bbf51ad24c
Signed-off-by: Filip Skokan <panva.ip@gmail.com> PR-URL: https://github.com/nodejs/node/pull/63161 Reviewed-By: Tim Perry <pimterry@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
68 lines
2.1 KiB
JavaScript
68 lines
2.1 KiB
JavaScript
'use strict';
|
|
const common = require('../common');
|
|
if (!common.hasCrypto)
|
|
common.skip('missing crypto');
|
|
|
|
const { hasOpenSSL } = require('../common/crypto');
|
|
|
|
// This test ensures that `getProtocol` returns the right protocol
|
|
// from a TLS connection
|
|
|
|
const assert = require('assert');
|
|
const tls = require('tls');
|
|
const fixtures = require('../common/fixtures');
|
|
|
|
let clientConfigs = [
|
|
{
|
|
secureProtocol: 'TLSv1_method',
|
|
version: 'TLSv1',
|
|
ciphers: (hasOpenSSL(3, 1) ? 'DEFAULT:@SECLEVEL=0' : 'DEFAULT')
|
|
}, {
|
|
secureProtocol: 'TLSv1_1_method',
|
|
version: 'TLSv1.1',
|
|
ciphers: (hasOpenSSL(3, 1) ? 'DEFAULT:@SECLEVEL=0' : 'DEFAULT')
|
|
}, {
|
|
secureProtocol: 'TLSv1_2_method',
|
|
version: 'TLSv1.2'
|
|
},
|
|
];
|
|
|
|
if (process.features.openssl_is_boringssl) {
|
|
// Remove the TLSv1 and TLSv1.1 cases. BoringSSL does not negotiate those
|
|
// legacy protocols in this configuration; keep TLSv1.2 to cover getProtocol()
|
|
// on a successful BoringSSL TLS handshake.
|
|
common.printSkipMessage('BoringSSL: skipping TLSv1/TLSv1.1 getProtocol cases');
|
|
clientConfigs = clientConfigs.filter(({ version }) => version === 'TLSv1.2');
|
|
}
|
|
|
|
const serverConfig = {
|
|
secureProtocol: 'TLS_method',
|
|
key: fixtures.readKey('agent2-key.pem'),
|
|
cert: fixtures.readKey('agent2-cert.pem')
|
|
};
|
|
|
|
if (!process.features.openssl_is_boringssl) {
|
|
serverConfig.ciphers = 'RSA@SECLEVEL=0';
|
|
}
|
|
|
|
const server = tls.createServer(serverConfig, common.mustCall(clientConfigs.length))
|
|
.listen(0, common.localhostIPv4, common.mustCall(function() {
|
|
let connected = 0;
|
|
for (const v of clientConfigs) {
|
|
tls.connect({
|
|
host: common.localhostIPv4,
|
|
port: server.address().port,
|
|
ciphers: v.ciphers,
|
|
rejectUnauthorized: false,
|
|
secureProtocol: v.secureProtocol
|
|
}, common.mustCall(function() {
|
|
assert.strictEqual(this.getProtocol(), v.version);
|
|
this.on('end', common.mustCall());
|
|
this.on('close', common.mustCall(function() {
|
|
assert.strictEqual(this.getProtocol(), null);
|
|
})).end();
|
|
if (++connected === clientConfigs.length)
|
|
server.close();
|
|
}));
|
|
}
|
|
}));
|