个人中心
gpt4 book ai didi

javascript - jquery ajax https 调用给出 ERR_INSECURE_RESPONSE

转载 作者：数据小太阳 更新时间：2023-10-29 05:38:25 25 4
gpt4 key购买 nike

我正在尝试从 jquery 到 node.js 进程进行 https CORS ajax 调用。然而，每当调用时，chrome 都会在控制台中提示 OPTIONS https://localhost/net::ERR_INSECURE_RESPONSE。

查看类似的堆栈溢出问题，Cross domain request from HTTP to HTTPS aborts immediately如果我导入我制作的自签名证书，我应该能够进行跨源 https ajax 调用。所以我将证书导入了 chrome。我可以在权限下的 chrome 管理证书选项卡中看到证书。但是当我尝试 ajax 调用时它仍然失败。

这就是我制作私钥的方式:openssl genrsa -out domain.key 4096

现在证书:openssl req -x509 -sha512 -nodes -newkey rsa:4096 -keyout domain.key -out domain.crt

对于常用名称，我输入了计算机的 IP 地址，这样 chrome 就不会提示 URL 不匹配。

这是html页面。

<!DOCTYPE html>
<html>
  <title>BlackBox</title>
  <head>
    <meta charset="utf-8">
    <script src="jquery-1.11.2.min.js"></script>
    <script src="bootstrap-3.3.4-dist/js/bootstrap.min.js"></script>
    <script src="login.js"></script>
  </head>
  <body>
    <div class="container-fluid">
      <div class="row">
        <div class=col-md-4>
          <h2> Welcome to BlackBox</h2>
          <label>username</label>
          <input type="text" name="username" id="username">
          <label>password</label>
          <input type ="text" name="password" id="password">
          <input type="button" id="loginbtn" value="Login"/>
          <div class="container">
            <div class="row">
              <div class="out"></div>
            </div>
          </div>
        </div>
      </div>
     </div>
   </body>
 </html>

这是与 html 一起使用的 javascript。

 $(document).ready(function() {
   $('#loginbtn').click(clickLogin);
     function clickLogin() {
       var username = $('#username').val();
       var password = $('#password').val();
       if(password == '' || username == '') {
         $(".out").html("Empty username or password");
         } else {
         $.ajax({
           type: "PUT",
           url: "https://localhost/",
           contentType: "application/json",
           data: JSON.stringify({
             username: username,
             password: password,
           }),
           dataType: "text",
       })
     }
   };
 });

最后是 Node 进程，它同时服务于 html 和 javascript，并假设接收 ajax 调用。

const fs = require("fs");
const http = require('http');
const https = require('https');

var loginPage = fs.readFileSync('login.html');
var loginPageJs = fs.readFileSync('login.js');
var jquery = fs.readFileSync('jquery-1.11.2.js');
var bootstrap = fs.readFileSync('bootstrap-3.3.4-dist/js/bootstrap.min.js')

var options = {
  key: fs.readFileSync('domain.key'),
  cert: fs.readFileSync('domain.crt')
};

http.createServer(function(req, res) {  
  res.writeHead(301, {Location: 'https:192.168.1.58/'})
  res.end();
}).listen(80);

https.createServer(options, function(req, res) {

  if(req.method === 'GET' && req.url === '/') {
  res.writeHead(200, "OK", {'Content-Type': 'text/html'});
  res.write(loginPage);
  res.end();
} else if(req.method === 'GET' && req.url === '/login.js') {
  res.writeHead(200, "OK", {'Content-Type': 'application/javascript'});
  res.write(loginPageJs);
  res.end();
} else if(req.method === 'GET' && req.url === '/jquery-1.11.2.js') {
  res.writeHead(200, "OK", {'Content-Type': 'application/javascript'});
  res.write(jquery);
  res.end();
} else if(req.method === 'GET' && req.url === '/bootstrap-3.3.4-     dist/js/bootstrap.min.js') {
  res.writeHead(200, "OK", {'Content-Type': 'application/javascript'});
  res.write(bootstrap);
  res.end();
} else if(req.method === "OPTIONS" && req.url === '/') {
  res.writeHead(204, "No Content", {
    "access-control-allow-origin": origin,
    "access-control-allow-methods": "GET, POST, PUT, DELETE, OPTIONS",
    "access-control-allow-headers": "content-type, accept",
    "access-control-max-age": 10,
    "content-length": 0
  });

  var requestBodyBuffer = [];

  req.on("data", function(chunk) {
    requestBodyBuffer.push(chunk);
  })

  req.on("end", function() {
    var requestBody = requestBodyBuffer.join("");
    var obj = JSON.parse(requestBody);
    if(obj.hasOwnProperty('username') && obj.hasOwnProperty('password'))  {
      console.log(obj.username);
      console.log(obj.password);
    }
  })
 }

