pm2 SSL/https connection

[Abhilasha Kumar]

Hi, 

I'm trying to enable a HTTPS connection to my game via pm2. I followed the instructions on this page: https://github.com/nodeGame/nodegame/wiki/HTTPS 

I was able to get the SSL certificate and private key files into the node_modules/ssl folder. This might be a simple question but how do I use pm2 to use the SSL certificate and make that default? 

So far i've been using  pm2 start launcher -- --default mygame which runs over http. What do I change to get it to use https?

Thanks!

Abhilasha

[Stefano Balietti]

Hi!

Have you tried:

pm2 start launcher -- --ssl --default mygame

Best,

Stefano

--
You received this message because you are subscribed to the Google Groups "nodeGame" group.
To unsubscribe from this group and stop receiving emails from it, send an email to nodegame+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/0290557b-7e53-4a5e-a4cc-895ff9a89c9bn%40googlegroups.com.

[Abhilasha Kumar]

Hi, I just tried this, and I get an error when I try to connect. Any ideas why this won't work?

[Stefano Balietti]

Hi,

I am not sure. Please try these steps without pm2 first:

- Create a ssl directory inside the root dir (e.g., nodegame-v-7.x-x/) 

- Copy inside ssl directory two files: private.key and certificate.pem

- Start server with option --ssl ssl (that is the path to the ssl directory)

Open browser to https://address:port

Does it work?

Best,

Stefano

To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/e21f6208-9198-4a15-b33f-f8fe2df3d1b5n%40googlegroups.com.

[Abhilasha Kumar]

Hi, thanks for the input. So my SSL files (the certificate.pem and private.key) are stored inside nodegame-v7.1.0-dev/node_modules/nodegame-server/ssl. 

So, I ran the following: 

node launcher --ssl node_modules/nodegame-server/ssl

after which I get the following output:

I'm assuming this means the game is getting started (I haven't added authorization codes yet but will do). But I am not able to open it in the browser. I tried https://159.65.233.69 by itself, but also tried it with 3 different ports (https://159.65.233.69:80 or https://159.65.233.69:22 or https://159.65.233.69:443) but no luck. Have I not stored the correct SSL files? I used ZeroSSL to install the certificate and was able to verify the SSL so I assumed I did it correctly but maybe not?

Abhilasha

You received this message because you are subscribed to a topic in the Google Groups "nodeGame" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/nodegame/uMzwGY0oWWo/unsubscribe.
To unsubscribe from this group and all its topics, send an email to nodegame+u...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/CAMSNNMmD_nku96uUQm0YVxnadbUp-fAGFdNEKa8v2sDapvei5Q%40mail.gmail.com.

[Stefano Balietti]

Hi,

If you are using the default nodeGame droplet from the marketplace, then there is Nginx as a reverse proxy server in front of node. So, you need to actually handle ssl via Nginx. Here are the steps:

https://github.com/nodeGame/nodegame/wiki/HTTPS#nginx-handling-https

The command to restart nginx is:

systemctl restart nginx

Let me know if it works for you.

Best,

Stefano

To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/CAGGPeqkiR7cwFaoaynb6VU_MKQS6i8_VtdRCY6XUmDZGXXUEow%40mail.gmail.com.

[Can Çelebi]

Hello,

I had a similar issue recently. I ended up using certbot to get an ssl for free (even though I bought one). If you are using digital ocean and got the default nodeGame droplet from the marketplace then you can follow these steps to certify your domain from the server console.
https://certbot.eff.org/instructions?ws=nginx&os=ubuntubionic

Note that I have also enabled let's encrypt feature from the digital ocean dashboard (but this did nothing on its own). I am not sure whether having this feature enabled was necessary to the the above steps or not. You can find how to enable let's encrypt from digital ocean in digital ocean's tutorial section.

Best,

Can

[Abhilasha Kumar]

Hi Stefano,

I see - thanks for the input, I am indeed using the nodeGame droplet from the marketplace. So I tried to change the default file inside root/etc/nginx/sites-enabled and then restart nginx but I get the following error "Job for nginx.service failed because the control process exited with error code.See "systemctl status nginx.service" and "journalctl -xe" for details"

When I try "systemctl status nginx.service" the following output is produced:

Any thoughts?

Thanks,

Abhilasha

To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/CAMSNNMkMuxL0bQhHSnOTA0TPdS3uvyiEB-%3DcnvsxzQYpQcooqg%40mail.gmail.com.

[Stefano Balietti]

That is generally due to an error in the configuration file. It takes a couple of attempts to get it right, but it is generally a semicolon missing at the end of the row. You can check the nginx logs under, I believe, /var/logs/nginx or similar.

To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/CAGGPeqnYH0gLc3_0E%3DCK_7xPZABUNH6kAAdyN4o2Fii4boiPoQ%40mail.gmail.com.

[Abhilasha Kumar]

Voila! Had to fix the path to the SSL certificate - thanks for the tip about checking the logs! It's working now :) 

Abhilasha

To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/CAMSNNMnU-keZ1pPtA0VcbbRruZofnc23fiwerVTP0kc-xcEBZA%40mail.gmail.com.

[Stefano Balietti]

Great!

To view this discussion on the web visit https://groups.google.com/d/msgid/nodegame/CAGGPeq%3DiabF1oiDmPQnedVaNf9tNf72VBpLcA9wJumdvLp4wDQ%40mail.gmail.com.