Deno and the corporate proxy

Jacob — Tue, 30 Jun 2020 10:24:50 +0000

Information in this post is accurate as of 30/06/2020

This is my first post in quite a while, please feel free to let me know if I've made any mistakes or something doesn't read quite right :)

Introduction

After seeing quite a lot of posts / news about deno I thought I'd give it a try. I'm already quite familar with NodeJS / Typescript so I was excited about the built in Typescript support, but alas I was stumped right from the welcome example :sigh:

The Problem

I executed the example command deno run https://deno.land/std/examples/welcome.ts hoping to see Welcome to Deno 🦕 but instead I was greated with this fine error:

error: error sending request for url (https://deno.land/std/examples/welcome.ts): error trying to connect: tcp connect error: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond. (os error 10060)

The Solution

After a few seconds of pondering I remembered I'm behind a corporate proxy, I dug around the Deno manual and found the page on proxies. Amazing I thought, Deno supports the HTTP_PROXY and HTTPS_PROXY environment variables just like NodeJS! So it set them, and executed the welcome command again.

The Problem part 2.

error: error sending request for url (https://deno.land/std/examples/welcome.ts): error trying to connect: invalid certificate: UnknownIssuer

huh, another error... Looks like there is a certifiacte in the chain that isn't signed by a known certificate authority (issuer)

The Solution part 2

After some googling and GitHub issue searching, I concluded the following:

I'm behind a corporate proxy that snoops on HTTPS traffic using a custom certificate that is stored in Windows
Deno doesn't read certificate authrotiies from the OS.
Deno relies on rustls for TLS/SSL connections, which in turn relies on webpki which has its own certificate store.
the deno run command accepts a --cert flag, with a path to the certificate(s) in PEM format (E.G deno run --cert C:/corporateCerts.pem https://deno.land/std/examples/welcome.ts(This flag isn't in the Deno manual (I'm looking to change that)).

After adding in the --cert flag, and executing again, I got the welcome message Welcome to Deno 🦕!

Hope you enjoyed the read :)

TL;DR

Set HTTP_PROXY and HTTPS_PROXY to your proxy address
if your corporate proxy snoops on HTTPS traffic you'll need to export the certificate it uses in PEM format and put it somewhere safe
Use deno run with the --cert flag set to the path to the exported PEM file (E.G deno run --cert C:/corporateCerts.pem https://deno.land/std/examples/welcome.ts)

I'm planning on creating a website with NodeJS, What can I use to future proof it?

Jacob — Wed, 11 Oct 2017 01:11:58 +0000

Basically, I'm wondering what technologies, node modules, etc I could use to either future proof it, or just make it easier to make.

My current thought of things to use:
NodeJS 8 - Backend
EJS - Templating
MongoDB - Database

Just posting suggestions is fine, however, I'd appreciate it if you gave examples of how you have or how it can be used and some rough pros and cons of it are. (If you have an opinion that doesn't match everyone else's, I'd still love to hear it)

Thanks <3

Hi, I'm Jacob Gee-Clarke ❤️

Jacob — Wed, 07 Jun 2017 14:59:23 +0000

DEV Community: Jacob