Skip to content

Commit ab14d55

Browse files
committed
Remove SSL mutual auth requirement from https option
This removes the whole mutual-authentication aspect of the SSL handshake. For many people, a server requesting an SSL client cert means an OS X keychain pop up to unlock the System keychain -- 😨 🔪
1 parent dbdc73a commit ab14d55

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

lib/Server.js

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -191,9 +191,7 @@ function Server(compiler, options) {
191191
// using built-in self-signed certificate
192192
key: options.key || fs.readFileSync(path.join(__dirname, "../ssl/server.key")),
193193
cert: options.cert || fs.readFileSync(path.join(__dirname, "../ssl/server.crt")),
194-
ca: options.ca || fs.readFileSync(path.join(__dirname, "../ssl/ca.crt")),
195-
requestCert: true,
196-
rejectUnauthorized: false
194+
ca: options.ca || fs.readFileSync(path.join(__dirname, "../ssl/ca.crt"))
197195
}, app)
198196
: http.createServer(app);
199197
}

0 commit comments

Comments
 (0)