Use stronger certs to prevent browsers from whining (#572)

SpaceK33z · web-flow · commit 8983d460e0a6 · 2016-09-05T18:01:26.000+02:00
These certs use SHA-256 instead of SHA-1, which some browsers (especially Firefox) really don’t like.

Generated with:

```
openssl genrsa -out ca.key 2048
openssl req -x509 -new -nodes -key ca.key -sha256 -days 1024 -out ca.pem
openssl genrsa -out server.key 2048
openssl req -new -key server.key -out server.csr
openssl x509 -req -in server.csr -CA ca.pem -CAkey ca.key -CAcreateserial -out server.crt -days 500 -sha256
```
diff --git a/lib/Server.js b/lib/Server.js
@@ -281,7 +281,7 @@ function Server(compiler, options) {
 		// using built-in self-signed certificate if no certificate was configured
 		options.https.key = options.https.key || fs.readFileSync(path.join(__dirname, "../ssl/server.key"));
 		options.https.cert = options.https.cert || fs.readFileSync(path.join(__dirname, "../ssl/server.crt"));
-		options.https.ca = options.https.ca || fs.readFileSync(path.join(__dirname, "../ssl/ca.crt"));
+		options.https.ca = options.https.ca || fs.readFileSync(path.join(__dirname, "../ssl/ca.pem"));
 
 		this.listeningApp = https.createServer(options.https, app);
 	} else {
diff --git a/ssl/ca.crt b/ssl/ca.crt
diff --git a/ssl/ca.csr b/ssl/ca.csr
diff --git a/ssl/ca.key b/ssl/ca.key
@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXgIBAAKBgQDvXso/tgHx5GhqTB1/m36ifI/BdabrqkKDBoksZ9Tbe0IoUCZF
-L2SQbqHofgijDDq8AbJbqMX1aunI41Yn0rdyohXpyYPD4Kw9h94fWn832YPHJsO1
-OwPP/gwQfGt9YsihlvZjplIW0IjUwysKcm8riVSlPZG3F1n+2JiY8FytpwIDAQAB
-AoGBAOBggkTmXzxXVmkNoDkVkMbO7BH0LtuJZX9ciQjO64AxMfqH5tfDbQjWK367
-ZW0w8X16Oa4hri42YZ6lOwVpR/qkRd4gw74wQZU1rDwBeyblEAVaR39qsRshmNfE
-/T4Oc8itR1uz3lmams4e1GcQfo4jYk1FGBOtExEbnra+SDrBAkEA+oodUsD2S7qR
-ADotssjsxfXO9CUjIRjQIQrhVKBvxliRTy1Z2P9WGyd18LkcuOvRrJrg2SVecuHf
-1WUhEkcXJQJBAPSWW1JQqMKmpDLSxsJRrbi/TJlhFsar7wQ5/GQllenXFKSp9qcc
-FupvgKcphyhWYlrwtHWaamxd/fJu1TEzDdsCQAt39w+qtZuR1sFj6GOevvfw4KBc
-ctc5A43/qYDuNy+lLkGpmctNJOvpSoTSdHYilV6JWHGYPFKV9GEYWAM2LeECQQC+
-YCX2vUeOMu0Njhgc+jxw153EqNh0jTE+pe+497RnTf0Iai7NRcTkdyO5eU51bD+k
-L0UXYLjDXqmiQPh6EhYPAkEAkJxKNjCielMfNo3R8CPywSVCqDNj+GP2sh86DeoJ
-w6wi/geCkqZ2wEUg2EoAVbTW5sgPL/gBQaBHasa6mxJLyQ==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 -----END RSA PRIVATE KEY-----
