640fe94354
This commit enables node to dynamically link against OpenSSL 3.0. The motivation for opening this PR even though OpenSSL 3.0 has not been released yet is to allow a nightly CI job to be created. This will allow us stay on top of changes required for OpenSSL 3.0, and also to make sure that changes to node crypto do not cause issues when linking to OpenSSL 3.0. PR-URL: https://github.com/nodejs/node/pull/37669 Refs: https://github.com/nodejs/node/issues/29817 Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Michael Dawson <midawson@redhat.com>
43 lines
1,015 B
JavaScript
43 lines
1,015 B
JavaScript
'use strict';
|
|
|
|
const common = require('../common');
|
|
const fixtures = require('../common/fixtures');
|
|
|
|
// Confirm that for TLSv1.3, renegotiate() is disallowed.
|
|
|
|
const {
|
|
assert, connect, keys
|
|
} = require(fixtures.path('tls-connect'));
|
|
|
|
const server = keys.agent10;
|
|
|
|
connect({
|
|
client: {
|
|
ca: server.ca,
|
|
checkServerIdentity: common.mustCall(),
|
|
},
|
|
server: {
|
|
key: server.key,
|
|
cert: server.cert,
|
|
},
|
|
}, function(err, pair, cleanup) {
|
|
assert.ifError(err);
|
|
|
|
const client = pair.client.conn;
|
|
|
|
assert.strictEqual(client.getProtocol(), 'TLSv1.3');
|
|
|
|
const ok = client.renegotiate({}, common.mustCall((err) => {
|
|
assert.throws(() => { throw err; }, {
|
|
message: common.hasOpenSSL3 ?
|
|
'error:0A00010A:SSL routines::wrong ssl version' :
|
|
'error:1420410A:SSL routines:SSL_renegotiate:wrong ssl version',
|
|
code: 'ERR_SSL_WRONG_SSL_VERSION',
|
|
library: 'SSL routines',
|
|
reason: 'wrong ssl version',
|
|
});
|
|
cleanup();
|
|
}));
|
|
|
|
assert.strictEqual(ok, false);
|
|
});
|