Skip to content

tlsSocket.getEphemeralKeyInfo() returns empty object on PFS connection #20262

Closed
@WRMSRwasTaken

Description

@WRMSRwasTaken

Version: v10.0.0
Platform: Windows 10 Education 1709 x64
Subsystem: TLS

I wanted to see if node negotiates the new ciphers introduced with OpenSSL 1.1 with my server, already running OpenSSL 1.1

const tls = require('tls');

const tlsSocket = tls.connect(443, '<server>');

tlsSocket.on('secureConnect', info => {
	console.log('TLS version:', tlsSocket.getProtocol());
	console.log('Cipher:', tlsSocket.getCipher().name);
	console.log('Curve:', tlsSocket.getEphemeralKeyInfo());
});

The seen Output then is:

TLS version: TLSv1.2
Cipher: ECDHE-RSA-CHACHA20-POLY1305
Curve: {}

Why is tlsSocket.getEphemeralKeyInfo() returning an empty object? It's clearly a PFS connection.

It should return something like this: { type: 'ECDHE', name: 'X25519', size: 253}

Metadata

Metadata

Assignees

No one assigned

    Labels

    tlsIssues and PRs related to the tls subsystem.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions