create-servers
Advanced tools
Comparing version 1.3.2 to 1.4.0
32
index.js
@@ -17,2 +17,21 @@ 'use strict'; | ||
var CIPHERS = [ | ||
'ECDHE-RSA-AES256-SHA384', | ||
'DHE-RSA-AES256-SHA384', | ||
'ECDHE-RSA-AES256-SHA256', | ||
'DHE-RSA-AES256-SHA256', | ||
'ECDHE-RSA-AES128-SHA256', | ||
'DHE-RSA-AES128-SHA256', | ||
'HIGH', | ||
'!aNULL', | ||
'!eNULL', | ||
'!EXPORT', | ||
'!DES', | ||
'!RC4', | ||
'!MD5', | ||
'!PSK', | ||
'!SRP', | ||
'!CAMELLIA' | ||
].join(':'); | ||
// | ||
@@ -115,2 +134,11 @@ // ### function createServers (dispatch, options, callback) | ||
ssl.ciphers = ssl.ciphers || CIPHERS; | ||
// | ||
// Remark: If an array is passed in lets join it like we do the defaults | ||
// | ||
if (Array.isArray(ssl.ciphers)) { | ||
ssl.ciphers = ssl.ciphers.join(':'); | ||
} | ||
if (ssl.ca && !Array.isArray(ssl.ca)) { | ||
@@ -128,3 +156,5 @@ ssl.ca = [ssl.ca]; | ||
} | ||
) | ||
), | ||
ciphers: ssl.ciphers, | ||
honorCipherOrder: ssl.honorCipherOrder === false ? false : true | ||
}, ssl.handler || handler); | ||
@@ -131,0 +161,0 @@ |
{ | ||
"name": "create-servers", | ||
"version": "1.3.2", | ||
"version": "1.4.0", | ||
"description": "Create an http AND/OR an https server and call the same request handler.", | ||
@@ -5,0 +5,0 @@ "main": "index.js", |
@@ -6,2 +6,8 @@ create-servers | ||
*NOTE on Security* | ||
Inspired by [`iojs`][iojs] and a well written [article][article], we have defaulted | ||
our [ciphers][ciphers] to support "perfect-forward-security" as well as removing insecure | ||
cipher suites from being a possible choice. With this in mind, | ||
be aware that we will no longer support ie6 on windows XP by default. | ||
**http** | ||
@@ -121,2 +127,6 @@ ``` js | ||
### Author: [Charlie Robbins](https://github.com/indexzero) | ||
### License: MIT | ||
### License: MIT | ||
[article]: https://certsimple.com/blog/a-plus-node-js-ssl | ||
[iojs]: https://github.com/iojs/io.js | ||
[ciphers]: https://iojs.org/api/tls.html#tls_tls_createserver_options_secureconnectionlistener |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
14481
280
131