Node.js tlsSocket.authorized用法及代码示例

tlsSocket.authorized属性是tls模块内TLSSocket类的内置应用程序编程接口，用于检查对等证书是否由指定的CA之一签名。

用法:

const tlsSocket.authorized

参数：此方法不接受任何参数。

返回值：如果对等证书由指定的其中一个CA签名，则此方法返回布尔值true；否则返回false。

如何生成私钥和公共证书？

私钥
第1步：打开记事本并复制粘贴以下 key ：

步骤2：另存为private-key.pem

公开证书
第1步：打开记事本并复制粘贴以下 key ：

步骤2：另存为public-cert.pem

范例1： 文件名：index.js

// Node.js program to demonstrate the 
// tlsSocket.authorized method 
var tls = require('tls'), 
    fs = require('fs'), 
  
// Port and host address for server     
PORT = 1337, 
HOST = '127.0.0.1', 
value = null; 
   
// Private key and public certificate for acess 
var options = { 
  key:fs.readFileSync('private-key.pem'), 
  cert:fs.readFileSync('public-cert.pem'), 
  rejectUnauthorized:false
}; 
  
// Creating and intializing server 
var server = tls.createServer(options, function(socket) { 
  
  // Print the data that we received 
  socket.on('data', function(data) { 
     console.log('\nReceived:%s ', 
     data.toString().replace(/(\n)/gm, "")); 
  }); 
  
  // Stopping the server 
  // by using the close() method 
  server.close(() => { 
     console.log("Server closed successfully"); 
  }); 
}); 
  
// Start listening on a specific port and address 
// by using listen() method 
server.listen(PORT, HOST, function() { 
   console.log("I'm listening at %s, on port %s", HOST, PORT); 
}); 
  
// Creating and intializing client 
var client = tls.connect(PORT, HOST, options, function() { 
    
  // Checking if the peer certificATE IS authorised or not 
  // by using tlsSocket.authorized method 
  value = client.authorized; 
  if(value) 
     client.write("certificate is authorised"); 
  else
     client.write('peer certificate is not authorised'); 
  
  client.end(() => { 
     console.log("Client closed successfully"); 
  }); 
});

输出：

I'm listening at 127.0.0.1, on port 1337
Client closed succefully

Received:peer certificate is not authorised
Server closed successfully

示例2：Filename：index.js

// Node.js program to demonstrate the 
// tlsSocket.authorized method 
var tls = require('tls'), 
    fs = require('fs'), 
  
// Port and host address for server     
PORT = 1337, 
HOST = '127.0.0.1'; 
   
// Private key and public certificate for acess 
var options = { 
  key:fs.readFileSync('private-key.pem'), 
  cert:fs.readFileSync('public-cert.pem'), 
  rejectUnauthorized:false
}; 
  
// Creating and intializing server 
var server = tls.createServer(options, function(socket) { 
  
  // Checking if the peer certificATE IS authorised or not 
  // by using tlsSocket.authorized method 
  value = socket.authorized; 
  if(value) 
     socket.write("certificate is authorised"); 
  else
     socket.write('peer certificate is not authorised'); 
  
  // Stopping the server 
  // by using the close() method 
  server.close(() => { 
     console.log("Server closed successfully") 
  }); 
}); 
  
  
// Start listening on a specific port and address 
// by using listen() method 
server.listen(PORT, HOST, function() { 
  
  console.log("I'm listening at %s, on port %s", HOST, PORT); 
}); 
  
// creating and intializing client 
var client = tls.connect(PORT, HOST, options, function() { 
   console.log("client is connected"); 
}); 
  
client.on("data", function(data) { 
  
  console.log('Received:%s', 
      data.toString().replace(/(\n)/gm, "")); 
  
  // Close the connection after receiving the message 
  client.end(()=>{ 
    console.log("client closed successfully") 
  }); 
  
});

使用以下命令运行index.js文件：

node index.js

输出：

I'm listening at 127.0.0.1, on port 1337
client is connected
Received:peer certificate is not authorised
client closed successfully
Server closed successfully

参考： https://nodejs.org/dist/latest-v12.x/docs/api/tls.html#tls_tlssocket_authorized

相关用法

注：本文由纯净天空筛选整理自RohitPrasad3大神的英文原创作品 Node.js tlsSocket.authorized Property。非经特殊声明，原始代码版权归原作者所有，本译文未经允许或授权，请勿转载或复制。