File tree 2 files changed +18
-4
lines changed
2 files changed +18
-4
lines changed Original file line number Diff line number Diff line change @@ -804,7 +804,8 @@ automatically set as a listener for the [secureConnection][] event. The
804
804
805
805
- ` sessionIdContext ` : A string containing an opaque identifier for session
806
806
resumption. If ` requestCert ` is ` true ` , the default is MD5 hash value
807
- generated from command-line. Otherwise, the default is not provided.
807
+ generated from command-line. (In FIPS mode a truncated SHA1 hash is
808
+ used instead.) Otherwise, the default is not provided.
808
809
809
810
- ` secureProtocol ` : The SSL method to use, e.g. ` SSLv3_method ` to force
810
811
SSL version 3. The possible values depend on your installation of
Original file line number Diff line number Diff line change @@ -14,6 +14,21 @@ const Timer = process.binding('timer_wrap').Timer;
14
14
const tls_wrap = process . binding ( 'tls_wrap' ) ;
15
15
const TCP = process . binding ( 'tcp_wrap' ) . TCP ;
16
16
const Pipe = process . binding ( 'pipe_wrap' ) . Pipe ;
17
+ const defaultSessionIdContext = getDefaultSessionIdContext ( ) ;
18
+
19
+ function getDefaultSessionIdContext ( ) {
20
+ var defaultText = process . argv . join ( ' ' ) ;
21
+ /* SSL_MAX_SID_CTX_LENGTH is 128 bits */
22
+ if ( process . config . variables . openssl_fips ) {
23
+ return crypto . createHash ( 'sha1' )
24
+ . update ( defaultText )
25
+ . digest ( 'hex' ) . slice ( 0 , 32 ) ;
26
+ } else {
27
+ return crypto . createHash ( 'md5' )
28
+ . update ( defaultText )
29
+ . digest ( 'hex' ) ;
30
+ }
31
+ }
17
32
18
33
function onhandshakestart ( ) {
19
34
debug ( 'onhandshakestart' ) ;
@@ -872,9 +887,7 @@ Server.prototype.setOptions = function(options) {
872
887
if ( options . sessionIdContext ) {
873
888
this . sessionIdContext = options . sessionIdContext ;
874
889
} else {
875
- this . sessionIdContext = crypto . createHash ( 'md5' )
876
- . update ( process . argv . join ( ' ' ) )
877
- . digest ( 'hex' ) ;
890
+ this . sessionIdContext = defaultSessionIdContext ;
878
891
}
879
892
} ;
880
893
You can’t perform that action at this time.
0 commit comments