Skip to content

[v10.x backport] tls: add min/max protocol version options

Rodrigo Muino Tomonari requested to merge github/fork/sam-github/backport-tls-min-max-to-10.x into v10.x-staging

Backport of a backport... prep work for openssl 1.1.1 to land on v10.x

The existing secureProtocol option only allows setting the allowed protocol to a specific version, or setting it to "all supported versions". It also used obscure strings based on OpenSSL C API functions. Directly setting the min or max is easier to use and explain.

Backport-PR-URL: https://github.com/nodejs/node/pull/24676 PR-URL: https://github.com/nodejs/node/pull/24405 Reviewed-By: Refael Ackermann refack@gmail.com Reviewed-By: Rod Vagg rod@vagg.org

Checklist
  • make -j4 test (UNIX), or vcbuild test (Windows) passes
  • tests and/or benchmarks are included
  • documentation is changed or added
  • commit message follows commit guidelines

Merge request reports