Function processCiphers

lib/internal/tls/secure-context.js:96–127

(ciphers, name)

}

function processCiphers(ciphers, name) {
  ciphers = StringPrototypeSplit(ciphers || getDefaultCiphers(), ':');

  const cipherList =
    ArrayPrototypeJoin(
      ArrayPrototypeFilter(
        ciphers,
        (cipher) => {
          if (cipher.length === 0) return false;
          if (StringPrototypeStartsWith(cipher, 'TLS_')) return false;
          if (StringPrototypeStartsWith(cipher, '!TLS_')) return false;
          return true;
        }), ':');

  const cipherSuites =
    ArrayPrototypeJoin(
      ArrayPrototypeFilter(
        ciphers,
        (cipher) => {
          if (cipher.length === 0) return false;
          if (StringPrototypeStartsWith(cipher, 'TLS_')) return true;
          if (StringPrototypeStartsWith(cipher, '!TLS_')) return true;
          return false;
        }), ':');

  // Specifying empty cipher suites for both TLS1.2 and TLS1.3 is invalid, its
  // not possible to handshake with no suites.
  if (cipherSuites === '' && cipherList === '')
    throw new ERR_INVALID_ARG_VALUE(name, ciphers);

  return { cipherList, cipherSuites };
}

function configSecureContext(context, options = kEmptyObject, name = 'options') {
  validateObject(options, name);