Why do I need to use NODE_TLS_REJECT_UNAUTHORIZED="0" if it's insecure

Question

I am having trouble connecting with node https library to a website with:

ESET SSL Filter CA - Certificate.

At the moment, I worked around it with NODE_TLS_REJECT_UNAUTHORIZED="0" but this is not very secure.

Can anybody point me in the right direction, why the https library doesn't work like one would expect?

Answer 1

Firstly verify that your SSL certificate is valid or properly configured or not by using OpenSSL's command.

openssl s_client -connect <hostname>:<port>

If OpenSSL is not installed then you can check it directly on web from SSL Checker