Node.js tlsSocket.getCertificate() 方法

tlsSocket.getCertificate() 方法是 tls 模块中 TLSSocket 类的内置应用程序编程接口，用于返回表示本地证书的对象。

句法：

const tlsSocket.getCertificate()

参数：此方法不接受任何参数。

返回值：该方法返回一个代表本地证书的对象。

如何生成私钥和公共证书？

私钥
步骤1：打开记事本并复制粘贴以下密钥：

第 2 步：另存为private-key.pem

公共证书
步骤1：打开记事本并复制粘贴以下密钥：

第 2 步：另存为public-cert.pem

示例 1：文件名：index.js

// Node.js program to demonstrate the
// tlsSocket.getCertificate() method
var tls = require('tls'),
    fs = require('fs'),
  
    // Port and host address for server    
    PORT = 1337,
    HOST = '127.0.0.1',
    value = null;
  
// Private key and public certificate for access
var options = {
    key: fs.readFileSync('private-key.pem'),
    cert: fs.readFileSync('public-cert.pem'),
    rejectUnauthorized: false
};
  
// Creating and initializing server
var server = tls.createServer(options,
    function (socket) {
  
        // Print the data that we received
        socket.on('data', function (data) {
            console.log('\nReceived: %s ',
                data.toString().replace(/(\n)/gm, ""));
        });
  
        // Stopping the server
        // by using the close() method
        server.close(() => {
            console.log("Server closed successfully");
        });
    });
  
// Start listening on a specific port and address
// by using listen() method
server.listen(PORT, HOST, function () {
    console.log("I'm listening at %s, "
        + "on port %s", HOST, PORT);
});
  
// Creating and initializing client
var client = tls.connect(PORT, HOST,
    options, function () {
  
        // Getting local certificate by using
        // tlsSocket.getCertificate() method
        value = client.getCertificate();
  
        client.write("Certificate : " + value.serialNumber);
  
        client.end(() => {
            console.log("Client closed successfully");
        });
    });

使用以下命令运行 index.js 文件：

node index.js

输出：

I'm listening at 127.0.0.1, on port 1337
Client closed successfully

Received: Certificate : F1C5E5F0F75E18D8
Server closed successfully

示例 2：文件名：index.js

// Node.js program to demonstrate the
// tlsSocket.getCertificate() method
var tls = require('tls'),
    fs = require('fs'),
  
    // Port and host address for server    
    PORT = 1337,
    HOST = '127.0.0.1';
  
// Private key and public certificate for access
var options = {
    key: fs.readFileSync('private-key.pem'),
    cert: fs.readFileSync('public-cert.pem'),
    rejectUnauthorized: false
};
  
// Creating and initializing server
var server = tls.createServer(options,
    function (socket) {
  
        // Getting local certificate by using
        // tlsSocket.getCertificate() method
        value = socket.getCertificate();
  
        socket.write("Certificate : "
            + value.serialNumber);
  
        // Stopping the server
        // by using the close() method
        server.close(() => {
            console.log("Server closed successfully")
        });
    });
  
// Start listening on a specific port 
// and address by using listen() method
server.listen(PORT, HOST, function () {
    console.log("I'm listening at %s, "
        + "on port %s", HOST, PORT);
});
  
// Creating and initializing client
var client = tls.connect(PORT, HOST,
    options, function () {
        console.log("client is connected");
    });
  
client.on("data", function (data) {
  
    console.log('Received: %s',
        data.toString().replace(/(\n)/gm, ""));
  
    // Close the connection after 
    // receiving the message
    client.end(() => {
        console.log("client closed successfully")
    });
});

使用以下命令运行 index.js 文件：

node index.js

输出：

I'm listening at 127.0.0.1, on port 1337
client is connected
Received: Certificate : F1C5E5F0F75E18D8
client closed successfully
Server closed successfully

参考： https://nodejs.org/dist/latest-v12.x/docs/api/tls.html#tls_tlssocket_getcertificate