使用node.js设置SSL(Setting up SSL with node.js)

 我在GoDaddy购买了SSL证书，我正在使用以下node.js服务器来尝试设置它： 
 
var https = require('https'),      // module for https
    fs =    require('fs');         // required to read certs and keys

var options = {
    key: fs.readFileSync('../../ssl/example.com.key'),
    cert: fs.readFileSync('../../ssl/example.com.crt'),
    ca: fs.readFileSync('../../ssl/gd_bundle.crt'),
    requestCert:        true,
    rejectUnauthorized: false
};

https.createServer(options, function (req, res) {
    if (req.client.authorized) {
        res.writeHead(200, {"Content-Type": "application/json"});
        res.end('{"status":"approved"}');
    } else {
        res.writeHead(401, {"Content-Type": "application/json"});
        res.end('{"status":"denied"}');
    }
}).listen(443);
 
 运行服务器后，我试图访问https://example.com网站，我就得到了 
 
{"status":"denied"}
 
 我想这是正常的，因为我得到了回复，但我认为我对SSL如何工作的理解是错误的。 我认为浏览器从服务器获取证书，然后根据根证书（即GoDaddy）对其进行身份验证。 所以我不应该得到 
 
{"status":"approved"}
 
 只需访问https://example.com ？ 
 
 所以我想我的问题是，如何访问https://example.com并获取{“status”：“approved”}？ 
 
 谢谢！ 

I bought an SSL certificate at GoDaddy and I'm using the following node.js server to attempt to set it up:
 
var https = require('https'),      // module for https
    fs =    require('fs');         // required to read certs and keys

var options = {
    key: fs.readFileSync('../../ssl/example.com.key'),
    cert: fs.readFileSync('../../ssl/example.com.crt'),
    ca: fs.readFileSync('../../ssl/gd_bundle.crt'),
    requestCert:        true,
    rejectUnauthorized: false
};

https.createServer(options, function (req, res) {
    if (req.client.authorized) {
        res.writeHead(200, {"Content-Type": "application/json"});
        res.end('{"status":"approved"}');
    } else {
        res.writeHead(401, {"Content-Type": "application/json"});
        res.end('{"status":"denied"}');
    }
}).listen(443);
 
After running the server, I attempted to visit the website at https://example.com and I just get 
 
{"status":"denied"}
 
I guess this is working properly since I'm getting a response, but I think my understanding of how SSL works is wrong. I thought the browser gets the certificate from the server, which then authenticates it against root certs, i.e. from GoDaddy. so shouldn't i get 
 
{"status":"approved"}
 
just simply visiting https://example.com ?
 
So I guess my question is, how do I visit https://example.com and get {"status":"approved"}? 
 
Thanks!

原文：https://stackoverflow.com/questions/11804168