Sample HTTPS server for Express 4.x

app.js

// Create self-signed certificate using: 
// openssl genrsa 1024 > private.key
// openssl req -new -key private.key -out cert.csr
// openssl x509 -req -in cert.csr -signkey private.key -out certificate.pem
// Key is certificate key and cert.pem is certificate file
// 443 is standard for all HTTPS but is not recommended to use as it might be obvious port to attack. 

var fs = require('fs');
var https = require('https');
var express = require('express');
var app = express();
var httpsPort = 3443;
app.set(‘port_https’, httpsPort);

//Setup the server
https.createServer({
key: fs.readFileSync('key.pem'),
cert: fs.readFileSync('cert.pem')
}, app).listen(httpsPort);

// Redirect all routes to be on HTTPS
app.all(‘*’, function(req, res, next){
  if (req.secure) {
    return next();
  };
 res.redirect(‘https://’+req.hostname+”:”+app.get(‘port_https’)+req.url);
});

//Example of sample HTTP GET to test the server
app.get('/', function (req, res) {
res.header('Content-type', 'text/html');
return res.end('<h1>Hello, Secure World!</h1>');
});