Skip to content

tls: fix order of setting cipher before setting cert and key

Rodrigo Muino Tomonari requested to merge github/fork/kumarrishav/main into main

Set the cipher list and cipher suite before anything.

Because @SECLEVEL= changes the security level and that affects subsequent operations. Reducing SECLEVEL to 0 in ciphers retains compatibility with previous versions of OpenSSL like using a small key as ciphers are getting set before the cert and key get loaded.

Fixes: https://github.com/nodejs/node/issues/36655 Fixes: https://github.com/nodejs/node/issues/49549

Refs: https://github.com/orgs/nodejs/discussions/49634 https://github.com/orgs/nodejs/discussions/46545

Merge request reports