verdaccio/website/translated_docs/zh-HK/ssl.md

id	title
ssl	Set up the SSL Certificates

Follow this instructions to configure a SSL certificate to serve NPM registry under HTTPS.

• Update the listen property in your ~/.config/verdaccio/config.yaml:

  listen: 'https://your.domain.com/'

Once you update the listen and try to run verdaccio again will ask for certificates.

• Generate your certificates

  $ openssl genrsa -out ~/.config/verdaccio/verdaccio-key.pem 2048 $ openssl req -new -sha256 -key ~/.config/verdaccio/verdaccio-key.pem -out ~/.config/verdaccio/verdaccio-csr.pem $ openssl x509 -req -in ~/.config/verdaccio/verdaccio-csr.pem -signkey ~/.config/verdaccio/verdaccio-key.pem -out ~/.config/verdaccio/verdaccio-cert.pem

  
  * Edit your config file `~/.config/verdaccio/config.yaml` and add the following section
  
  
  
  

https: key: ~/.config/verdaccio/server.key cert: ~/.config/verdaccio/server.crt ca: ~/.config/verdaccio/server.ca

<br />Alternatively, if you have a certificate as `server.pfx` format, you can add the following configuration section. The passphrase is optional and only needed, if your certificate is encrypted.

https: pfx: ~/.config/verdaccio/server.pfx passphrase: 'secret' ````

More info on the key, cert, ca, pfx and passphrase arguments on the Node documentation

• Run verdaccio in your command line.

• Open the browser and load https://your.domain.com:port/

This instructions are mostly valid under OSX and Linux, on Windows the paths will vary but, the steps are the same.

Docker

If you are using the Docker image, you have to set the PROTOCOL environment variable to https as the listen argument is provided on the Dockerfile, and thus ignored from your config file.

You can also set the PORT environment variable if you are using a different port than 4873.