Merge pull request #115 from topcoder-platform/PROD-2194_ssl

PROD-2194 improve SSL serving locally -> dev

Author: brooketopcoder

README.md

@@ -69,9 +69,17 @@ You will need to add the following line to your hosts file. The hosts file is no
 
 >% yarn start
 
-3. Go to https://local.topcoder-dev.com:3000/
+3. Go to https://local.topcoder-dev.com:3003/
 
-**NOTE:** SSL is required for authentication, so you must accept the invalid cert.
+### Local SSL
+
+SSL is required for authentication to work properly. 
+
+The `yarn start` command serves the site using the cert and key in the /ssl directory.
+
+For easier development, it is recommended that you add this certificate to your trusted root authorities and as a trused cert in your browser. Google your browser and OS for more info.
+
+Otherwise, you will need to override the exception each time you load the site. Firefox users may need to user an incognito browser in order to override the exception.
 
 ### Personal Config
 

ssl/cert.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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==
+-----END CERTIFICATE-----

ssl/key.pem

@@ -0,0 +1,28 @@
+-----BEGIN PRIVATE KEY-----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+-----END PRIVATE KEY-----

ssl/server.cert

@@ -1,5 +1,2 @@
-export HTTPS=true&&SSL_CRT_FILE=ssl/cert.pem&&SSL_KEY_FILE=ssl/key.pem
-export HOST=local.topcoder-dev.com
 export REACT_APP_HOST_ENV=bsouza
-nvm use
-yarn react-app-rewired start
+sh ./start-ssl.sh

ssl/server.key

@@ -1,5 +1,8 @@
-export HTTPS=true&&SSL_CRT_FILE=ssl/cert.pem&&SSL_KEY_FILE=ssl/key.pem
+export HTTPS=true
+export SSL_CRT_FILE=ssl/server.cert
+export SSL_KEY_FILE=ssl/server.key
 export HOST=local.topcoder-dev.com
+export PORT=3003
 export REACT_APP_HOST_ENV=default
 nvm use
 yarn react-app-rewired start