lukechilds/node - node - Gitea: Git with a cup of tea

History

Michael Dawson caa16b41d6 tls: prevent server from using dhe keys < 768 As part of the fix for logjam, node was upgraded to a level of openssl which rejects connections to servers that are using keys smaller than 768 bits. It is still possible, however, to create a server that uses a smaller key size and and older client may be able to connect to it. This PR moves us to a secure by default stance on the server side as well, preventing the creation of a server using a dhe key size less than 768. This can be overridden with the command line option which is also added. It is derived from `9b35be5810` which was landed in later io.js/node versions but makes the limit 1024. This PR uses the smaller limit in order to meet the recomendations for logjam while matching was was done on the client side in openssl to minimize the potential impacton users. The command line option will only be documented in the release notes and will not be added to the tls documentation. The goal is that people who are upgrading are aware and can use the option if they run into issues, but otherwise the option is not visible/used. PR-URL: https://github.com/nodejs/node/pull/3890 Fixes: https://github.com/nodejs/LTS/issues/49 Reviewed-By: Myles Borins <mborins@us.ibm.com> Reviewed-By: James Snell <jasnell@gmail.com> Reviewed-By: Rod Vagg <r@va.gg> Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>		9 years ago
..
addons	smalloc: extend user API	10 years ago
debugger	debugger: assign Environment to DebugContext too	11 years ago
disabled	deps: re-implement debugger-agent	11 years ago
external/ssl-options	test: fix ssl/tls options matrix test	10 years ago
fixtures	tls: prevent server from using dhe keys < 768	9 years ago
gc	test: update our branched weakref to v8 3.24	11 years ago
internet	src: fix intermittent SIGSEGV in resolveTxt	10 years ago
message	Merge branch 'v0.10'	11 years ago
parallel	http: fix assert on data/end after socket error	10 years ago
pummel	mdb_v8: add tests for ::findjsobjects -k KIND	10 years ago
simple	tls: prevent server from using dhe keys < 768	9 years ago
testpy	test: Env variable to specify directory for pipes	10 years ago
timers	timers: backport f8193ab	11 years ago
common.js	child_process: clone spawn options argument	10 years ago