socket https
来源:互联网 发布:js 简单加密算法 编辑:程序博客网 时间:2024/05/29 18:02
用Node.js创建自签名的HTTPS服务器
- 创建自己的CA机构
- 创建服务器端证书
- 创建客户端证书
- 将证书打包
创建自己的CA机构
- 为CA生成私钥
openssl genrsa -out ca-key.pem -des 1024
- 通过CA私钥生成CSR
openssl req -new -key ca-key.pem -out ca-csr.pem
- 通过CSR文件和私钥生成CA证书
openssl x509 -req -in ca-csr.pem -signkey ca-key.pem -out ca-cert.pem
可能会遇到的问题
你需要root或者admin的权限Unable to load config info from /user/local/ssl/openssl.cnf对于这个问题,你可以从网上下载一份正确的openssl.cnf文件,然后set OPENSSL_CONF=openssl.cnf文件的本地路径
创建服务器端证书
- 为服务器生成私钥
openssl genrsa -out server-key.pem 1024
- 利用服务器私钥文件服务器生成CSR
openssl req -new -key server-key.pem -config openssl.cnf -out server-csr.pem
这一步非常关键,你需要指定一份openssl.cnf文件。可以用这个
[req] distinguished_name = req_distinguished_name req_extensions = v3_req [req_distinguished_name] countryName = Country Name (2 letter code) countryName_default = CN stateOrProvinceName = State or Province Name (full name) stateOrProvinceName_default = BeiJing localityName = Locality Name (eg, city) localityName_default = YaYunCun organizationalUnitName = Organizational Unit Name (eg, section) organizationalUnitName_default = Domain Control Validated commonName = Internet Widgits Ltd commonName_max = 64 [ v3_req ] # Extensions to add to a certificate request basicConstraints = CA:FALSE keyUsage = nonRepudiation, digitalSignature, keyEncipherment subjectAltName = @alt_names [alt_names] #注意这个IP.1的设置,IP地址需要和你的服务器的监听地址一样 IP.1 = 127.0.0.1
- 通过服务器私钥文件和CSR文件生成服务器证书
openssl x509 -req -CA ca-cert.pem -CAkey ca-key.pem -CAcreateserial -in server-csr.pem -out server-cert.pem -extensions v3_req -extfile openssl.cnf
创建客户端证书
- 生成客户端私钥
openssl genrsa -out client-key.pem
- 利用私钥生成CSR
openssl req -new -key client-key.pem -out client-csr.pem
- 生成客户端证书
openssl x509 -req -CA ca-cert.pem -CAkey ca-key.pem -CAcreateserial -in client-csr.pem -out client-cert.pem
HTTPS 服务器代码
var https = require('https');var fs = require('fs');var options = {key: fs.readFileSync('./keys/server-key.pem'),ca: [fs.readFileSync('./keys/ca-cert.pem')],cert: fs.readFileSync('./keys/server-cert.pem')};https.createServer(options,function(req,res){res.writeHead(200);res.end('hello world\n');}).listen(3000,'127.0.0.1');
HTTPS 客户端代码
var https = require('https');var fs = require('fs');var options = {hostname:'127.0.0.1',port:3000,path:'/',method:'GET',key:fs.readFileSync('./keys/client-key.pem'),cert:fs.readFileSync('./keys/client-cert.pem'),ca: [fs.readFileSync('./keys/ca-cert.pem')],agent:false};options.agent = new https.Agent(options);var req = https.request(options,function(res){console.log("statusCode: ", res.statusCode); console.log("headers: ", res.headers);res.setEncoding('utf-8');res.on('data',function(d){console.log(d);})});req.end();req.on('error',function(e){console.log(e);})
将证书打包
- 打包服务器端证书
openssl pkcs12 -export -in server-cert.pem -inkey server-key.pem -certfile ca-cert.pem -out server.pfx
- 打包客户端证书
openssl pkcs12 -export -in client-cert.pem -inkey client-key.pem -certfile ca-cert.pem -out client.pfx
服务器端代码
var https = require('https');var fs = require('fs');var options = {pfx:fs.readFileSync('./keys/server.pfx'),passphrase:'your password'};https.createServer(options,function(req,res){res.writeHead(200);res.end('hello world\n');}).listen(3000,'127.0.0.1');
客户端代码
var https = require('https');var fs = require('fs');var options = {hostname:'127.0.0.1',port:3000,path:'/',method:'GET',pfx:fs.readFileSync('./keys/server.pfx'),passphrase:'your password',agent:false};options.agent = new https.Agent(options);var req = https.request(options,function(res){console.log("statusCode: ", res.statusCode); console.log("headers: ", res.headers);res.setEncoding('utf-8');res.on('data',function(d){console.log(d);})});req.end();req.on('error',function(e){console.log(e);})
- socket https
- Socket & http & https整理
- socket访问https解决办法
- 【socket编程】使用socket访问https客户端
- SOCKET 模拟 HTTPS客服端
- TCP、UDP、HTTP、SOCKET、HTTPS
- HTTPS的Socket实现代码
- HTTPS的Socket实现代码
- HTTP、TCP、UDP,Socket,HTTPS
- 通过Socket进行HttP/HTTPS网页操作
- 通过Socket进行Http/Https 网页操作
- TCP/IP、Http/Https、Socket理解学习
- 初步认识 TCP IP HTTP HTTPS SOCKET
- tcp ip http socket https 基本理解
- Socket http和https的使用区别
- Andrid中 Https 与Socket的异同
- TCP/IP、Http、Https、Socket的简介
- 自己动手利用Socket 实现HTTP与HTTPS
- MYSQL之数据类型
- NET使用ABP框架搭建博客项目(一)
- React Native学习第二天
- 最有价值的社交方式
- UITextView禁用复制粘贴放大
- socket https
- apt-get 依赖版本过高(Depends: g++-4.6(>= 4.6.3-1)but it is not going)
- android i/o流
- ValidatorCalloutExtender
- 关于Retrofit2.0源码的学习和理解
- apt-get install安装软件问题(安装包的依赖库版本过高问题)[原创]
- Matlab读取、转换遥感影像到普通影像
- LinuxShell宝典 --- sed&awk
- NSDate 获取当前日期之后的N个工作日