nategood / node-auth

Demonstrate Client Side SSL Certificate Authentication in Node.js and Express.js

Client side SSL certificate authentication in Node.js

Includes

• server.js: Example HTTPS Node.js server that validates the client cert
• express-server.js: Example express version
• client.sh: A bash script that demonstrates using curl as a client
• client.js: A Node.js client example
• ssl: Directory with a bunch of sample certs

More coming soon. Wanted to recreate the work I did to demonstrate client cert auth in nginx. You can check it out for more info about the client side certs process.

Notes

• The passphrase on these keys are all "password"
• All examples run on port 5678 for the sake of simplicity (port 443 works just as well assuming you have access)

node-auth's Issues

Add instructions to generate certificates

I'd be great if there were instructions on the README.md file to generate the keys and certificates.

certs have expired

Thanks for making this. Do you think you could take a look at this?

$ node client.js 

events.js:72
        throw er; // Unhandled 'error' event
              ^
Error: CERT_HAS_EXPIRED
    at SecurePair.<anonymous> (tls.js:1356:32)
    at SecurePair.EventEmitter.emit (events.js:92:17)
    at SecurePair.maybeInitFinished (tls.js:968:10)
    at CleartextStream.read [as _read] (tls.js:462:15)
    at CleartextStream.Readable.read (_stream_readable.js:320:10)
    at EncryptedStream.write [as _write] (tls.js:366:25)
    at doWrite (_stream_writable.js:221:10)
    at writeOrBuffer (_stream_writable.js:211:5)
    at EncryptedStream.Writable.write (_stream_writable.js:180:11)
    at write (_stream_readable.js:583:24)

client.js doesn't work

node client.js

crypto.js:129
c.context.setKey(options.key, options.passphrase);
^
Error: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt
at Object.exports.createCredentials (crypto.js:129:17)

Client.js not working

The client.sh bash/curl client seems to be working fine with the server, however the node client is not authenticating. Have tried multiple configurations and am starting to suspect there may be an underlying issue in node.

Does node validate the client CN?

Am I cool to create a client cert with the CN of example.com, or does it need to be reverse lookup-able?

Upgrade example to express 3.x, 4.x