Question

stack：nodejs4，chai，jdom。目标是编写一个测试，询问Web应用程序中URL的HTML，该Web应用程序只能通过企业内部网中的SSL访问。

我正在使用jsdom编写一个mocha测试，我收到了SSL证书错误：

    { Error: unable to verify the first certificate
  at Error (native)
  at TLSSocket.<anonymous> (_tls_wrap.js:1060:38)
  at emitNone (events.js:86:13)
  at TLSSocket.emit (events.js:185:7)
  at TLSSocket._finishInit (_tls_wrap.js:584:8)
  at TLSWrap.ssl.onhandshakedone (_tls_wrap.js:416:38)
 code: 'UNABLE_TO_VERIFY_LEAF_SIGNATURE' }

我有以下测试代码：

var chai = require('chai');
var jsdom  = require('jsdom');
var expect = chai.expect;

https = require('https');
fs = require('fs');

var cas = require('ssl-root-cas/latest').inject().addFile('test/ssl/key.pem').addFile('test/ssl/server.crt');
//process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
https.globalAgent.options.ca = cas;

jsdom.env(
 "https://www.example.com",
 ['https://www.example.com/jquery-1.10.2.js'],
  function(err, window) {
    if(err){
      console.log(err);
    } else {
      console.log("contents of the research project input box is:", window.$("#field_cell_1840 input.custom-combobox-input").text());
    }
  }
);

我在test / ssl中生成了这样的键：

openssl req -newkey rsa:2048 -new -nodes -keyout key.pem -out csr.pem
openssl x509 -req -days 365 -in csr.pem -signkey key.pem -out server.crt

我已经跟踪了各种主题，并在https://github.com/coolaj86/node-ssl-root-cas中尝试了一些建议，包括使用process.env.NODE_TLS_REJECT_UNAUTHORIZED =＆＃34; 0＆＃34;

等不良主意。

当我执行curl -vk https://www.example.com时，我得到以下输出：

ac2f15@UOS-012145  ~/git/NodeJS/test (master)
$ curl -vk https://www.example.com
* Rebuilt URL to: www.example.com
* timeout on name lookup is not supported
*   Trying 192.168.168.116...
* Connected to www.example.com (192.168.168.116) port 443 (#0)
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: C:/Program Files/Git/mingw64/ssl/certs/ca-bundle.crt
  CApath: none
* TLSv1.2 (OUT), TLS header, Certificate Status (22):
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* TLSv1.0 (IN), TLS handshake, Server hello (2):
* TLSv1.0 (IN), TLS handshake, Certificate (11):
* TLSv1.0 (IN), TLS handshake, Server key exchange (12):
* TLSv1.0 (IN), TLS handshake, Server finished (14):
* TLSv1.0 (OUT), TLS handshake, Client key exchange (16):
* TLSv1.0 (OUT), TLS change cipher, Client hello (1):
* TLSv1.0 (OUT), TLS handshake, Finished (20):
* TLSv1.0 (IN), TLS change cipher, Client hello (1):
* TLSv1.0 (IN), TLS handshake, Finished (20):
* SSL connection using TLSv1.0 / DHE-RSA-AES256-SHA
* ALPN, server did not agree to a protocol
* Server certificate:
*        subject: OU=Domain Control Validated; CN=sitepublisher-dev.soton.ac.uk
*        start date: Dec  9 00:00:00 2014 GMT
*        expire date: Dec  8 23:59:59 2017 GMT
*        issuer: C=NL; ST=Noord-Holland; L=Amsterdam; O=TERENA; CN=TERENA SSL CA 2
*        SSL certificate verify result: unable to get local issuer certificate (20), continuing anyway.
> GET / HTTP/1.1
> Host: srv00700.soton.ac.uk
> User-Agent: curl/7.46.0
> Accept: */*
>
< HTTP/1.1 302 Found
< Date: Mon, 10 Oct 2016 16:09:05 GMT
< Server: Apache/2.2.22 (Unix) mod_ssl/2.2.22 OpenSSL/0.9.8e-fips-rhel5
< Location: https://www.example.com/
< Content-Length: 358
< Content-Type: text/html; charset=iso-8859-1
<
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>

我的问题是，是否有人在https网址上使用jdom进行了成功的chai测试？如果是这样，请与我分享您的经验？

chai错误：无法验证第一个证书

0 个答案: