為了實驗一下WebRTC，搭了個簡單的https伺服器。說說步驟：

1. 生成OpenSSL證書
2. 使用Nodejs的https模組建立伺服器

OpenSSL 證書

我機子Windows 7，安裝了Cygwin，裡面安裝了openssl，我用它來生成https伺服器需要的證書檔案。

1. 生成私鑰key檔案

$ openssl genrsa -out privatekey.pem 1024

Generating RSA private key, 1024 bit long modulus
....++++++
....................................
 
.++++++
e is 65537 (0x10001)

2. 通過私鑰生成CSR證書籤名

$ openssl req -new -key privatekey.pem -out certrequest.csr

You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but
 
 you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:CN
State or Province Name (full name) [Some-State]:ShanXi
Locality Name (eg, city) []:Xian
Organization Name (eg, company) [Internet Widgits Pty Ltd]:foruok
Organizational Unit Name (eg, section) []:foruok
Common Name (e.g. server FQDN or
 
 YOUR name) []:foruok
Email Address []:[email protected]163.com

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:

3. 通過私鑰和證書籤名生成證書檔案

$ openssl x509 -req -in certrequest.csr -signkey privatekey.pem -out certification.pem

Signature ok
subject=/C=CN/ST=ShanXi/L=Xian/O=foruok/OU=foruok/CN=foruok/emailAddress=foruok@163.com
Getting Private key

Nodejs https 伺服器示例

從Nodejs文件裡摘出來的程式碼：

    const https = require('https');
    const fs = require('fs');

    const options = {
        key: fs.readFileSync('./privatekey.pem'),
        cert: fs.readFileSync('./certification.pem')
    };

    https.createServer(options, (req, res) => {
        res.writeHead(200);
        res.end('hello world\n');
    }).listen(8000);

執行 node httpsdemo.js，然後在Chrome裡訪問access https://192.168.40.158:8000。結果如下：

你可能注意到了，證書有點問題，點下位址列，能看怎麼回事兒：

我們建立的證書沒有經過身份驗證，不受信。有需要的話，可以去有資質的網路運營商申請自己的證書。