How to configure axios to use SSL certificate?

When using Axios for HTTPS requests, if your target server uses a self-signed certificate or requires special certificate configuration, you may need to configure SSL settings. In the Node.js environment, you can use Axios's httpsAgent configuration option to specify SSL-related settings.

The following outlines the steps and examples for configuring Axios to use SSL certificates:

1. Import Dependencies: First, ensure you have installed the axios and https modules.

javascript
const axios = require('axios');
const https = require('https');
const fs = require('fs');

1. Read SSL Certificate Files: Use Node.js's fs module to read your SSL certificate files, including the certificate file (.crt), private key file (.key), and certificate chain (if applicable).

javascript
const certificate = fs.readFileSync('path/to/certificate.crt', 'utf8');
const privateKey = fs.readFileSync('path/to/private.key', 'utf8');
const ca = fs.readFileSync('path/to/ca.pem', 'utf8'); // Include this only if you have a certificate chain

1. Create HTTPS Agent: Use the read certificate information to create an https.Agent instance and configure SSL options.

javascript
const httpsAgent = new https.Agent({
  rejectUnauthorized: false, // Set to false for self-signed certificates
  cert: certificate, // Certificate file
  key: privateKey, // Private key file
  ca: ca, // Include this option only if you have a certificate chain
});

1. Use HTTPS Agent in Axios Requests: When sending requests, pass the created HTTPS Agent via the httpsAgent configuration option.

javascript
axios.get('https://your-secure-domain.com/api/data', { httpsAgent })
  .then(response => {
    console.log(response.data);
  })
  .catch(error => {
    console.log('Error', error.message);
  });

Note: If you set rejectUnauthorized to false, Axios will accept any SSL certificate regardless of its validity or trustworthiness. This is insecure in production environments as it makes your application vulnerable to man-in-the-middle attacks. You should only use this in development or testing environments, and always validate SSL certificate validity in production. If your certificate is issued by a trusted CA, you typically do not need to modify the default rejectUnauthorized option.

The above steps cover configuring Axios for SSL certificates. By correctly setting these options, you can ensure secure communication between your HTTP client and server.