diff --git a/ssl/ca.pem b/ssl/ca.pem
@@ -0,0 +1,23 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
diff --git a/ssl/server.crt b/ssl/server.crt
@@ -1,13 +1,19 @@
 -----BEGIN CERTIFICATE-----
-MIICBzCCAXACCQCUgTjpsCkEEDANBgkqhkiG9w0BAQUFADBIMQswCQYDVQQGEwJV
+MIIDDDCCAfQCCQCNymMB1zucZjANBgkqhkiG9w0BAQsFADBIMQswCQYDVQQGEwJV
 UzETMBEGA1UECBMKU29tZS1TdGF0ZTEQMA4GA1UEChMHd2VicGFjazESMBAGA1UE
-AxMJbG9jYWxob3N0MB4XDTE2MDMyNDIyNDA0MVoXDTIxMDMyMzIyNDA0MVowSDEL
+AxMJbG9jYWxob3N0MB4XDTE2MDgyNzE1MzE0N1oXDTE4MDEwOTE1MzE0N1owSDEL
 MAkGA1UEBhMCVVMxEzARBgNVBAgTClNvbWUtU3RhdGUxEDAOBgNVBAoTB3dlYnBh
-Y2sxEjAQBgNVBAMTCWxvY2FsaG9zdDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkC
-gYEAqdDfdc6+iQ+TGfCycS9OsCBWSAaFMJLMIo5iMKdsPdxxeOot0Zsz5HBPFPW0
-phpVH3kEDp0jg8A7OVftYFP7CdowXjVYq36tirOZc6uHEbwwffbUTRKIa0bTrQLN
-L5ALzxOJPnHm9v0rOseXcFMJn8NzaB7SdhHw1cDBFOXcXwUCAwEAATANBgkqhkiG
-9w0BAQUFAAOBgQAJYGfyYjgU07DDGjnj3RZziscnEX7r5PoJRnJZhBskfDugx1HV
-GCig7Po0jBrwmh/n9/AAGtX7i4Qu4c2TofVpp9I7C81vDXEkAR+VfgCaOofWLxMv
-cTfkZhkF8gfV5TZ3gs/tMiXXwxBT20+LfPOLdHVKjpnxnyTb091EvHbCdA==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 -----END CERTIFICATE-----
diff --git a/ssl/server.csr b/ssl/server.csr
@@ -1,11 +1,16 @@
 -----BEGIN CERTIFICATE REQUEST-----
-MIIBhzCB8QIBADBIMQswCQYDVQQGEwJVUzETMBEGA1UECBMKU29tZS1TdGF0ZTEQ
-MA4GA1UEChMHd2VicGFjazESMBAGA1UEAxMJbG9jYWxob3N0MIGfMA0GCSqGSIb3
-DQEBAQUAA4GNADCBiQKBgQCp0N91zr6JD5MZ8LJxL06wIFZIBoUwkswijmIwp2w9
-3HF46i3RmzPkcE8U9bSmGlUfeQQOnSODwDs5V+1gU/sJ2jBeNVirfq2Ks5lzq4cR
-vDB99tRNEohrRtOtAs0vkAvPE4k+ceb2/Ss6x5dwUwmfw3NoHtJ2EfDVwMEU5dxf
-BQIDAQABoAAwDQYJKoZIhvcNAQEFBQADgYEAfFHdkpd9GuY0EUAajTzKSkC8lGSU
-LgDX1iPXG1jO+K3IHcM5kyJOVg4spSAMo+guxwMt4+vmH+YKYwxn70Utc7dp47uA
-BMel4qBxDmoa3kdzLGDW8UePb4qOwDI6kPev238a9x5PNJypyelmDTEfndqssyq5
-o/UBgL3CJSENdVE=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 -----END CERTIFICATE REQUEST-----
diff --git a/ssl/server.key b/ssl/server.key
@@ -1,15 +1,27 @@
 -----BEGIN RSA PRIVATE KEY-----
-MIICXAIBAAKBgQCp0N91zr6JD5MZ8LJxL06wIFZIBoUwkswijmIwp2w93HF46i3R
-mzPkcE8U9bSmGlUfeQQOnSODwDs5V+1gU/sJ2jBeNVirfq2Ks5lzq4cRvDB99tRN
-EohrRtOtAs0vkAvPE4k+ceb2/Ss6x5dwUwmfw3NoHtJ2EfDVwMEU5dxfBQIDAQAB
-AoGAGGiZdgl9gZ3nevcJ7xLpsI81V6z4P/8ZsG3e1zd5a3rgJI0kgNhaIR+zfkPC
