Nodejitsu SSL Certificate

Question

Does anyone knows how to deploy an SSL certificate to my nodejitsu App?

I can see that I already have https enabled but i would like to buy a SSL Certificate now that I'm opening for business.

Vendace

Answer 1

To get an SSL certificate working with a custom domain on Nodejitsu, you can do the following:

1. Subscribe to a "business" plan on Nodejitsu (custom domain + SSL isn't available for "individual" plans).
2. Set up your DNS to use your domain.
3. Create a certificate signing request (CSR), maybe by using OpenSSL like this.
4. Buy your SSL certificate from your certificate authority (CA) of choice.
5. Go to your Nodejitsu webops panel, where there is an SSL tab for your app.
6. Upload your private key (created with your CSR), your certificate, and your CA certificate, via the webops panel.

The details of these steps will be slightly different depending on what you use to create your CSR and who your cert provider is. If you get stuck Nodejitsu support can help set you up.

Heldentenor

Answer 2

Like this:

var https = require('https');
var fs = require('fs');

var options = {
  key: fs.readFileSync('key.pem'),
  cert: fs.readFileSync('cert.pem')
};

var a = https.createServer(options, function (req, res) {
  res.writeHead(200);
  res.end("hello world\n");
}).listen(8000);

Where cert.pem should be the path to your certificate and key.pem should be the path to its private key

http://docs.nodejitsu.com/articles/HTTP/servers/how-to-create-a-HTTPS-server

Campos

I had already read that, doesn't that affects how the proxy works? – Vendace

I mean it already works, just without the certificate as noticed here https://mcmap.net/q/2035415/-nodejitsu-https/… – Vendace

Answer 3

Drop us a line to [email protected] or visit us on IRC at #nodejitsu in Freenode (http://webchat.jit.su) and we will help you with the configuration of the custom ssl certificate.

Dunton

It's such a shame SSL is thought as a business-specific thing but not a security measure. I think some agencies have a big part in forcing the policy of no SSL on free hosts. It's harder to force someone to backdoor his server if you don't know neither his name nor his credit card number. – Headstream