Repository navigation
tlsSocket.getEphemeralKeyInfo() returns empty object on PFS connection #20262
Description
Version: v10.0.0
Platform: Windows 10 Education 1709 x64
Subsystem: TLS
I wanted to see if node negotiates the new ciphers introduced with OpenSSL 1.1 with my server, already running OpenSSL 1.1
const tls = require('tls');
const tlsSocket = tls.connect(443, '<server>');
tlsSocket.on('secureConnect', info => {
console.log('TLS version:', tlsSocket.getProtocol());
console.log('Cipher:', tlsSocket.getCipher().name);
console.log('Curve:', tlsSocket.getEphemeralKeyInfo());
});The seen Output then is:
TLS version: TLSv1.2
Cipher: ECDHE-RSA-CHACHA20-POLY1305
Curve: {}
Why is tlsSocket.getEphemeralKeyInfo() returning an empty object? It's clearly a PFS connection.
It should return something like this: { type: 'ECDHE', name: 'X25519', size: 253}
Activity
Trott commentedon Apr 24, 2018
@nodejs/crypto
bnoordhuis commentedon Apr 24, 2018
Because it currently only knows about DH and ECDH keys. Pull requests welcome.
shigeki commentedon Apr 25, 2018
This issue is caused by
EVP_PKEY_ECwhich only covers ANSI X9.62 curves not IETF ones.I will submit a PR to fix this.
tls: fix getEphemeralKeyInfo to support X25519
tls: fix getEphemeralKeyInfo to support X25519