如何为Node.js项目创建.pem和.cert文件

Question

我想运行一个https服务器。我在网上找到了这段代码：

 var fs = require('fs'),
    http = require('http'),
    https = require('https'),
    express = require('express');

var port = 8000;

var options = {
    key: fs.readFileSync('./ssl/privatekey.pem'),
    cert: fs.readFileSync('./ssl/certificate.pem'),
};

var app = express();

var server = https.createServer(options, app).listen(port, function(){
  console.log("Express server listening on port " + port);
});

app.get('/', function (req, res) {
    res.writeHead(200);
    res.end("hello world\n");
});

问题在于我不知道如何创建这些文件。有没有一种方法可以使用Node shell（在Windows上工作）生成它们？

- itay312

---

我应该在哪里输入这个命令：openssl req -newkey rsa:2048 -new -nodes -keyout key.pem -out csr.pem？ - itay312

Answer 1

看一下这个：如何为 HTTPS Web 服务器创建 .pem 文件

openssl req -newkey rsa:2048 -new -nodes -x509 -days 3650 -keyout key.pem -out cert.pem

如果您已经安装了 openSSL，您就可以直接在 Windows 的命令提示符或 Mac 的终端中输入此命令。

- Jack Proudfoot

Answer 2

import crypto from 'crypto'
import { writeFileSync } from 'fs';

const certKey = crypto.randomBytes(1024).toString('hex')
const certKeyFormatted = certKey.match(/.{1,64}/g).join("\n")
const certContents =
    '-----BEGIN CERTIFICATE-----' + "\n" +
    certKeyFormatted + "\n" +
    '-----END CERTIFICATE-----'

console.log('generated certificate')
console.log()
console.log(certContents)

const filePath = 'signingKey.pem'

writeFileSync(
    filePath,
    certContents,
    { encoding: 'utf8' }
);

console.log()
console.log('certificate saved to', filePath)

这会得到类似以下的结果。

-----BEGIN CERTIFICATE-----
018bd0f56deb8f3695e9bcc73b8031829b4505a6b49257e41a5597743135473a
34ca92304cbb293ea05d3a5e8fff497d32e398196f8c94def68a3333bec3343e
3248a97e3af7d1ae69e8993c9a2d0d0770ddc0694267a63be241c18204363074
84542b3205a06a05d05607944492c914f04f630a93efdb1d5fec796071951a7c
...
67ea551c13af07d6f3fcefdd6d2f17e4aa084b9c82254a52d2903791e31418cf
5d9f07137c5188fa26ac480b9c7c25ca6dd7c1464a3bcc53294d84770ad995a4
efa357956865134e97ec02a172111d4a0db68f63cb3f68d1438fe03bef55f937
ee5d60af45a53f8cd43e8ce6ea26d75ff09714468914274443e581acf1c96bb5
-----END CERTIFICATE-----

- mindlid