aboutsummaryrefslogtreecommitdiff
path: root/src/bun.js/node-tls.exports.js
diff options
context:
space:
mode:
Diffstat (limited to 'src/bun.js/node-tls.exports.js')
-rw-r--r--src/bun.js/node-tls.exports.js336
1 files changed, 0 insertions, 336 deletions
diff --git a/src/bun.js/node-tls.exports.js b/src/bun.js/node-tls.exports.js
deleted file mode 100644
index d54b79089..000000000
--- a/src/bun.js/node-tls.exports.js
+++ /dev/null
@@ -1,336 +0,0 @@
-const { isTypedArray } = import.meta.require("util/types");
-
-function parseCertString() {
- throw Error("Not implemented");
-}
-
-function isValidTLSArray(obj) {
- if (typeof obj === "string" || isTypedArray(obj) || obj instanceof ArrayBuffer || obj instanceof Blob) return true;
- if (Array.isArray(obj)) {
- for (var i = 0; i < obj.length; i++) {
- if (typeof obj !== "string" && !isTypedArray(obj) && !(obj instanceof ArrayBuffer) && !(obj instanceof Blob))
- return false;
- }
- return true;
- }
-}
-
-var InternalSecureContext = class SecureContext {
- context;
-
- constructor(options) {
- const context = {};
- if (options) {
- let key = options.key;
- if (key) {
- if (!isValidTLSArray(key)) {
- throw new TypeError(
- "key argument must be an string, Buffer, TypedArray, BunFile or an array containing string, Buffer, TypedArray or BunFile",
- );
- }
- this.key = key;
- }
- let cert = options.cert;
- if (cert) {
- if (!isValidTLSArray(cert)) {
- throw new TypeError(
- "cert argument must be an string, Buffer, TypedArray, BunFile or an array containing string, Buffer, TypedArray or BunFile",
- );
- }
- this.cert = cert;
- }
-
- let ca = options.ca;
- if (ca) {
- if (!isValidTLSArray(ca)) {
- throw new TypeError(
- "ca argument must be an string, Buffer, TypedArray, BunFile or an array containing string, Buffer, TypedArray or BunFile",
- );
- }
- this.ca = ca;
- }
-
- let passphrase = options.passphrase;
- if (passphrase && typeof passphrase !== "string") {
- throw new TypeError("passphrase argument must be an string");
- }
- this.passphrase = passphrase;
-
- let servername = options.servername;
- if (servername && typeof servername !== "string") {
- throw new TypeError("servername argument must be an string");
- }
- this.servername = servername;
-
- let secureOptions = options.secureOptions || 0;
- if (secureOptions && typeof secureOptions !== "number") {
- throw new TypeError("secureOptions argument must be an number");
- }
- this.secureOptions = secureOptions;
- }
- this.context = context;
- }
-};
-
-function SecureContext(options) {
- return new InternalSecureContext(options);
-}
-
-function createSecureContext(options) {
- return new SecureContext(options);
-}
-
-const { [Symbol.for("::bunternal::")]: InternalTCPSocket, Server: NetServer } = import.meta.require("net");
-
-const buntls = Symbol.for("::buntls::");
-
-var SocketClass;
-const TLSSocket = (function (InternalTLSSocket) {
- SocketClass = InternalTLSSocket;
- Object.defineProperty(SocketClass.prototype, Symbol.toStringTag, {
- value: "TLSSocket",
- enumerable: false,
- });
-
- return Object.defineProperty(
- function Socket(options) {
- return new InternalTLSSocket(options);
- },
- Symbol.hasInstance,
- {
- value(instance) {
- return instance instanceof InternalTLSSocket;
- },
- },
- );
-})(
- class TLSSocket extends InternalTCPSocket {
- #secureContext;
- constructor(options) {
- super(options);
- this.#secureContext = options.secureContext || createSecureContext(options);
- this.authorized = false;
- this.secureConnecting = true;
- this._secureEstablished = false;
- this._securePending = true;
- }
-
- _secureEstablished = false;
- _securePending = true;
- _newSessionPending;
- _controlReleased;
- secureConnecting = false;
- _SNICallback;
- servername;
- alpnProtocol;
- authorized = false;
- authorizationError;
-
- encrypted = true;
-
- exportKeyingMaterial() {
- throw Error("Not implented in Bun yet");
- }
- setMaxSendFragment() {
- throw Error("Not implented in Bun yet");
- }
- setServername() {
- throw Error("Not implented in Bun yet");
- }
- setSession() {
- throw Error("Not implented in Bun yet");
- }
- getPeerCertificate() {
- throw Error("Not implented in Bun yet");
- }
- getCertificate() {
- throw Error("Not implented in Bun yet");
- }
- getPeerX509Certificate() {
- throw Error("Not implented in Bun yet");
- }
- getX509Certificate() {
- throw Error("Not implented in Bun yet");
- }
-
- [buntls](port, host) {
- var { servername } = this;
- if (servername) {
- return {
