
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@ind.ie/https-server
Advanced tools
An HTTPS server that uses nodecert.
npm i -g @ind.ie/https-server
https-server [folder-to-serve] [port]
Both arguments are optional. Currently, if you want to specify the port manually, you must also specify the folder-to-serve.
[folder-to-serve] defaults to . (the current directory)[port] defaults to 443 (automatically privileges Node.js to bind to it on Linux. This is not an issue on macOS & Windows.)If you do not already have TLS certificates, they will be created for you automatically using nodecert.
All dependencies will be installed automatically for you if they do not exist if you have apt, pacman, or yum (untested) on Linux or if you have Homebrew or MacPorts (untested) on macOS.
http-server provides a createServer method that behaves like the built-in https module’s createServer function so anywhere you use https.createServer, you can simply replace it with httpsServer.createServer.
options: (Object) Accepts options from tls.createServer(), tls.createSecureContext() and http.createServer(). Populates the cert and key properties from the automatically-created nodecert certificates and will overwrite them if they exist in the options object you pass in.
requestListener: (Function) A listener to be added to the 'request' event.
Returns: https.Server instance, configured with locally-trusted certificates.
const httpsServer = require('https-server')
const express = require('express')
const app = express()
app.use(express.static('.'))
const server = httpsServer.createServer(options, app).listen(443, () => {
console.log(` 🎉 Serving on https://localhost\n`)
})
port: (number) the port to serve on. Defaults to 443. (On Linux, privileges to bind to the port are automatically obtained for you.)
const httpsServer = require('https-server')
// Serve the current directory over https://localhost
const server = httpsServer.serve()
I can use your help to test https-server on other the following platforms:
Please let me know how/if it works. Thank you!
FAQs
Deprecated, please use @ind.ie/web-server instead.
The npm package @ind.ie/https-server receives a total of 2 weekly downloads. As such, @ind.ie/https-server popularity was classified as not popular.
We found that @ind.ie/https-server demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.