Function test

test/parallel/test-https-client-renegotiation-limit.js:54–114

(next)

}

function test(next) {
  const options = {
    cert: fixtures.readKey('rsa_cert.crt'),
    key: fixtures.readKey('rsa_private.pem'),
  };

  const server = https.createServer(options, common.mustCallAtLeast((req, res) => {
    const conn = req.connection;
    conn.on('error', common.mustCallAtLeast((err) => {
      console.error(`Caught exception: ${err}`);
      assert.match(err.message, /TLS session renegotiation attack/);
      conn.destroy();
    }));
    res.end('ok');
  }));

  server.listen(0, common.mustCall(() => {
    const agent = https.Agent({
      keepAlive: true,
    });

    let client;
    let renegs = 0;

    const options = {
      rejectUnauthorized: false,
      agent,
    };

    const { port } = server.address();

    https.get(`https://localhost:${port}/`, options, common.mustCall((res) => {
      client = res.socket;

      client.on('close', common.mustCall((hadErr) => {
        assert.strictEqual(hadErr, false);
        assert.strictEqual(renegs, tls.CLIENT_RENEG_LIMIT + 1);
        server.close();
        process.nextTick(next);
      }));

      client.on('error', (err) => {
        console.log('CLIENT ERR', err);
        throw err;
      });

      spam();

      // Simulate renegotiation attack
      function spam() {
        client.renegotiate({}, common.mustCallAtLeast((err) => {
          assert.ifError(err);
          assert.ok(renegs <= tls.CLIENT_RENEG_LIMIT);
          setImmediate(spam);
        }, 0));
        renegs++;
      }
    }));