tls: move getAllowUnauthorized to internal/options

Make it so that the allow unauthorized warning can be easily reused
by the QUIC impl once that lands.
Extracted from #32379
Signed-off-by: James M Snell <jasnell@gmail.com>
PR-URL: #32917
Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Author: jasnell

lib/_tls_wrap.js

@@ -70,7 +70,10 @@ const {
 ERR_TLS_INVALID_STATE
 }=codes;
 const{onpskexchange: kOnPskExchange}=internalBinding('symbols');
-const{ getOptionValue }=require('internal/options');
+const{
+ getOptionValue,
+ getAllowUnauthorized,
+}=require('internal/options');
 const{
  validateString,
  validateBuffer,
@@ -1533,22 +1536,12 @@ function onConnectEnd() {
 }
 }
 
-letwarnOnAllowUnauthorized=true;
-
 // Arguments: [port,] [host,] [options,] [cb]
 exports.connect=functionconnect(...args){
 args=normalizeConnectArgs(args);
 letoptions=args[0];
 constcb=args[1];
-constallowUnauthorized=process.env.NODE_TLS_REJECT_UNAUTHORIZED==='0';
-
-if(allowUnauthorized&&warnOnAllowUnauthorized){
-warnOnAllowUnauthorized=false;
-process.emitWarning('Setting the NODE_TLS_REJECT_UNAUTHORIZED '+
-'environment variable to \'0\' makes TLS connections '+
-'and HTTPS requests insecure by disabling '+
-'certificate verification.');
-}
+constallowUnauthorized=getAllowUnauthorized();
 
 options={
 rejectUnauthorized: !allowUnauthorized,

lib/internal/options.js

@@ -3,6 +3,8 @@
 const{ getOptions }=internalBinding('options');
 const{ options, aliases }=getOptions();
 
+letwarnOnAllowUnauthorized=true;
+
 functiongetOptionValue(option){
 constresult=options.get(option);
 if(!result){
@@ -11,8 +13,23 @@ function getOptionValue(option) {
 returnresult.value;
 }
 
+functiongetAllowUnauthorized(){
+constallowUnauthorized=process.env.NODE_TLS_REJECT_UNAUTHORIZED==='0';
+
+if(allowUnauthorized&&warnOnAllowUnauthorized){
+warnOnAllowUnauthorized=false;
+process.emitWarning(
+'Setting the NODE_TLS_REJECT_UNAUTHORIZED '+
+'environment variable to \'0\' makes TLS connections '+
+'and HTTPS requests insecure by disabling '+
+'certificate verification.');
+}
+returnallowUnauthorized;
+}
+
 module.exports={
  options,
  aliases,
- getOptionValue
+ getOptionValue,
+ getAllowUnauthorized,
 };