Version: v10.0.0
Platform: Windows 10 Education 1709 x64
Subsystem: TLS
I wanted to see if node negotiates the new ciphers introduced with OpenSSL 1.1 with my server, already running OpenSSL 1.1
consttls=require('tls');consttlsSocket=tls.connect(443,'<server>');tlsSocket.on('secureConnect',info=>{console.log('TLS version:',tlsSocket.getProtocol());console.log('Cipher:',tlsSocket.getCipher().name);console.log('Curve:',tlsSocket.getEphemeralKeyInfo());});The seen Output then is:
TLS version: TLSv1.2
Cipher: ECDHE-RSA-CHACHA20-POLY1305
Curve: {}
Why is tlsSocket.getEphemeralKeyInfo() returning an empty object? It's clearly a PFS connection.
It should return something like this: { type: 'ECDHE', name: 'X25519', size: 253}
Version:
v10.0.0Platform:
Windows 10 Education 1709 x64Subsystem:
TLSI wanted to see if node negotiates the new ciphers introduced with OpenSSL 1.1 with my server, already running OpenSSL 1.1
The seen Output then is:
Why is
tlsSocket.getEphemeralKeyInfo()returning an empty object? It's clearly a PFS connection.It should return something like this:
{ type: 'ECDHE', name: 'X25519', size: 253}