1.生成證書文件
//生成私鑰key文件:
openssl genrsa 1024 > /文件路徑/private.pem
//通過私鑰文件生成CSR證書簽名：
openssl req -new -key /文件路徑/private.pem -out /文件路徑/csr.pem
//通過私鑰文件和CSR證書簽名生成證書文件：
openssl x509 -req -days 365 -in /文件路徑/csr.pem -signkey /文件路徑/private.pem -out /文件路徑/file.crt
2.導入fs文件操作模塊
npm install fs --save
3.修改啟動文件./bin/www
#!/usr/bin/env node
/**
* Module dependencies.
*/
var app = require('../app');
var debug = require('debug')('chat-s:server');
var http = require('http');
var https = require('https');
var fs = require('fs');
/**
* 設置https證書和私鑰key
*/
var options = {
key: fs.readFileSync('/文件路徑/private.pem'),
cert: fs.readFileSync('/文件路徑/file.crt')
};
/**
* Get port from environment and store in Express.
*/
var port = normalizePort(process.env.PORT || '8080');
app.set('port', port);
/**
* Create HTTP server.
*/
//注釋http服務的創(chuàng)建结蟋，修改為https服務
// var server = http.createServer(app);
var server = https.createServer(options,app);
/**
* Listen on provided port, on all network interfaces.
*/
server.listen(port);
server.on('error', onError);
server.on('listening', onListening);
/**
* Normalize a port into a number, string, or false.
*/
function normalizePort(val) {
var port = parseInt(val, 10);
if (isNaN(port)) {
// named pipe
return val;
}
if (port >= 0) {
// port number
return port;
}
return false;
}
/**
* Event listener for HTTP server "error" event.
*/
function onError(error) {
if (error.syscall !== 'listen') {
throw error;
}
var bind = typeof port === 'string'
? 'Pipe ' + port
: 'Port ' + port;
// handle specific listen errors with friendly messages
switch (error.code) {
case 'EACCES':
console.error(bind + ' requires elevated privileges');
process.exit(1);
break;
case 'EADDRINUSE':
console.error(bind + ' is already in use');
process.exit(1);
break;
default:
throw error;
}
}
/**
* Event listener for HTTP server "listening" event.
*/
function onListening() {
var addr = server.address();
var bind = typeof addr === 'string'
? 'pipe ' + addr
: 'port ' + addr.port;
debug('Listening on ' + bind);
}
4.node.js服務啟動
npm start
結果
image.png
因為是自己生成的證書，未經過安全驗證迫摔，正式環(huán)境需要去申請
