Node.js server.setSecureContext() 方法
server.setSecureContext()是 tls 模块中 Socket 类的内置应用程序编程接口,用于替换现有服务器的安全上下文。
句法:
server.setSecureContext(options)
参数:此方法从 tls.createSecureContext() 选项参数中获取任何可能的属性。
返回值:此方法不返回任何内容。
如何生成私钥和公共证书?
- 私钥:打开记事本并复制粘贴以下密钥:
-----BEGIN RSA PRIVATE KEY----- MIICXQIBAAKBgQC38R9wXcUbhOd44FavgmE5R3K4JeYOHLnI7dUq1B8/Gv7l3SOg JKef/m9gM1KvUx951mapXGtcWgwB08J3vUE2YOZ4tWJArrVZES0BI/RmFAyhQFP5 HcWl3LSM9LRihP98F33oIkKaCxA5LxOrkgpV4HrUzIKTABDYah7RPex1WQIDAQAB AoGBAIXR71xxa9gUfc5L7+TqBs+EMmrUb6Vusp8CoGXzQvRHMJCMrMFySV0131Nu o0YYRDsAh1nJefYLMNcXd1BjqI+qY8IeRsxaY+9CB2KKGVVDO2uLdurdC2ZdlWXT Vwr3dDoyR0trnXJMmH2ijTeO6bush8HuXxvxJBjvEllM5QYxAkEA3jwny9JP+RFu 0rkqPBe/wi5pXpPl7PUtdNAGrh6S5958wUoR4f9bvwmTBv1nQzExKWu4EIp+7vjJ fBeRZhnBvQJBANPjjge8418PS9zAFyKlITq6cxmM4gOWeveQZwXVNvav0NH+OKdQ sZnnDiG26JWmnD/B8Audu97LcxjxcWI8Jc0CQEYA5PhLU229lA9EzI0JXhoozIBC TlcKFDuLm88VSmlHqDyqvF9YNOpEdc/p2rFLuZS2ndB4D+vu6mjwc5iZ3HECQCxy GBHRclQ3Ti9w76lpv+2kvI4IekRMZWDWnnWfwta+DGxwCgw2pfpleBZkWqdBepb5 JFQbcxQJ0wvRYXo8qaUCQQCgTvWswBj6OTP7LTvBlU1teAN2Lnrk/N5AYHZIXW6m nUG9lYvH7DztWDTioXMrruPF7bdXfZOVJD8t0I4OUzvC -----END RSA PRIVATE KEY-----
将文件另存为private-key.pem
- 公共证书:打开记事本并复制粘贴以下密钥:
-----BEGIN CERTIFICATE----- MIICfzCCAegCCQDxxeXw914Y2DANBgkqhkiG9w0BAQsFADCBgzELMAkGA1UEBhMC SU4xEzARBgNVBAgMCldlc3RiZW5nYWwxEDAOBgNVBAcMB0tvbGthdGExFDASBgNV BAoMC1BhbmNvLCBJbmMuMRUwEwYDVQQDDAxSb2hpdCBQcmFzYWQxIDAeBgkqhkiG 9w0BCQEWEXJvZm9mb2ZAZ21haWwuY29tMB4XDTIwMDkwOTA1NTExN1oXDTIwMTAw OTA1NTExN1owgYMxCzAJBgNVBAYTAklOMRMwEQYDVQQIDApXZXN0YmVuZ2FsMRAw DgYDVQQHDAdLb2xrYXRhMRQwEgYDVQQKDAtQYW5jbywgSW5jLjEVMBMGA1UEAwwM Um9oaXQgUHJhc2FkMSAwHgYJKoZIhvcNAQkBFhFyb2ZvZm9mQGdtYWlsLmNvbTCB nzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAt/EfcF3FG4TneOBWr4JhOUdyuCXm Dhy5yO3VKtQfPxr+5d0joCSnn/5vYDNSr1MfedZmqVxrXFoMAdPCd71BNmDmeLVi QK61WREtASP0ZhQMoUBT+R3Fpdy0jPS0YoT/fBd96CJCmgsQOS8Tq5IKVeB61MyC kwAQ2Goe0T3sdVkCAwEAATANBgkqhkiG9w0BAQsFAAOBgQATe6ixdAjoV7BSHgRX bXM2+IZLq8kq3s7ck0EZrRVhsivutcaZwDXRCCinB+OlPedbzXwNZGvVX0nwPYHG BfiXwdiuZeVJ88ni6Fm6RhoPtu2QF1UExfBvSXuMBgR+evp+e3QadNpGx6Ppl1aC hWF6W2H9+MAlU7yvtmCQQuZmfQ== -----END CERTIFICATE-----
将文件另存为public-cert.pem
示例 1:文件名:index.js
// Node.js program to demonstrate the
// server.setSecureContext() method
const { Console } = require('console');
// Server.setSecureContext() API
var tls = require('tls'),
fs = require('fs'),
// Port and host address for server
PORT = 1337,
HOST = '127.0.0.1';
// Private key and public certificate for access
var options = {
key: fs.readFileSync('private-key.pem'),
cert: fs.readFileSync('public-cert.pem'),
rejectUnauthorized: false
};
// Creating and initializing server
var server = tls.createServer(options, function(socket) {
// Print the data that we received
socket.on("data", function(data) {
