NodeJS http-proxy: DEPTH_ZERO_SELF_SIGNED_CERT error when proxying https

Question

I follow the online examples using the latest version of nodejs and http-proxy, but I get the following error when my request is sent to the endpoint https server:

C:\Users\Me\node_modules\http-proxy\lib\http-proxy\index.js:114 throw err; Error: DEPTH_ZERO_SELF_SIGNED_CERT at SecurePair.<anonymous> (tls.js:1370:32) at SecurePair.EventEmitter.emit (events.js:92:17) at SecurePair.maybeInitFinished (tls.js:982:10) at CleartextStream.read [as _read] (tls.js:469:13) at CleartextStream.Readable.read (_stream_readable.js:320:10) at EncryptedStream.write [as _write] (tls.js:366:25) at doWrite (_stream_writable.js:226:10) at writeOrBuffer (_stream_writable.js:216:5) at EncryptedStream.Writable.write (_stream_writable.js:183:11) at write (_stream_readable.js:582:24) 

My code is very simple:

 var httpProxy = require('http-proxy'); var http = require('http'); var fs = require('fs'); var apimcert = fs.readFileSync('./mycert.pfx'); var proxy = httpProxy.createProxyServer({}); var options = { pfx: apimcert, passphrase : 'pAssw0rd', rejectUnauthorized : 'false', agent: false }; var server = require('https').createServer(options, function(req, res) { console.log("Got a request " + req); proxy.web(req, res, { ssl: { pfx : apimcert, passphrase : 'pAssw0rd', rejectUnauthorized : 'false' //strictSSL: false }, target: 'https://endpointhost:9443/postev', secure: true } ); }); console.log("listening on port 9442") server.listen(9442); 

If I set secure : false , then the request is sent to the endpoint, but explicitly sent back with the forbidden answer 403. The certificate and passphrase that I use are my endpoint servers, and I tested their operation when sending the request directly. All I want my proxy server to do is check the contents of the requests, write a message for each of them, and then redirect to the endpoint server.

I ran into this problem and tried messing with agents and strictSSL, but to no avail.

Answer 1

Try passing {rejectUnauthorized: false} to httpProxy.createProxyServer()

Answer 2

I had the same problem: if you look at the source of the http-node-proxy , you will see that it actually sets rejectUnauthorized based on your secure parameter in the parameters:

if (options[forward || 'target'].protocol == 'https:') { outgoing.rejectUnauthorized = (typeof options.secure === "undefined") ? true : options.secure; }

That way, you can easily set rejectUnauthorized to false simply by passing secure: false to your httpProxy.createProxyServer call.

Answer 3

an easy way is to simply add this to your code,

process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";

who solved my problem

Answer 4

respond to application creation

package.json file

`` `" proxy ": {

 "/credit": { "target": "https://xxxx.com", "changeOrigin": true, "secure": false } 

} `` ``