Hello sir, I am working on a school project for an Android application. For the backend side of things, I created an express rest api (it does not serve any Web page). I am looking for a way to secure communications between m'y Android app and my express server with an ssl certificate. Would self signed certificates be a problem for this use case ? Since I do not need to access the api through a Web browser, i'm guessing i Would never see this browser warning for invalid certificate right ? Do i need to apply further workaround for communication between my Android app and the server, or between postman and the server ? I have not tried your method as of yet, but thank you for your clear explanation, it seems so simple and straight forward thanks to you. Cheers
Great Tutorial.. SSL certificates expire after a certain time period like 90 days for Let's Encrypt and generate fresh certificates using AutoSSL or upon renewal. Updating the options variable and restarting the server is a pain in such case. How to update the Node.js app to automatically retrieve valid certificate files from given directories, removing needs to replace hard-coded paths and reboot.
Hey man just watched your video and subscribed it,but how do we install openssl on windows 10 for keys and certificates you did looking for your answers
Refer this article for more detailed explanation of what’s going on www.devco.net/archives/2006/02/13/public_-_private_key_encryption_using_openssl.php
@@mafiacodes but I got the certificates like 2 security certificates,1pem file,1key file and 1more request certificate file I have confusion in this which one need use place of cert please any solution you have share me
Certificate is most likely the pem file, private key is the key file and other file is just a certificate signing request, so use the pem as certificate and key as private key. Do let me know if all works fine.
hi yesterday i asked a doubt about shopping cart project i rectified it and it tried to change the image of the iphone to another image it executed but it did not display any change and the area was blank so can you tell me want is the criteria for and image what format should it use and how much size it should be thanks for answering yesterday and now in advace :) if want more details i will contact you through email :)
@@mafiacodes i tried to change the image of the iphone in the shopping crt project so i copied a link from goolge and pasted it in the requied place but after running the application the area was blak why it is blank
Is there a disadvantage of using this local certificate other than the browser not trusting it? For context: Let's say there is a website that would be only be used by a small number of people and they know what is going on the server side and so they have no problem trusting that certificate. In this case, it would be fine to use that right? Now that I wrote this down I remembered that somehow custom certificates can be added to the browser to be trusted, to handle that as an exception of unknown authors. I think there is something like that.
It is a absolutely 100% fine using this certificate for the use case you defined. And as far as trusting goes may be u can add this as a trusted certificate as u mentioned but I am unaware of it.
Did everything as you said, but getting certificate invalid in my browser. Found the error due to self signed certificate. How to add ca signed certificate?
It can be done but since it’s a development certificate so you can generate it for as long as you want even 10years or even more, for a production SSL you should get a certificate from a certificate authority and then definitely you can handle auto renewals using the said callbacks or even create a cron for the same.
Hello good Morning The following error is happening to me with the app started and when trying to access from the web browser An error occurred connecting to localhost: 3000. You cannot communicate securely with the other party - there are no common encryption algorithms. Error code: SSL_ERROR_NO_CYPHER_OVERLAP
@@mafiacodes If the following happens to me with chrome: ERR_SSL_VERSION_OR_CIPHER_MISMATCH Protocol not supported The client and the server do not support the same version of SSL or encryption protocol. Thank you for all!
Do you know how the RUclips stream video in different qualities (240p, 360p,...) For android app. Can you help me to build RUclips like video streaming app with video quality control.
RUclips use Media source API to do this and is quite difficult to implement, instead you use some protocole which do the hard work for you on server side like hls, hds, dash and for the client android have already implement these protocol so you just need to use exoplayer api
sir this is not a valid certificate i works on service workers which only works in https context i do a same as u do but same the errors comes https requires for service workers so sir how to install a valid ssl certificate for node js local development purpose
I think u haven’t watched the full video till the end, since I explained this thing that THIS IS FALSE POSITIVE, since u r a certificate authority and chrome does not know that that’s why ur getting this error but cert is 💯% valid, should be used for developing
Hi when Im writing openssl x509 -req -days 365 -in -csr.pem -signkey key.pem -out cert.pem noting happens, the terminal just prints out "Use -help for summary". What am I missing? When I did the previous command of req it said it couldnjt find a file openssl.conf Can you please help? Thanks
best tutorial ever !!!! simple, straightforward, and foremost -> working!!! thx boss
The Best ever knowledgeable Nodejs Advanced series i have found to expand my knowlage , Thanks !
Glad to hear that!
you're a great teacher!! very clear instruction
Thank you so much, watching your video helped me understand how the certificate works.
The only one that could explain it properly!
how did you change your terminal font and color
thank bro. I am stuck in this problem and can't able to find the way out but u solve it in once .
That keyboard . That coding. Omg thx 😃
Best video on ssl. Thanks a lot .
I love the way you explain it keep it up😍😍
Great tutorial! Short and Clear.
Very precise and clear explanation
Subscribe like share
Perfect, thank you! 🖤
It was a great help to me, thank you
Excellent... realy realy thank you. It's great.
