Skip to content

tlsSocket.getEphemeralKeyInfo() returns empty object on PFS connection #20262

@WRMSRwasTaken

Description

@WRMSRwasTaken

Version: v10.0.0
Platform: Windows 10 Education 1709 x64
Subsystem: TLS

I wanted to see if node negotiates the new ciphers introduced with OpenSSL 1.1 with my server, already running OpenSSL 1.1

const tls = require('tls');

const tlsSocket = tls.connect(443, '<server>');

tlsSocket.on('secureConnect', info => {
	console.log('TLS version:', tlsSocket.getProtocol());
	console.log('Cipher:', tlsSocket.getCipher().name);
	console.log('Curve:', tlsSocket.getEphemeralKeyInfo());
});

The seen Output then is:

TLS version: TLSv1.2
Cipher: ECDHE-RSA-CHACHA20-POLY1305
Curve: {}

Why is tlsSocket.getEphemeralKeyInfo() returning an empty object? It's clearly a PFS connection.

It should return something like this: { type: 'ECDHE', name: 'X25519', size: 253}

Metadata

Metadata

Assignees

No one assigned

    Labels

    tlsIssues and PRs related to the tls subsystem.

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions