On Thu, Jul 18, 2013 at 3:45 PM, Mark Hahn <[email protected]> wrote:

> 2) My server only accepts https connections. I don't want them to have to
> go to the trouble to install a self-signed certificate.  Once again I'd
> like for them to be able to do the npm install and then use it immediately
> from their browser.  Is there any way that npm could install a self-signed
> certificate?  The only person accessing this server will be the person who
> installed it so it would be easy for them to provide an exception for the
> certificate in their browser. Or is there a way I can run an https  server
> with no certificate?  Encryption is all I need.
>

If you're willing to require that the app's users have the openssl binary
installed in their environments, you can generate the self-signed
certificate using only a CA configuration file and some openssl commands.
Here's an example:

https://github.com/newrelic/node-newrelic/blob/master/Makefile#L78-L111(also
the variables at the top)
https://github.com/newrelic/node-newrelic/blob/master/test/lib/test-ca.conf

You could probably turn this into a Node / grunt script, but it was a lot
easier for me to hack together a Makefile.

NB: it will be a lot easier to make the SSL stuff work if you instruct your
users to connect to https://lvh.me or some other convenient alias for
localhost that isn't 'localhost'.

You could also just ship a certificate / CA bundle for
https://myapp.lvh.me/and call it good.

F

-- 
-- 
Job Board: http://jobs.nodejs.org/
Posting guidelines: 
https://github.com/joyent/node/wiki/Mailing-List-Posting-Guidelines
You received this message because you are subscribed to the Google
Groups "nodejs" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to
[email protected]
For more options, visit this group at
http://groups.google.com/group/nodejs?hl=en?hl=en

--- 
You received this message because you are subscribed to the Google Groups 
"nodejs" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to