node/test/parallel/test-tls-set-ciphers-error.js at 4f3785fa76b7e449bf6f1be2fc310bed97bba882 · nodejs/node · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
'use strict';
const common = require('../common');

if (!common.hasCrypto)
  common.skip('missing crypto');

const assert = require('assert');
const tls = require('tls');
const fixtures = require('../common/fixtures');
const { hasOpenSSL } = require('../common/crypto');

{
  const options = {
    key: fixtures.readKey('agent2-key.pem'),
    cert: fixtures.readKey('agent2-cert.pem'),
    ciphers: 'DES-CBC-SHA'
  };
  assert.throws(() => tls.createServer(options, common.mustNotCall()),
                /no[_ ]cipher[_ ]match/i);
  options.ciphers = 'FOOBARBAZ';
  assert.throws(() => tls.createServer(options, common.mustNotCall()),
                /no[_ ]cipher[_ ]match/i);
  options.ciphers = 'TLS_not_a_cipher';
  assert.throws(() => tls.createServer(options, common.mustNotCall()),
                /no[_ ]cipher[_ ]match/i);
}

// Cipher name matching is case-sensitive prior to OpenSSL 4.0, and
// case-insensitive starting with OpenSSL 4.0.
{
  const options = {
    key: fixtures.readKey('agent2-key.pem'),
    cert: fixtures.readKey('agent2-cert.pem'),
    ciphers: 'aes256-sha',
  };
  if (hasOpenSSL(4, 0)) {
    tls.createServer(options).close();
  } else {
    assert.throws(() => tls.createServer(options, common.mustNotCall()),
                  /no[_ ]cipher[_ ]match/i);
  }
}