GeezerVison is showing github.com — doc: link and expand --tls-cipher-list docs · nodejs/node@3af173d
File tree
Expand file treeCollapse file tree
Open diff view settings
Expand file treeCollapse file tree
Open diff view settings
Collapse file
Copy file name to clipboardExpand all lines: doc/api/tls.md +10-4Lines changed: 10 additions & 4 deletions - Display the source diff
- Display the rich diff
| Original file line number | Diff line number | Diff line change |
|---|
@@ -169,12 +169,16 @@ HIGH: |
169 | 169 | !CAMELLIA |
170 | 170 | ``` |
171 | 171 |
|
172 | | -This default can be replaced entirely using the `--tls-cipher-list` command |
173 | | -line switch. For instance, the following makes |
174 | | -`ECDHE-RSA-AES128-GCM-SHA256:!RC4` the default TLS cipher suite: |
| 172 | +This default can be replaced entirely using the [`--tls-cipher-list`][] command line |
| 173 | +switch (directly, or via the [`NODE_OPTIONS`][] environment variable). For |
| 174 | +instance, the following makes `ECDHE-RSA-AES128-GCM-SHA256:!RC4` the default |
| 175 | +TLS cipher suite: |
175 | 176 |
|
176 | 177 | ```sh |
177 | | -node --tls-cipher-list="ECDHE-RSA-AES128-GCM-SHA256:!RC4" |
| 178 | +node --tls-cipher-list="ECDHE-RSA-AES128-GCM-SHA256:!RC4" server.js |
| 179 | + |
| 180 | +export NODE_OPTIONS=--tls-cipher-list="ECDHE-RSA-AES128-GCM-SHA256:!RC4" |
| 181 | +node server.js |
178 | 182 | ``` |
179 | 183 |
|
180 | 184 | The default can also be replaced on a per client or server basis using the |
@@ -1412,6 +1416,8 @@ where `secureSocket` has the same API as `pair.cleartext`. |
1412 | 1416 |
|
1413 | 1417 | [`'secureConnect'`]: #tls_event_secureconnect |
1414 | 1418 | [`'secureConnection'`]: #tls_event_secureconnection |
| 1419 | +[`--tls-cipher-list`]: cli.html#cli_tls_cipher_list_list |
| 1420 | +[`NODE_OPTIONS`]: cli.html#cli_node_options_options |
1415 | 1421 | [`SSL_CTX_set_timeout`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_timeout.html |
1416 | 1422 | [`crypto.getCurves()`]: crypto.html#crypto_crypto_getcurves |
1417 | 1423 | [`dns.lookup()`]: dns.html#dns_dns_lookup_hostname_options_callback |
|