tls: implement capture rejections for 'secureConnection' event

PR-URL: #27867
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Jeremiah Senkpiel <fishrock123@rocketmail.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Michaël Zasso <targos@protonmail.com>

Author: mcollina

lib/_tls_wrap.js

@@ -37,6 +37,7 @@ assertCrypto();
 const{ setImmediate }=require('timers');
 constassert=require('internal/assert');
 constcrypto=require('crypto');
+constEE=require('events');
 constnet=require('net');
 consttls=require('tls');
 constcommon=require('_tls_common');
@@ -1284,6 +1285,19 @@ Server.prototype.addContext = function(servername, context) {
 this._contexts.push([re,tls.createSecureContext(context).context]);
 };
 
+Server.prototype[EE.captureRejectionSymbol]=function(
+err,event,sock){
+
+switch(event){
+case'secureConnection':
+sock.destroy(err);
+break;
+default:
+net.Server.prototype[Symbol.for('nodejs.rejection')]
+.call(this,err,event,sock);
+}
+};
+
 functionSNICallback(servername,callback){
 constcontexts=this.server._contexts;
 

test/parallel/test-tls-server-capture-rejection.js

@@ -0,0 +1,34 @@
+'use strict';
+
+constcommon=require('../common');
+if(!common.hasCrypto)
+common.skip('missing crypto');
+
+constassert=require('assert');
+constevents=require('events');
+constfixtures=require('../common/fixtures');
+const{ createServer, connect }=require('tls');
+constcert=fixtures.readKey('rsa_cert.crt');
+constkey=fixtures.readKey('rsa_private.pem');
+
+events.captureRejections=true;
+
+constserver=createServer({ cert, key },common.mustCall(async(sock)=>{
+server.close();
+
+const_err=newError('kaboom');
+sock.on('error',common.mustCall((err)=>{
+assert.strictEqual(err,_err);
+}));
+throw_err;
+}));
+
+server.listen(0,common.mustCall(()=>{
+constsock=connect({
+port: server.address().port,
+host: server.address().host,
+rejectUnauthorized: false
+});
+
+sock.on('close',common.mustCall());
+}));