}).listen(443);

最佳答案

最近我写了一个 whois 查询的应用程序，我也遇到了这个问题，但最终在检查了所有可能性之后，它工作正常。

这是一篇有助于生成自签名证书的文章:

https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-private-keys-and-csrs

*** 代码中的评论将帮助您 ****

index.js代码:

 function checkAvailability(domainParsed) {

        $.ajax({
            method : "GET",
            url : "https://localhost:55555/check", // Pay attention To This Line 
                            "Content-Type" : "application/json",
            data : {domain : domainParsed , array : postFixesArray } 

            }).done(function(data) {
                    availableDomanisToShow = data.availableDomains;
                    registeredDomanisToShow = data.registeredDomains;
            });

    }

server.js代码:

var bodyParser = require("body-parser") ;
var unirest = require('unirest');
var https = require('https');
var http = require('http');
var fs = require('fs');
var express = require('express');
var app = express();

var registeredDomains = [];
var availableDomains = [];
var counter = 0 , i = 0;

app.use(bodyParser.json({ type: 'application/json'})) ;
app.use(bodyParser.urlencoded({ extended:true })) ;

app.use(function(req, res, next) {
    res.header("Access-Control-Allow-Origin", "*"); // Pay attention To This Line --> Cross domain request
    res.header("Access-Control-Allow-Headers", "Origin, X-Requested-With, Content-Type, Accept"); // Pay attention To This Line --> Cross domain request
    next();
});

app.use("/check",function(req,resp,next) {

   var fqdn,postfix;

   availableDomains = [];
   registeredDomains = []

   while( i < req.query.array.length) {
            fqdn = req.query.domain + req.query.array[i];
            postfix = req.query.array[i];
            checkAvailability(fqdn,postfix,req.query.array.length);
            console.log(req.query.array.length)
            i++;
   }

   function checkAvailability(domain,postfix,length) {
        unirest.get('https://jsonwhois.com/api/v1/whois').headers({
                'Accept': 'application/json',
                'Authorization': 'Token token=238d7da7fac57882a176cb14411d781a'
            }).query({
                "domain" :  domain
            }).end(function(response) {
                console.log(domain , response.body['available?']);
                if(true != response.body['available?']) {
                    registeredDomains.push(postfix);
                    counter++;
                    if(counter == length) {
                            counter = 0 ;
                            i = 0;
                            resp.json( { "registeredDomains" : registeredDomains , "availableDomains" : availableDomains } );                   
                    }
                }
                else  {
                    availableDomains.push(postfix);
                    counter++;
                    if(counter == length) {
                            counter = 0 ;
                            i = 0;
                            resp.json( { "registeredDomains" : registeredDomains , "availableDomains" : availableDomains } );
                    }
            }
       });
    }
});



 https.createServer({
  key: fs.readFileSync('key.pem'),
  cert: fs.readFileSync('cert.pem')
 }, app).listen(55555);

 http.createServer(app).listen(8000);
 console.log("httpsServer are Listening on " + 55555);
 console.log("httpServer are Listening on " + 8000);

关于javascript - jquery ajax https 调用给出 ERR_INSECURE_RESPONSE，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/29499880/

25 4 0
文章推荐： javascript - console.log 在 Angular Controller 中不起作用
文章推荐： objective-c - 在自动生成的 Swift 桥接 header 中“找不到接口(interface)声明”
文章推荐： ios - iCloud 和核心数据 - "Path is outside of any CloudDocs container, will never sync"
文章推荐： javascript - 使用 Facebook ://To Share a Post through the Facebook App with Web Interface
数据小太阳
个人简介

我是一名优秀的程序员,十分优秀！

滴滴打车优惠券免费领取
滴滴打车优惠券
Copyright 2021 - 2024 cfsdn All Rights Reserved 蜀ICP备2022000587号
广告合作:1813099741@qq.com 6ren.com