Truly helpful. Thank you for such value !
This is very very helpful. Your way of teaching is awesome!! Please make some more videos on Node js. Thanks a lot
Thanks for the video . Very helpful.
Thank you very much for the nice lesson 💐
Make more content on node js ❤️🔥
thanks for your video, it''s help me so much !
Subscribe like share
Yes!!! Thank you so much! Explained beautifully! Liked the video! :)
loved your content bro
Thank you so much! Reaally well explaind an all.. love
Thank you so much, works for me. 1000 likes for you
Glad it helped
Amazing content bro😍🔥
Thanks 🔥
Thank you so much! Solved my problem
You're a legend tbh. When will you be doing some typescript stuff
Soon sometime
Great tutorial!
Thank you very much
Subscribe like share
thank you!
Simple,Crisp and clear
thanks bro
well explained
you're a man! thanks
Glad it helped!
Thanks a lot! This saved me in an assignment!
thank you 🙂
Great video! Can I ask you which VSCode theme / Color Scheme / Font do you use? The code is so readable and beautiful
Font used operator mono
nice sir, you are really jental man and my coach
thank u sir 👍
So nice of you
thanks a lot!
thank you .
Can this procedure be used for production purposes
How to download openssl? I cant use the command openssl
Can this same method be used for development purposes
This is a very good video. Thank you for sharing.
good stuff brother!
Can I ask you which VSCode theme / Color Scheme / Font do you use?
TOP!! thank you
Thank you !!! =D
Subscribe like share
Hello sir, I am working on a school project for an Android application. For the backend side of things, I created an express rest api (it does not serve any Web page). I am looking for a way to secure communications between m'y Android app and my express server with an ssl certificate. Would self signed certificates be a problem for this use case ? Since I do not need to access the api through a Web browser, i'm guessing i Would never see this browser warning for invalid certificate right ? Do i need to apply further workaround for communication between my Android app and the server, or between postman and the server ?
I have not tried your method as of yet, but thank you for your clear explanation, it seems so simple and straight forward thanks to you. Cheers
It won’t be a problem you can use the method as described in this video
@@mafiacodes thanks a lot i will give it a try tonight
Why ssl is need for nodejs development server?
Thanks alot
Great Tutorial..
SSL certificates expire after a certain time period like 90 days for Let's Encrypt and generate fresh certificates using AutoSSL or upon renewal. Updating the options variable and restarting the server is a pain in such case. How to update the Node.js app to automatically retrieve valid certificate files from given directories, removing needs to replace hard-coded paths and reboot.
amazing thanks :D
Subscribe like share
Hey man just watched your video and subscribed it,but how do we install openssl on windows 10 for keys and certificates you did looking for your answers
This would be helpful stackoverflow.com/questions/50625283/how-to-install-openssl-in-windows-10
Thanks truly helpful
after finding 100s of solution only this one works fine
how do you do this in Next JS, at getServersideProps environment? I believe the server is in node JS
The file key.pem contains both public as well as the private key or only the private key?
private key only @ 5:34
@@mafiacodes Ok thanks. Where can I find corresponding public key?
U need to generate one
@@mafiacodes key.pem contains a key pair. Refrence: stackoverflow.com/questions/44474516/how-to-create-public-and-private-key-with-openssl
Refer this article for more detailed explanation of what’s going on www.devco.net/archives/2006/02/13/public_-_private_key_encryption_using_openssl.php
Perfect explanation. Thank you :) Can we make this certificate as trusted certificate.
You helped me
I ask God to help you bro
Thank u a ton
PERFECT....
Good one
Thank u bro your so good
Glad I could help
Is it now really encrypted or not?
Yes it is,
I followed the tutorial an it successfull on the backend but I also need https on the frontend that build with react too
Hi I need help I have downloaded certificate and key from GoDaddy but I don't have how to integrate it in nodejs
U can use those cert files the same way we have used our own generated files...just simple replace it with ur own downloaded files...
@@mafiacodes but I got the certificates like 2 security certificates,1pem file,1key file and 1more request certificate file I have confusion in this which one need use place of cert please any solution you have share me
Certificate is most likely the pem file, private key is the key file and other file is just a certificate signing request, so use the pem as certificate and key as private key. Do let me know if all works fine.
how do you manage to write openssl in visual studio code terminal?
It’s simply a terminal inside vscode, the same terminal which we use without vscode, or I am not able to understand what exactly u mean?
openssl is already installed in mac, u need to install it in win 10 and linux.... is what I heard
@@sushilrai2290 Most UNIX OSs like MacOS and Linux already have openssl integrated.
✅
hi yesterday i asked a doubt about shopping cart project i rectified it and it tried to change the image of the iphone to another image it executed but it did not display any change and the area was blank so can you tell me want is the criteria for and image what format should it use and how much size it should be thanks for answering yesterday and now in advace :) if want more details i will contact you through email :)
What is the context of ur question - I don’t get it bro
@@mafiacodes i tried to change the image of the iphone in the shopping crt project so i copied a link from goolge and pasted it in the requied place but after running the application the area was blak why it is blank
Coz the link might not refer to the image - share the link of image which ur using
@@mafiacodes mittal please answer images.app.goo.gl/3ur8QkdGY81uzHzx5 this is the link mittal please answer
Dude which font are you using?
operator mono
will this work on aws ec2 instance ?
