Forcing TLS 1.1 or higher on node.js
I am trying to create a server that will use TLS 1.1 or higher.
This is my current TLS configuration:
var options = {};
options.key = fs.readFileSync('privatekey.pem');
options.cert = fs.readFileSync('certificate.pem');
options.secureProtocol = 'TLSv1_server_method';
options.ciphers = "AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH";
options.honorCipherOrder = true;
httpServer = https.createServer(options, app);
Just as suggested here
From reading the Openssl manual here I didn't find anything about TLS 1.1
Any suggestions?
+4
Oleg.R
source
to share
2 answers
This did the trick:
options.secureProtocol = 'SSLv23_server_method';
options.ciphers = "AES128-GCM-SHA256:HIGH:!MD5:!aNULL:!EDH";
The correct place to search was here
+1
Oleg.R
source
to share
TLS 1.0 should no longer be used. This works to disable TLS 1.0 in node.js:
https.createServer({
secureOptions: require('constants').SSL_OP_NO_TLSv1,
pfx: fs.readFileSync(path.resolve(pathToCert))
}, app).listen(443);
You can check it with this tool: ssllabs
0
user896993
source
to share