amazon-web-services - 如何在我的 AWS Elastic Beanstalk 环境中为解析服务器示例启用 HTTPS？

Question

我正在尝试在 AWS 上的 Parse Server 上启用 SSL/TLS，以便我可以从 Stripe 接收 Webhooks。

我使用 openssl 创建了一个自签名证书，但是当我尝试发送带有 Stripe 的网络钩子(Hook)时，我收到了以下错误。

Invalid TLS

我的解析服务器 index.js 是

var express = require('express');
var ParseServer = require('parse-server').ParseServer;
var path = require('path');

var databaseUri = process.env.DATABASE_URI || process.env.MONGODB_URI;

if (!databaseUri) {
  console.log('DATABASE_URI not specified, falling back to localhost.');
}

var api = new ParseServer({
  databaseURI: databaseUri || 'mongodb://localhost:27017/dev',
  cloud: process.env.CLOUD_CODE_MAIN || __dirname + '/cloud/main.js',
  appId: process.env.APP_ID || 'myAppId',
  masterKey: process.env.MASTER_KEY || '', //Add your master key here. Keep it secret!
  serverURL: process.env.SERVER_URL || 'http://localhost:1337/parse',  // Don't forget to change to https if needed
  // push: pushConfig,
  // filesAdapter: filesAdapter,
  push:{
    ios:{
      pfx:'xxxxxxxxxxxxxxxxxx', // P12 file only
      bundleId: 'xxxxxxxxxxxxxxxx',  // change to match bundleId
      production: false // dev certificate
    }
  },
  liveQuery: {
    classNames: ["Posts", "Comments"] // List of classes to support for query subscriptions
  }
});
// Client-keys like the javascript key or the .NET key are not necessary with parse-server
// If you wish you require them, you can set them as options in the initialization above:
// javascriptKey, restAPIKey, dotNetKey, clientKey

var app = express();

// Serve static assets from the /public folder
app.use('/public', express.static(path.join(__dirname, '/public')));

// Serve the Parse API on the /parse URL prefix
var mountPath = process.env.PARSE_MOUNT || '/parse';
app.use(mountPath, api);

// Parse Server plays nicely with the rest of your web routes
app.get('/', function(req, res) {
  res.status(200).send('I dream of being a website.  Please star the parse-server repo on GitHub!');
});

// There will be a test page available on the /test path of your server url
// Remove this before launching your app
app.get('/test', function(req, res) {
  res.sendFile(path.join(__dirname, '/public/test.html'));
});

var port = process.env.PORT || 1337;
var httpServer = require('http').createServer(app);
httpServer.listen(port, function() {
    console.log('parse-server-example running on port ' + port + '.');
});

ParseServer.createLiveQueryServer(httpServer);

如何启用 https？

Answer 1

您需要从可信来源获取证书。否则，即使是浏览器也会将其标记为不受信任。此外，在设置 https 服务器时，您需要包含这行代码:

 https.createServer({
         key: fs.readFileSync('Your-private-key.pem'),
         cert: fs.readFileSync('your-crt-file.crt')
     }, app).listen(3001,function(){
         console.log('https server started on port 3001');
     });

此外，如果您想强制执行 https，我建议您查看 express-sslify