mirror of https://github.com/lukechilds/node.git
Browse Source
Move `createCredentials` to `tls` module and rename it to `createSecureContext`. Make it use default values from `tls` module: `DEFAULT_CIPHERS` and `DEFAULT_ECDH_CURVE`. fix #7249v0.11.13-release
Fedor Indutny
11 years ago
committed by
Fedor Indutny
Fedor Indutny
17 changed files with 222 additions and 163 deletions
@ -0,0 +1,128 @@ |
|||||
|
// Copyright Joyent, Inc. and other Node contributors.
|
||||
|
//
|
||||
|
// Permission is hereby granted, free of charge, to any person obtaining a
|
||||
|
// copy of this software and associated documentation files (the
|
||||
|
// "Software"), to deal in the Software without restriction, including
|
||||
|
// without limitation the rights to use, copy, modify, merge, publish,
|
||||
|
// distribute, sublicense, and/or sell copies of the Software, and to permit
|
||||
|
// persons to whom the Software is furnished to do so, subject to the
|
||||
|
// following conditions:
|
||||
|
//
|
||||
|
// The above copyright notice and this permission notice shall be included
|
||||
|
// in all copies or substantial portions of the Software.
|
||||
|
//
|
||||
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
|
||||
|
// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
||||
|
// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
|
||||
|
// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
|
||||
|
// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
|
||||
|
// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
|
||||
|
// USE OR OTHER DEALINGS IN THE SOFTWARE.
|
||||
|
|
||||
|
var util = require('util'); |
||||
|
var tls = require('tls'); |
||||
|
|
||||
|
// Lazily loaded
|
||||
|
var crypto = null; |
||||
|
|
||||
|
var binding = process.binding('crypto'); |
||||
|
var NativeSecureContext = binding.SecureContext; |
||||
|
|
||||
|
function SecureContext(secureProtocol, flags, context) { |
||||
|
if (!(this instanceof SecureContext)) { |
||||
|
return new SecureContext(secureProtocol, flags, context); |
||||
|
} |
||||
|
|
||||
|
if (context) { |
||||
|
this.context = context; |
||||
|
} else { |
||||
|
this.context = new NativeSecureContext(); |
||||
|
|
||||
|
if (secureProtocol) { |
||||
|
this.context.init(secureProtocol); |
||||
|
} else { |
||||
|
this.context.init(); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
if (flags) this.context.setOptions(flags); |
||||
|
} |
||||
|
|
||||
|
exports.SecureContext = SecureContext; |
||||
|
|
||||
|
|
||||
|
exports.createSecureContext = function createSecureContext(options, context) { |
||||
|
if (!options) options = {}; |
||||
|
|
||||
|
var c = new SecureContext(options.secureProtocol, |
||||
|
options.secureOptions, |
||||
|
context); |
||||
|
|
||||
|
if (context) return c; |
||||
|
|
||||
|
if (options.key) { |
||||
|
if (options.passphrase) { |
||||
|
c.context.setKey(options.key, options.passphrase); |
||||
|
} else { |
||||
|
c.context.setKey(options.key); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
if (options.cert) c.context.setCert(options.cert); |
||||
|
|
||||
|
if (options.ciphers) |
||||
|
c.context.setCiphers(options.ciphers); |
||||
|
else |
||||
|
c.context.setCiphers(tls.DEFAULT_CIPHERS); |
||||
|
|
||||
|
if (util.isUndefined(options.ecdhCurve)) |
||||
|
c.context.setECDHCurve(tls.DEFAULT_ECDH_CURVE); |
||||
|
else if (options.ecdhCurve) |
||||
|
c.context.setECDHCurve(options.ecdhCurve); |
||||
|
|
||||
|
if (options.ca) { |
||||
|
if (util.isArray(options.ca)) { |
||||
|
for (var i = 0, len = options.ca.length; i < len; i++) { |
||||
|
c.context.addCACert(options.ca[i]); |
||||
|
} |
||||
|
} else { |
||||
|
c.context.addCACert(options.ca); |
||||
|
} |
||||
|
} else { |
||||
|
c.context.addRootCerts(); |
||||
|
} |
||||
|
|
||||
|
if (options.crl) { |
||||
|
if (util.isArray(options.crl)) { |
||||
|
for (var i = 0, len = options.crl.length; i < len; i++) { |
||||
|
c.context.addCRL(options.crl[i]); |
||||
|
} |
||||
|
} else { |
||||
|
c.context.addCRL(options.crl); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
if (options.sessionIdContext) { |
||||
|
c.context.setSessionIdContext(options.sessionIdContext); |
||||
|
} |
||||
|
|
||||
|
if (options.pfx) { |
||||
|
var pfx = options.pfx; |
||||
|
var passphrase = options.passphrase; |
||||
|
|
||||
|
if (!crypto) |
||||
|
crypto = require('crypto'); |
||||
|
|
||||
|
pfx = crypto._toBuf(pfx); |
||||
|
if (passphrase) |
||||
|
passphrase = crypto._toBuf(passphrase); |
||||
|
|
||||
|
if (passphrase) { |
||||
|
c.context.loadPKCS12(pfx, passphrase); |
||||
|
} else { |
||||
|
c.context.loadPKCS12(pfx); |
||||
|
} |
||||
|
} |
||||
|
|
||||
|
return c; |
||||
|
}; |
||||
Loading…
Reference in new issue