use greenlock-express to automatically generate ssl

ConfigBasic.js

@@ -2,10 +2,6 @@ module.exports={
   protocol:'http',
   host:'localhost',
   port:undefined,
-  // 如果使用 https 协议，必须填写以下内容，或在命令行参数中设置：
-  // sslKey: '/etc/letsencrypt/live/bittic.org/privkey.pem', // ssl key file,
-  // sslCert: '/etc/letsencrypt/live/bittic.org/cert.pem', // ssl cert file,
-  // sslCA: '../SSL/ca_bundle.crt', // ssl ca file,
 
   deploy:{
     host:'', // 待部署到的主机

ConfigCustom.js

@@ -1,3 +1,6 @@
 module.exports={
-
+  // 如果使用 https 协议，必须填写以下内容，或在命令行参数中设置：
+  // sslKey: '/etc/letsencrypt/live/test.bittic.net/privkey.pem', // ssl key file,
+  // sslCert: '/etc/letsencrypt/live/test.bittic.net/fullchain.pem', // ssl cert file,
+  // sslCA: '/etc/letsencrypt/live/test.bittic.net/bundle.crt', // ssl ca file,
 }

package.json

@@ -22,6 +22,7 @@
     "deepmerge": "^2.2.1",
     "errorhandler": "^1.5.0",
     "express": "^4.16.2",
+    "greenlock-express": "^2.7.8",
     "lodash": "^4.17.11",
     "material-design-icons-iconfont": "^3.0.3",
     "method-override": "^2.3.10",

server.js

@@ -57,18 +57,27 @@ async function init(){  /*** 设置全局对象 ***/
 (async function start() {
   await init()
 
-  var express = require('express')
-  var favicon = require('serve-favicon')
-  var logger = require('morgan')
-  var cookieParser = require('cookie-parser')
-  var bodyParser = require('body-parser')
+  const express = require('express')
+  const logger = require('morgan')
+  const cookieParser = require('cookie-parser')
+  const bodyParser = require('body-parser')
   const compression = require('compression')
 
-  var server = express()
+  const server = express()
+
+  const greenlock = require('greenlock-express').create({
+    version: 'draft-11',
+    server: 'https://acme-v02.api.letsencrypt.org/directory', // for test: acme-staging-v02
+    agreeTos: true,
+    communityMember: false,
+    store: require('greenlock-store-fs'),
+    email: 'ssl@faronear.org',
+    approvedDomains: [wo.Config.host],
+    configDir: path.resolve(__dirname, 'ssl'),
+    app: server,
+  })
 
   /*** 通用中间件 ***/
-  // uncomment after placing your favicon in /public
-  //server.use(favicon(path.join(__dirname, 'public', 'favicon.ico')))
   server.use(logger('development'===server.get('env')?'dev':'combined'))
   server.use(bodyParser.json())
   server.use(bodyParser.urlencoded({ extended: false }))
@@ -77,45 +86,37 @@ async function init(){  /*** 设置全局对象 ***/
 
   /*** 路由 ***/
   server.use(express.static(path.join(__dirname, 'dist'), {index:'index.html'}))
-
-//  var vhost = require('vhost')
-//  var webroot=express.static(path.join(__dirname,'dist'), {index:'index.html'})
-  // server.use(vhost('bittic.org', webroot))
-  // server.use(vhost('www.bittic.org', webroot))
-  // server.use(vhost('*', webroot))
-  // server.use(vhost('*.*', webroot))
-  // server.use(vhost('*.*.*', webroot))
-  // server.use(vhost('*.*.*.*', webroot))
+  //server.use(require('serve-favicon')(path.join(__dirname, 'public', 'favicon.ico')))  // uncomment after placing your favicon in /public
 
   /*** 启动 Web 服务 ***/
   if ('http' === wo.Config.protocol) {
     require('http').createServer(server).listen(wo.Config.port, function (err) {
-      console.log('Server listening on %s://%s:%d for %s environment', wo.Config.protocol, wo.Config.host, wo.Config.port, server.settings.env)
+      if (err) console.log(err)
+      else console.log(`Server listening on ${wo.Config.protocol}://${wo.Config.host}:${wo.Config.port} for ${server.settings.env} environment`)
     })
   } else if ('https' === wo.Config.protocol) {
-    require('https').createServer({
-      key: fs.readFileSync(wo.Config.sslKey), cert: fs.readFileSync(wo.Config.sslCert) // , ca: [ fs.readFileSync(wo.Config.sslCA) ] // only for self-signed certificate: https://nodejs.org/api/tls.html#tls_tls_createserver_options_secureconnectionlistener
-    }, server).listen(wo.Config.port, function(err){
-      console.log('Server listening on %s://%s:%d for %s environment', wo.Config.protocol, wo.Config.host, wo.Config.port, server.settings.env)
+    // require('https').createServer({
+    //   key: fs.readFileSync(wo.Config.sslKey),
+    //   cert: fs.readFileSync(wo.Config.sslCert) // , ca: [ fs.readFileSync(wo.Config.sslCA) ] // only for self-signed certificate: https://nodejs.org/api/tls.html#tls_tls_createserver_options_secureconnectionlistener
+    // }, server).listen(......)
+    require('https').createServer(greenlock.httpsOptions, server).listen(wo.Config.port, function (err) {
+      if (err) console.log(err)
+      else console.log(`Server listening on ${wo.Config.protocol}://${wo.Config.host}:${wo.Config.port} for ${server.settings.env} environment`)
     })
   } else if ('httpall' === wo.Config.protocol) {
     let portHttp = wo.Config.port ? wo.Config.port : 80 // 如果port参数已设置，使用它；否则默认为80
-    require('http').createServer(server).listen(portHttp, function(err) {
-      console.log('Server listening on [%s] http://%s:%d for %s environment', wo.Config.protocol, wo.Config.host, portHttp, server.settings.env)
-    })
-
     let portHttps = (wo.Config.port && wo.Config.port !== 80) ? wo.Config.port + 443 : 443 // 如果port参数已设置，使用它+443；否则默认为443
-    require('https').createServer({
-      key: fs.readFileSync(wo.Config.sslKey), cert: fs.readFileSync(wo.Config.sslCert) // , ca: [ fs.readFileSync(wo.Config.sslCA) ] // https://nodejs.org/api/tls.html#tls_tls_createserver_options_secureconnectionlistener
-    }, server).listen(portHttps, function(err){
-      console.log('Server listening on [%s] https://%s:%d for %s environment', wo.Config.protocol, wo.Config.host, portHttps, server.settings.env)
+    greenlock.listen(portHttp, portHttps, function (err) {
+      if (err) console.log(err)
+      else console.log(`Server listening on [${wo.Config.protocol}] http=>https://${wo.Config.host}:${portHttp}=>${portHttps} for ${server.settings.env} environment`)
     })
   } else if ('http2https' === wo.Config.protocol) {
     wo.Config.port = wo.Config.port || 80
     require('http').createServer(express().all('*', function (ask, reply) {    /* 错误的API调用进入这里。*/
       reply.redirect(`https://${wo.Config.host}`)
     })).listen(wo.Config.port, function (err) {
-      console.log('Server listening on [%s] http://%s:%d for %s environment', wo.Config.protocol, wo.Config.host, wo.Config.port, server.settings.env)
+      if (err) console.log(err)
+      else console.log(`Server listening on ${wo.Config.protocol}://${wo.Config.host}:${wo.Config.port} for ${server.settings.env} environment`)
     })
   }