Seamless HTTPS without certificate warnings: integrate nodecert/https-server about bankai

[aral]

Just a quick update, I made an internal fork of Bankai for the Hypha project and implemented https-server as well as some simplifications (I don’t need SSR-rendering of Choo apps, for example).

Here’s the source, in case it helps:

https://source.ind.ie/hypha/tools/web-compiler

Also, I added an example to the readme with the initial Hypha project scaffolding code so you can see how I’m using it.

Thank you all for Bankai and Choo – they’re amazing. Being able to have HTTPS routes, WebSocket routes, and static routes co-exist with live reload at development time rocks (using SSE was a masterstroke) ;) As is the auto Service Worker support.

❤️ 🎈

[goto-bus-stop]

this looks rad! there is potentially a licensing problem because bankai is MIT, and afaik that doesn't let us use AGPL software.

are there any side effects to running this? for example, if someone tries out bankai and decides it doesn't fit their use case, will they have a certificate authority thing stored somewhere forever? if so, it might be best to integrate it as a command you can run (eg bankai cert), and log a message telling you about that command in bankai start.

[aral]

Thanks :)

Re: the license, yes, you’re right: you cannot use AGPL/GPL in an MIT project but you can do it the other way around. Just out of curiosity, was there a specific reason for the MIT licensing decision? (Given that Bankai/Choo appear to be for individuals and not for corporate use and if the latter uses them it would be good to force them to give back, it might make sense to license it under AGPL.)

Re: side-effects. Yes, the certificates and the root certificate store would remain. This is definitely something the person should be made aware of but it also means that any other dev server can use them in the future (e.g., if you’re using https-server directly).