GeezerVison

The World Wide Web, restored to 800 pixels of glory.

GeezerVison is showing github.com — doc: clarify tlsSocket.authorized on resumption · nodejs/node@efbede6

File tree

Expand file treeCollapse file tree

Open diff view settings

Filter options

doc/api
- tls.md

Expand file treeCollapse file tree

Open diff view settings

Collapse file

`‎doc/api/tls.md‎`

Copy file name to clipboardExpand all lines: doc/api/tls.md

+13Lines changed: 13 additions & 0 deletions

Display the source diff
Display the rich diff

Original file line number	Diff line number	Diff line change
`@@ -1072,6 +1072,18 @@ added: v0.11.4`
`1072`	`1072`	This property is `true` if the peer certificate was signed by one of the CAs
`1073`	`1073`	specified when creating the `tls.TLSSocket` instance, otherwise `false`.
`1074`	`1074`
	`1075`	`+The peer certificate is only verified during a full TLS handshake. When a`
	`1076`	`+connection is established by resuming a previous session (see`
	`1077`	`+[Session Resumption][]), verification is not repeated. If the client`
	`1078`	+presented a certificate in the original handshake, `authorized` and
	`1079`	+`authorizationError` carry the result stored with the session, including
	`1080`	`+any verification error. On TLS 1.3, a client that sent no certificate at`
	`1081`	+all can resume a session and report `authorized` as `true`, while
	`1082`	+[`tls.TLSSocket.getPeerCertificate()`][] returns an empty object. Servers
	`1083`	+that authorize clients manually with `rejectUnauthorized: false` should
	`1084`	+therefore also check [`tls.TLSSocket.isSessionReused()`][] and that a peer
	`1085`	`+certificate is present.`
	`1086`	`+`
`1075`	`1087`	### `tlsSocket.disableRenegotiation()`
`1076`	`1088`
`1077`	`1089`	`<!-- YAML`
`@@ -2573,6 +2585,7 @@ added: v0.11.3`
`2573`	`2585`	[`tls.TLSSocket.getProtocol()`]: #tlssocketgetprotocol
`2574`	`2586`	[`tls.TLSSocket.getSession()`]: #tlssocketgetsession
`2575`	`2587`	[`tls.TLSSocket.getTLSTicket()`]: #tlssocketgettlsticket
	`2588`	+[`tls.TLSSocket.isSessionReused()`]: #tlssocketissessionreused
`2576`	`2589`	[`tls.TLSSocket.servername`]: #tlssocketservername
`2577`	`2590`	[`tls.TLSSocket`]: #class-tlstlssocket
`2578`	`2591`	[`tls.connect()`]: #tlsconnectoptions-callback

0 commit comments

Comments

0 (0)

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.