Does Node.js support HPKP / support mail certificate?

Does Node.js certificate support? More specifically, if the server passes the HPKP header on the first connection, will Node.js honor this setting?

Note that this is for the library where the client connects to my server. I don't care if the HTTPS server in Node supports the certificate.

I also understand that I can check the certificate manually and there are several third party libraries that will check every connection or monkey of the request library patch. I also don't ask about this functionality.

My plan is to check the certificate the first time and reject if it doesn't match. However, it doesn't do me any good if the TLS certificate changes after the first call.

+3


source to share


1 answer


Use property res.socket.getPeerCertificate().fingerprint

for HTTPS response, compare against your pre-defined value.



+1


source







All Articles