-740hZyCx4JfdnvZmjNuClzH7BzeM6JizrqvOei/7TW6KLPl2y7Ju0z+Y33xR0axv
-+oVRqYRKFknOBw5HrH5vCqhSl/IoVFeRfJkxoQiFPaifbJECQQDVZpKPS7lkDFFn
-gvWNdb1LgaYcgwIAtft6O8tJ9vfdWtQ8fQfHOsJqIG1RA/AmxRCAp4LGd8LI+r0A
-x47u8v1rAkEAy7b8Tf32I9anBbceu7NQNeFALRUGaTeqd6jJF+id9DxDLzfXxTAm
-U2ArU7HMt+tqED3AK7xQEsQIKxiNvZhBTwJAbQ2M6gOlivYsh3xKJe88PCDWFY3x
-cRGOoMl7uqGlyw3Gld7DIdHqVjeaBaPAjt937ncsAmZjOTfBbGuOpJeyXwJAIcth
-X67ZvmhFnPUb7Bd7HvUXKGNshNfvN5qQgZ7dVT8KBjNFYDj0orA5f9DnHTu4hKk5
-0AeVYQeUM1IHcYRokQJBALlYi84jN6V3m7W0HHSdRPwCyaSOxkW4J+VYAE4KE39C
-94QrbMBl0ATPhdU2DVpd5uMjc7k3lXh2SoLjPx/85ak=
+MIIEowIBAAKCAQEA2UeC4bUhWXrFkkJFfcQu2OmAtzh2mnRLcEr3Kdk/Ri8Vhw9U
++IQDWQ3G8WQ34wqf0km/OVleUjfkRmhGNEQUj89q+ZyWcEi0xj0rxP2gS5Ca8Uoj
+Fpw6LrqqTXNQm3BEH0iHNmbYIGSaFyKBGCKJtYADH8Z2lpeEtag4/AwPpAbVA8mt
++ebB7vL3S2nByzh2x5rvu7IvflRTEzsNoyKrm5VKFV3jo0Rf1UfrNjdpvh9PGTA8
+nrpwkcItH2RoQtBuSACtIBmVPzqgbmIp6DOpt2FjLi/Iz3JGM2piiZa+XDypZuon
+LGYvkEQtMgNbldfoOHiOZ76QPNJPCSSMVfn2FQIDAQABAoIBAGIiilqnFIj1ioak
+p/5FvWL7E8etGORp4ii1syyTkqCAY5i8tAQKm/h84H3mZdeF1OmFpXihhJhd5hxm
+vE6e8SqC5C4ZK1lLfVqMBljStLNsfI6+jVqI9T5l0MVqb93Etv/qIifQC42V4oLQ
+cr4T216+kqqnWKhrhuUFNbehOu850a+tCFPd8LDS1Gvwb5WZBViCzm4/lqcI7d/Q
+btNZ605b8KN/prIYBzSvNAaxOCRCtTHKg/kQ4/6XBpxZNq2DcjL444juT6RNIexm
+XiHPt5gYY7vn9PGhNy9TXUfCwsIX94x0amB7HbDY4wEnCKkAGp4aGICYRb8BTSP7
+p17XM4ECgYEA7S4enmBeJgdHG5gb0oThVNzmJ3D9P9gPRgIPpPTWoenedx5Qd7Ku
+IaxsJDZ9ZGfoLpYEM0bGr4gKW31JwfKTLHnMktBqcXVaGtqdq72wV4ne8X39SsS9
+CUxKk+/of92PckRDjBWmiNXqUmgqBNB9W5JJCDkkQ7U7NJV76RSlBrMCgYEA6oUk
+oFXzZc9JSZVfaLgDUaTkme0KsDcEYsk6OicqAiZxXebcEh38bIt3hBx2x28rAZ13
+ZyIUtqoA1nKA4paWGTSB9Bpkes5VQmGaVbBX7V7pKCwVSYN1gfLu/SM6eASsKdAS
+5aHo52KzWiXsEtOrVMKDL5pkjaSWuLYBGggONBcCgYEAsmDSRFjD1iP5FcbDfgPU
+GGf+bMFspfyQGB3quCwv1Bw45SuWZz+p+MddmaqlicMf+xF2XT4opdFRwNcshsIy
+b+u2sOAwfd49gx7SIF0MZ/nYA5W2zunCJmELYdG38ZqnjM/MYWnTEuyXS5ztpStM
+bHdLl/Sp0oZV3cljJLwTFUMCgYBMrcPP+MpgW2om+QP9BU1wgG2ONobsHtD8S7cS
+FIQTt+YRQc5qzgseomstcvETPDHfkVDdE7OaFfO4KjAh5gKlsxlaata3oIcX8Tm5
+ErNtFT8+t0sugiEFoByr/7y6SSzRbwr+sfWo0gi6TPPnI/Y8/GxQQDboaQwu0LOD
+g2bBeQKBgAMK6U3d64J01ve2McZwowyp3LbWpoIyQ9H2Ulaf2bV5jO7kGo/nzyM9
+SlmYRtNuDT++djmkue5mxLO5khvPm6TrSxRluwUz2iVz4BEDkTT4fOxq2Xq1TrMe
+UYpfzRml/XZtUOzL0fHXGckCNXb4wnC2f5kMIT9QMVhB2Srqgjrz
 -----END RSA PRIVATE KEY-----
