created private key and certificate using openssl

Author: surendra_vidiyala

README.md

@@ -1 +1,146 @@
 # https-secure-server
+* Exploring the use of the HTTPS server core node module to create and run a secure       server and generating your private key and public certificate and use them to           configure the Node HTTPS server.
+  - Configure a secure server in Node using the core HTTPS module
+  - Generate the private key and public certificate and configure the HTTPS server
+  - Redirect traffic from the insecure HTTP server to a secure HTTPS server.
+# Updating the bin/www File
+- Open the www file in the bin directory and update its contents as follows:
+
+````
+#!/usr/bin/env node
+/**
+ * Module dependencies.
+ */
+
+var app = require('../app');
+var debug = require('debug')('rest-server:server');
+var http = require('http');
+var https = require('https');
+var fs = require('fs');
+
+/**
+ * Get port from environment and store in Express.
+ */
+
+var port = normalizePort(process.env.PORT || '3000');
+
+app.set('port', port);
+app.set('secPort',port+443);
+
+/**
+ * Create HTTP server.
+ */
+
+var server = http.createServer(app);
+
+/**
+ * Listen on provided port, on all network interfaces.
+ */
+
+server.listen(port, function() {
+   console.log('Server listening on port ',port);
+});
+server.on('error', onError);
+server.on('listening', onListening);
+
+/**
+ * Create HTTPS server.
+ */ var options = {
+  key: fs.readFileSync(__dirname+'/private.key'),
+  cert: fs.readFileSync(__dirname+'/certificate.pem')
+};
+
+var secureServer = https.createServer(options,app);
+
+/**
+ * Listen on provided port, on all network interfaces.
+ */
+
+secureServer.listen(app.get('secPort'), function() {
+   console.log('Server listening on port ',app.get('secPort'));
+});
+secureServer.on('error', onError);
+secureServer.on('listening', onListening);
+
+/**
+ * Normalize a port into a number, string, or false.
+ */
+
+function normalizePort(val) {
+  var port = parseInt(val, 10);
+  if (isNaN(port)) {
+    // named pipe
+    return val;
+  }
+  if (port >= 0) {
+    // port number
+    return port;
+  }
+  return false;
+}
+
+/**
+ * Event listener for HTTP server "error" event.
+ */
+
+function onError(error) {
+  if (error.syscall !== 'listen') {
+    throw error;
+  }
+  var bind = typeof port === 'string'
+    ? 'Pipe ' + port
+    : 'Port ' + port;
+
+  // handle specific listen errors with friendly messages
+  switch (error.code) {
+    case 'EACCES':
+      console.error(bind + ' requires elevated privileges');
+      process.exit(1);
+      break;
+
+    case 'EADDRINUSE':
+      console.error(bind + ' is already in use');
+      process.exit(1);
+      break;
+
+    default:
+      throw error;
+  }
+}
+
+/**
+ * Event listener for HTTP server "listening" event.
+ */
+
+function onListening() {
+  var addr = server.address();
+  var bind = typeof addr === 'string'
+    ? 'pipe ' + addr
+    : 'port ' + addr.port;
+  debug('Listening on ' + bind);
+}
+````
+
+- Updating app.js
+- Open app.js and add the following code to the file:
+
+````
+// Secure traffic only
+app.all('*', function(req, res, next){
+    console.log('req start: ',req.secure, req.hostname, req.url, app.get('port'
+      ));
+  if (req.secure) {
+    return next();
+  };
+
+ res.redirect('https://'+req.hostname+':'+app.get('secPort')+req.url);
+});
+````
+# Generating Private Key and Certificate
+* Go to the bin folder and then create the private key and certificate by typing the      following at the prompt:
+````
+openssl genrsa 1024 > private.key
+openssl req -new -key private.key -out cert.csr
+openssl x509 -req -in cert.csr -signkey private.key -out certificate.pem
+````
+Run the server and test.

app.js

@@ -25,6 +25,15 @@ var promoRouter = require('./routes/promoRouter');
 var leaderRouter = require('./routes/leaderRouter');
 
 var app = express();
+// Secure traffic only
+app.all('*', function(req, res, next) {
+    console.log('req start: ', req.secure, req.hostname, req.url, app.get('port'));
+    if (req.secure) {
+        return next();
+    };
+
+    res.redirect('https://' + req.hostname + ':' + app.get('secPort') + req.url);
+});
 
 // view engine setup
 app.set('views', path.join(__dirname, 'views'));
@@ -81,14 +90,6 @@ app.use(function(err, req, res, next) {
         error: {}
     });
 });
-// Secure traffic only
-app.all('*', function(req, res, next) {
-    console.log('req start: ', req.secure, req.hostname, req.url, app.get('port'));
-    if (req.secure) {
-        return next();
-    };
 
-    res.redirect('https://' + req.hostname + ':' + app.get('secPort') + req.url);
-});
 
 module.exports = app;

bin/cert.csr

@@ -0,0 +1,11 @@
+-----BEGIN CERTIFICATE REQUEST-----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+-----END CERTIFICATE REQUEST-----

bin/certificate.pem

@@ -0,0 +1,14 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

bin/private.key

@@ -0,0 +1,15 @@
+-----BEGIN RSA PRIVATE KEY-----
+MIICWwIBAAKBgQDXFApmaRPL6IuTdyEKUOyj7rNis1oAn+Zixm+RvaPjUkhVLZq6
+rQYEfimnT71P8h64/IBwPDt4sSTqi6JnN+sJ3HLWvT8wlnTyVaxGDleWLC0P//lm
+j6YbRDMFTwADHn7/yAgXodvjQe5X7FwfSWWqWzJ8WskJaRg+2w6OixbBgwIDAQAB
+AoGAPc/5qTMbyGed7ZS4PzHAwOByV7R58mICIXMsT3N0LXnRZgGETZA6gYIM0JP/
+MYHBSKLw+tCkuuwWUv4sf4O3nYfwWzmXblqpvgYzKxYSdD7qioOpl/EpcSpkXNmM
+IAAE3dZ8KdKdKnE4MgqUGdnfUsCj6MBx0YPEQ60d4XAYJuECQQDzm91z3qQEdIbx
+hq9d1OGeNVN85DloqOek6EMoklQpHqbIrkeK0NsIoZLZ0gD17aJH34THMacFzgMX
+A+QldqGTAkEA4gSquip36N1wTHC0xz3+rcL7J0vf9GU95lsemimKbAirX0EEcsYU
+oLlkKqK9pgXI397Vib5B12E8+95uPYkWUQJADjyPppPeVfxRXpAWc49bWBmZtXTI
+/hrQ3sxMEHTswjJuYM/+klg+VLTMljo1oCmxEC453kJClo5Bk/jAPog+TQJASgs5
+Wy/ahKE2zvQFZVh7/LTpzp/eyJP6SWMEjYCaZnYYnmYQbQFTdKwHkqgp9R/kBONd
+lXiM3WBvuBvQhbxJYQJAer6sJUTrjRL901ZQBlPSFof77DkxBftmcOZKKZfikz1y
+wvDm/8Yp6oW8pCS5ImF4rrL0tKGKDWMlhGse734nbw==
+-----END RSA PRIVATE KEY-----