Expose a way to specify TLS version by node command line #27666

Activity

1. addaleax

   added

   cliIssues and PRs related to the Node.js command-line interface.Issues and PRs related to the Node.js command-line interface.

   tlsIssues and PRs related to the tls subsystem.Issues and PRs related to the tls subsystem.

   on May 13, 2019
2. addaleax commented on May 13, 2019

   

   addaleax

   on May 13, 2019

   Member

   More actions

   The following CLI flags are available for current versions of Node:

     --tls-max-v1.2                            set default TLS maximum to TLSv1.2 (default: TLSv1.3)
     --tls-max-v1.3                            set default TLS maximum to TLSv1.3 (default: TLSv1.3)
     --tls-min-v1.0                            set default TLS minimum to TLSv1.0 (default: TLSv1.2)
     --tls-min-v1.1                            set default TLS minimum to TLSv1.1 (default: TLSv1.2)
     --tls-min-v1.3                            set default TLS minimum to TLSv1.3 (default: TLSv1.2)
   

   Do any of these look like what you need?

   👍React with 👍1Reacted by Rodrigo Camargo
3. devanshu1111 commented on May 16, 2019

   

   devanshu1111

   on May 16, 2019

   Author

   More actions

   Hi Team,
   Is there a plan to backport it to version 10.0x ? It would be a huge help to us.
4. bnoordhuis commented on May 16, 2019

   

   bnoordhuis

   on May 16, 2019

   Member

   More actions

   It's under discussion, see #27432 (comment) (cc @sam-github)

   I'll close this out as answered.
5. bnoordhuis

   closed this as completedon May 16, 2019
6. sam-github

   reopened this on May 16, 2019
7. sam-github

   added

   feature requestIssues requesting new Node.js features.Issues requesting new Node.js features.

   on May 16, 2019
8. sam-github commented on May 16, 2019

   

   sam-github

   on May 16, 2019

   Contributor

   More actions

   Reopened to track this as a feature (rather than making another).

   These are meaningful for 10.x, so I can implement them (hopefully fairly easily, I'll take a look today or tomorrow):

   • --tls-min-v1.0/v1.1/v1.2
   • --tls-max-v1.0/v1.1/v1.2

   While TLS1.3 does not exist for 10.x, what about --tls-max-v1.3 and --tls-min-v1.3?

   I can either:

   1. not implement them (using them will error on unknown option)
   2. implement them by:

   • making TLS not have any implicit protocols for --tls-min-v1.3 (connections are only possible for apps that replace the defaults with specific config)
   • having it be a no-op for --tls-max-v1.3

   3. ...?
9. sam-github commented on May 17, 2019

   

   sam-github

   on May 17, 2019

   Contributor

   More actions

   @devanshu1111 ☝️ opinions as to what would be helpful to you?
10. devanshu1111 commented on May 23, 2019

    

    devanshu1111

    on May 23, 2019

    Author

    More actions

    Thanks for looking into this.
    We would like to have 1. not implement them (using them will error on unknown option) for TLSv-1.3.
11. devanshu1111 commented on May 30, 2019

    

    devanshu1111

    on May 30, 2019

    Author

    More actions

    Thanks, please let us know the specific version under 10.x when it gets implemented.
12. BethGriggs commented on Feb 17, 2022

    

    BethGriggs

    on Feb 17, 2022

    Last edited by BethGriggs

    Member

    More actions

    These options in exist in Node.js 12 (https://nodejs.org/dist/latest-v12.x/docs/api/cli.html#cli_tls_max_v1_2). The last ask in this issue was to backport to Node.js 10, which is now End-of-life.

    edit: scratch that - they were shipped in v10.20.0 via #27946
13. BethGriggs

    closed this as completedon Feb 17, 2022
14. sameh1993 commented on Mar 25, 2022

    

    sameh1993

    on Mar 25, 2022

    More actions

    whats the flag for node 14.16.0 ??