console.log('\nReceived: %s ',
data.toString().replace(/(\n)/gm, ""));
});
// Replacing secure context with the new one
server.setSecureContext(options.cert);
console.log("secure replaced sucssesfully");
server.close();
});
// Start listening on a specific port and address
server.listen(PORT, HOST, function() {
console.log("I'm listening at %s, "
+ "on port %s", HOST, PORT);
});
// When an error occurs, show it.
server.on("error", function(error) {
console.error(error);
});
// Creating and initializing client
var client = tls.connect(PORT,
HOST, options, function() {
// Check if the authorization worked
if (client.authorized) {
console.log("Connection authorized "
+ "by a Certificate Authority.");
} else {
console.log("Connection not authorized: "
+ client.authorizationError)
}
// Send a friendly message
client.write("I am the client sending"
+ " you a message.");
client.end();
});
client.on("close", function() {
console.log("Connection closed");
});
// When an error occurs, show it.
client.on("error", function(error) {
console.error(error);
// Close the connection after
// the error occurred.
client.destroy();
});
使用以下命令运行 index.js 文件:
node index.js
输出:
I'm listening at 127.0.0.1, on port 1337
Connection not authorized: DEPTH_ZERO_SELF_SIGNED_CERT
secure replaced sucssesfully
Received: I am the client sending you a message.
Connection closed
示例 2:文件名:index.js
// Node.js program to demonstrate the
// server.setSecureContext() method
var tls = require('tls'),
fs = require('fs'),
// Port and host address for server
PORT = 1337,
HOST = '127.0.0.1';
//Private key and public certificate for access
var options = {
key: fs.readFileSync('private-key.pem'),
cert: fs.readFileSync('public-cert.pem'),
rejectUnauthorized: false
};
// Creating and initializing server
var server = tls.createServer(options, function(socket) {
// Print the data that we received
socket.on('data', function(data) {
console.log('\nReceived: %s ',
data.toString().replace(/(\n)/gm, ""));
});
// Replacing secure context with the new one
server.setSecureContext(options.cert);
console.log("secure replaced successfully");
server.close();
});
// Start listening on a specific port and address
server.listen(PORT, HOST, function() {
console.log("I'm listening at %s, on port %s", HOST, PORT);
});
// Creating and initializing client
var client = tls.connect(PORT, HOST, options, function() {
// Send a friendly message
client.write("I am the client sending you a message.");
client.end();
});
使用以下命令运行 index.js 文件:
node index.js
输出:
I'm listening at 127.0.0.1, on port 1337
secure replaced successfully
Received: I am the client sending you a message.
参考: https://nodejs.org/dist/latest-v12.x/docs/api/tls.html#tls_server_setsecurecontext_options
在评论中写代码?请使用 ide.geeksforgeeks.org,生成链接并在此处分享链接。