Closed
Description
Version: v10.0.0
Platform: Windows 10 Education 1709 x64
Subsystem: TLS
I wanted to see if node negotiates the new ciphers introduced with OpenSSL 1.1 with my server, already running OpenSSL 1.1
const tls = require('tls');
const tlsSocket = tls.connect(443, '<server>');
tlsSocket.on('secureConnect', info => {
console.log('TLS version:', tlsSocket.getProtocol());
console.log('Cipher:', tlsSocket.getCipher().name);
console.log('Curve:', tlsSocket.getEphemeralKeyInfo());
});
The seen Output then is:
TLS version: TLSv1.2
Cipher: ECDHE-RSA-CHACHA20-POLY1305
Curve: {}
Why is tlsSocket.getEphemeralKeyInfo()
returning an empty object? It's clearly a PFS connection.
It should return something like this: { type: 'ECDHE', name: 'X25519', size: 253}