tlsClientServer
Node js TLS Server and Client
Certificate generation
- Create folder
mkdir examplesCerts
cd examplesCerts- Generate ca cert
openssl genrsa -out ca.key 4096
openssl req -new -x509 -days 9999 -key ca.key -out ca.crt
cat ca.key ca.crt > ca.pem- Create config file openssl-server.cnf to generate server cert. In the [alt_names] section, enter the appropriate DNS names and/or IP addresses
# NOT FOR PRODUCTION USE. OpenSSL configuration file for testing.
# openssl-server.cnf
[ req ]
default_bits = 4096
default_keyfile = myTestServerCertificateKey.pem ## The default private key file name.
default_md = sha256
distinguished_name = req_dn
req_extensions = v3_req
[ v3_req ]
subjectKeyIdentifier = hash
basicConstraints = CA:FALSE
keyUsage = critical, digitalSignature, keyEncipherment
nsComment = "OpenSSL Generated Certificate for TESTING only. NOT FOR PRODUCTION USE."
extendedKeyUsage = serverAuth, clientAuth
subjectAltName = @alt_names
[ alt_names ]
DNS.1 = localhost
#DNS.2 =
IP.1 = 127.0.0.1
#IP.2 =
[ req_dn ]
countryName = Country Name (2 letter code)
countryName_default = RU
countryName_min = 2
countryName_max = 2
stateOrProvinceName = State or Province Name (full name)
stateOrProvinceName_default = Moscow
stateOrProvinceName_max = 64
localityName = Locality Name (eg, city)
localityName_default = Moscow
localityName_max = 64
organizationName = Organization Name (eg, company)
organizationName_default = Organization
organizationName_max = 64
organizationalUnitName = Organizational Unit Name (eg, section)
organizationalUnitName_default = Server
organizationalUnitName_max = 64
commonName = Common Name (eg, YOUR name)
commonName_max = 64
commonName_default = Alexey- Generate server cert
openssl genrsa -out server.key 4096
openssl req -new -key server.key -out server.csr -config openssl-server.cnf
openssl x509 -sha256 -req -days 9999 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -extfile openssl-server.cnf -extensions v3_req
cat server.crt server.key > server.pem- Generate client cert
openssl genrsa -out client.key 4096
openssl req -new -key client.key -out client.csr
openssl x509 -sha256 -req -days 9999 -in client.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out client.crt -extensions v3_req
cat client.crt client.key > client.pemCode example
const {TlsServer, TlsClient} = require('tlsclientserver');
const fs = require('fs');
const port = process.env.PORT || 8000;
/**
* @type {{rejectUnauthorized: boolean, requestCert: boolean, cert: *, key: *, ca: *}}
*/
const serverOptions = {
key: fs.readFileSync('./examplesCerts/server.key'),
cert: fs.readFileSync('./examplesCerts/server.crt'),
ca: fs.readFileSync('./examplesCerts/ca.pem'),
requestCert: true,
rejectUnauthorized: true
};
let tlsServer = new TlsServer(serverOptions);
tlsServer.listen(port, () => {console.log('bound')});
let clientOptions = {
key: fs.readFileSync(`./examplesCerts/client.key`),
cert: fs.readFileSync(`./examplesCerts/client.crt`),
ca: fs.readFileSync(`./examplesCerts/ca.pem`),
port: port,
host: '127.0.0.1'
}
let tlsClient = new TlsClient(clientOptions);
tlsClient.socket.on('secureConnect', () => {console.log('successfully connected')});
;(async () => {
/**
* Define route on server
*/
tlsServer.addRoute('testRoute', (props) => props.a + props.b);
/**
* Call method from client and get result
*/
let result = await tlsClient.sendData({method: 'testRoute', data: {a: 12, b: 2}});
/**
* result = {data: 14}
* if an error will occur result = {error: String}
*/
console.log('result', result);
})();
