Commit 3af173d
doc: link and expand --tls-cipher-list docs
Link to the cli docs for --tls-cipher-list, and link to and mention that
NODE_OPTIONS can also be used.
PR-URL: #25174
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Vse Mozhet Byt <vsemozhetbyt@gmail.com>1 parent 88e7386 commit 3af173d
1 file changed
Lines changed: 10 additions & 4 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -169,12 +169,16 @@ HIGH: | |||
| 169 | 169 | !CAMELLIA | |
| 170 | 170 | ``` | |
| 171 | 171 | ||
| 172 | - This default can be replaced entirely using the `--tls-cipher-list` command | ||
| 173 | - line switch. For instance, the following makes | ||
| 174 | - `ECDHE-RSA-AES128-GCM-SHA256:!RC4` the default TLS cipher suite: | ||
| 172 | + This default can be replaced entirely using the [`--tls-cipher-list`][] command line | ||
| 173 | + switch (directly, or via the [`NODE_OPTIONS`][] environment variable). For | ||
| 174 | + instance, the following makes `ECDHE-RSA-AES128-GCM-SHA256:!RC4` the default | ||
| 175 | + TLS cipher suite: | ||
| 175 | 176 | ||
| 176 | 177 | ```sh | |
| 177 | - node --tls-cipher-list="ECDHE-RSA-AES128-GCM-SHA256:!RC4" | ||
| 178 | + node --tls-cipher-list="ECDHE-RSA-AES128-GCM-SHA256:!RC4" server.js | ||
| 179 | + | ||
| 180 | + export NODE_OPTIONS=--tls-cipher-list="ECDHE-RSA-AES128-GCM-SHA256:!RC4" | ||
| 181 | + node server.js | ||
| 178 | 182 | ``` | |
| 179 | 183 | ||
| 180 | 184 | The default can also be replaced on a per client or server basis using the | |
@@ -1412,6 +1416,8 @@ where `secureSocket` has the same API as `pair.cleartext`. | |||
| 1412 | 1416 | ||
| 1413 | 1417 | [`'secureConnect'`]: #tls_event_secureconnect | |
| 1414 | 1418 | [`'secureConnection'`]: #tls_event_secureconnection | |
| 1419 | + [`--tls-cipher-list`]: cli.html#cli_tls_cipher_list_list | ||
| 1420 | + [`NODE_OPTIONS`]: cli.html#cli_node_options_options | ||
| 1415 | 1421 | [`SSL_CTX_set_timeout`]: https://www.openssl.org/docs/man1.1.0/ssl/SSL_CTX_set_timeout.html | |
| 1416 | 1422 | [`crypto.getCurves()`]: crypto.html#crypto_crypto_getcurves | |
| 1417 | 1423 | [`dns.lookup()`]: dns.html#dns_dns_lookup_hostname_options_callback | |
0 commit comments