It will
Is there a disadvantage of using this local certificate other than the browser not trusting it?
For context:
Let's say there is a website that would be only be used by a small number of people and they know what is going on the server side and so they have no problem trusting that certificate. In this case, it would be fine to use that right? Now that I wrote this down I remembered that somehow custom certificates can be added to the browser to be trusted, to handle that as an exception of unknown authors. I think there is something like that.
It is a absolutely 100% fine using this certificate for the use case you defined. And as far as trusting goes may be u can add this as a trusted certificate as u mentioned but I am unaware of it.
Hi video good ,but can expalin cert generation using letsencrypt
Thanks
How to deploy this on heroku?
use Zeet: zeet.co/r/yourstruly
If I use websocket now, is this also safe?
yup it is...
self signed certs suck though!
Did everything as you said, but getting certificate invalid in my browser. Found the error due to self signed certificate. How to add ca signed certificate?
you need to have a valid domain, use that domain to get a free certificate for a CA, like let's encrypt for free certificates or any other paid CA.
@@mafiacodes bro localhost pe project bnaya hai aur hame bol rhe hain ki http ko https me transform kro.. Without domain kaise krein
how to listen to ssl renewal and serve automatically?
This is a manually generated ssl, so u need to do a cron job and then issue the command again
@@mafiacodes But can't it be handled inside the node-server? with SNICallbacks?
or TLS
It can be done but since it’s a development certificate so you can generate it for as long as you want even 10years or even more, for a production SSL you should get a certificate from a certificate authority and then definitely you can handle auto renewals using the said callbacks or even create a cron for the same.
@@mafiacodes Thanx bro!
Hello good Morning
The following error is happening to me with the app started and when trying to access from the web browser
An error occurred connecting to localhost: 3000. You cannot communicate securely with the other party - there are no common encryption algorithms.
Error code: SSL_ERROR_NO_CYPHER_OVERLAP
Share code on GitHub
@@mafiacodes Hi, this github.com/sergiopj/photo-translator-backend
thank you for all!!
Most likely issue with Firefox, seems ur using that?
Try chrome
@@mafiacodes If the following happens to me with chrome:
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Protocol not supported
The client and the server do not support the same version of SSL or encryption protocol.
Thank you for all!
The value "/cert.pem" is invalid for option "encoding",
what do I do in this case, PLEASE HELP ME!!!
Follow the steps again, probably u r using the wrong certificate, if still gives error revert back
How can I write rocket on console.log like thatt^o^?, thanks you
Just a simple emoji
yes its invalid ssl across all browsers
Do you know how the RUclips stream video in different qualities (240p, 360p,...) For android app. Can you help me to build RUclips like video streaming app with video quality control.
RUclips use Media source API to do this and is quite difficult to implement, instead you use some protocole which do the hard work for you on server side like hls, hds, dash and for the client android have already implement these protocol so you just need to use exoplayer api
💯
@@MrMedzoo thanks
sir this is not a valid certificate i works on service workers which only works in https context i do a same as u do but same the errors comes https requires for service workers so sir how to install a valid ssl certificate for node js local development purpose
It’s 💯% valid certificate, it’s only that chrome or other browser does not recognise the certificate authority. You can use it for Dev purposes.
I followed your instructions and Chrome gave me: Your connection is not private
NET::ERR_CERT_INVALID
I think u haven’t watched the full video till the end, since I explained this thing that THIS IS FALSE POSITIVE, since u r a certificate authority and chrome does not know that that’s why ur getting this error but cert is 💯% valid, should be used for developing
@@mafiacodes I am also getting this error but not getting response message: "Hello from ssl server". How to fix it?
You get free certificate from aws
Well u can get it from let’s encrypt also BUT the point is u need to provide a domain there, and in development u might not have a domain
ฉันเป็นไทย และตอนเวลาประมาณ 4:00 ฉันอ่านคำบรรยายไม่ทันเลย😅
How to generate and use SSL certificate in NodeJS
You saved my ass!
If an error page shows, just click anywhere in the page and you can also type "thisissecure" without the " and the page then loads.
you should show how to make a certificate from an authority because this example is useless in production
ruclips.net/video/2SzgmTIuHRU/видео.html
ERR_INVALID_OPT_VALUE_ENCODING
On which command?
too much typing sound.
Hi when Im writing openssl x509 -req -days 365 -in -csr.pem -signkey key.pem -out cert.pem noting happens, the terminal just prints out "Use -help for summary". What am I missing?
When I did the previous command of req it said it couldnjt find a file openssl.conf
Can you please help?
Thanks
Probably because of "-csr.pem" ? The hyphen makes it look like an option and not a value
Legend
Thank you very much