working with the wrong way and troubleshooting my mac, chrome and god know all sorts of issues. Tried your way and it works! Thank you!
gabssnake
The
-days 9999 parameter works with the second method too |
This is a faster way to do the same:
$ openssl req -new -newkey rsa:4096 -days 9999 -nodes -x509 \
-subj "/C=US/O=Example Inc./CN=example.com" \
-keyout key.pem -out cert.pem