- serverName: typeof servername === "string" ? servername : host,
- ...this.#secureContext,
- };
- }
-
- return true;
- }
- },
-);
-
-class Server extends NetServer {
- key;
- cert;
- ca;
- passphrase;
- secureOptions;
- _rejectUnauthorized;
- _requestCert;
- servername;
-
- constructor(options, secureConnectionListener) {
- super(options, secureConnectionListener);
- this.setSecureContext(options);
- }
- emit(event, args) {
- super.emit(event, args);
-
- if (event === "connection") {
- // grabs secureConnect to emit secureConnection
- args.once("secureConnect", () => {
- super.emit("secureConnection", args);
- });
- }
- }
- setSecureContext(options) {
- if (options instanceof InternalSecureContext) {
- options = options.context;
- }
- if (options) {
- let key = options.key;
- if (key) {
- if (!isValidTLSArray(key)) {
- throw new TypeError(
- "key argument must be an string, Buffer, TypedArray, BunFile or an array containing string, Buffer, TypedArray or BunFile",
- );
- }
- this.key = key;
- }
- let cert = options.cert;
- if (cert) {
- if (!isValidTLSArray(cert)) {
- throw new TypeError(
- "cert argument must be an string, Buffer, TypedArray, BunFile or an array containing string, Buffer, TypedArray or BunFile",
- );
- }
- this.cert = cert;
- }
-
- let ca = options.ca;
- if (ca) {
- if (!isValidTLSArray(ca)) {
- throw new TypeError(
- "ca argument must be an string, Buffer, TypedArray, BunFile or an array containing string, Buffer, TypedArray or BunFile",
- );
- }
- this.ca = ca;
- }
-
- let passphrase = options.passphrase;
- if (passphrase && typeof passphrase !== "string") {
- throw new TypeError("passphrase argument must be an string");
- }
- this.passphrase = passphrase;
-
- let servername = options.servername;
- if (servername && typeof servername !== "string") {
- throw new TypeError("servername argument must be an string");
- }
- this.servername = servername;
-
- let secureOptions = options.secureOptions || 0;
- if (secureOptions && typeof secureOptions !== "number") {
- throw new TypeError("secureOptions argument must be an number");
- }
- this.secureOptions = secureOptions;
-
- const requestCert = options.requestCert || false;
-
- if (requestCert) this._requestCert = requestCert;
- else this._requestCert = undefined;
-
- const rejectUnauthorized = options.rejectUnauthorized || false;
-
- if (rejectUnauthorized) {
- this._rejectUnauthorized = rejectUnauthorized;
- } else this._rejectUnauthorized = undefined;
- }
- }
-
- getTicketKeys() {
- throw Error("Not implented in Bun yet");
- }
-
- setTicketKeys() {
- throw Error("Not implented in Bun yet");
- }
-
- [buntls](port, host, isClient) {
- return [
- {
- serverName: this.servername || host || "localhost",
- key: this.key,
- cert: this.cert,
- ca: this.ca,
- passphrase: this.passphrase,
- secureOptions: this.secureOptions,
- // Client always is NONE on set_verify
- rejectUnauthorized: isClient ? false : this._rejectUnauthorized,
- requestCert: isClient ? false : this._requestCert,
- },
- SocketClass,
- ];
- }
-}
-
-function createServer(options, connectionListener) {
- return new Server(options, connectionListener);
-}
-export const CLIENT_RENEG_LIMIT = 3,
- CLIENT_RENEG_WINDOW = 600,
- DEFAULT_ECDH_CURVE = "auto",
- // https://github.com/Jarred-Sumner/uSockets/blob/fafc241e8664243fc0c51d69684d5d02b9805134/src/crypto/openssl.c#L519-L523
- DEFAULT_CIPHERS =
- "DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256",
- DEFAULT_MIN_VERSION = "TLSv1.2",
- DEFAULT_MAX_VERSION = "TLSv1.3",
- createConnection = (port, host, connectListener) => {
- if (typeof port === "object") {
- // port is option pass Socket options and let connect handle connection options
- return new TLSSocket(port).connect(port, host, connectListener);
- }
- // port is path or host, let connect handle this
- return new TLSSocket().connect(port, host, connectListener);
- },
- connect = createConnection;
-
-var exports = {
- createSecureContext,
- parseCertString,
-
- getCiphers() {
- return DEFAULT_CIPHERS.split(":");
- },
-
- getCurves() {
- return;
- },
-
- convertALPNProtocols(protocols, out) {},
- TLSSocket,
- SecureContext,
- CLIENT_RENEG_LIMIT,
- CLIENT_RENEG_WINDOW,
- DEFAULT_ECDH_CURVE,
- DEFAULT_CIPHERS,
- DEFAULT_MIN_VERSION,
- DEFAULT_MAX_VERSION,
- [Symbol.for("CommonJS")]: 0,
- connect,
- createConnection,
- Server,
- createServer,
-};
-
-export default exports;
-
-export { createSecureContext, parseCertString, TLSSocket, SecureContext };
generated by cgit v1.2.3 (git 2.46.0) at 2025-10-09 11:49:05 +0000