3beb880716
When client connect to the server with certification issued by either CNNIC Root CA or CNNIC EV Root CA, check hash of server certification in the list of CNNICHashWhitelist.inc. If it's not, CERT_REVOKED error returns. See for details in https://blog.mozilla.org/security/2015/04/02/distrusting-new-cnnic-certificates/ PR-URL: https://github.com/nodejs/io.js/pull/1895 Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
14 lines
471 B
JavaScript
14 lines
471 B
JavaScript
'use strict';
|
|
//
|
|
// The server cert of www1.cnnic.cn is listed in the whitelist of
|
|
// {
|
|
// { 0x1B, 0xF4, 0x8A, 0x83, 0x3C, 0xE4, 0x05, 0x64, 0x8C, 0xC0, 0xBD, 0xD3,
|
|
// 0xB5, 0xB8, 0xC1, 0x8E, 0xB5, 0x13, 0x15, 0x34, 0x29, 0x3A, 0xB2, 0x63,
|
|
// 0x44, 0xB5, 0x00, 0x76, 0x48, 0x11, 0x41, 0xED },
|
|
// },
|
|
// in src/CNNICHashWhitelist.inc
|
|
var tls = require('tls');
|
|
var socket = tls.connect(443, 'www1.cnnic.cn', function() {
|
|
socket.resume();
|
|
socket.destroy();
|
|
});
|