Function test

test/parallel/test-tls-client-mindhsize.js:28–68

(size, err, next, minDHSizeOverride)

}

function test(size, err, next, minDHSizeOverride) {
  const options = {
    key: key,
    cert: cert,
    dhparam: loadDHParam(size),
    ciphers: 'DHE-RSA-AES128-GCM-SHA256'
  };

  const server = tls.createServer(options, function(conn) {
    conn.end();
  });

  server.on('close', common.mustCall(function(isException) {
    assert(!isException);
    if (next) next();
  }));

  server.listen(0, common.mustCall(function() {
    // Client set minimum DH parameter size to 2048 or 3072 bits
    // so that it fails when it makes a connection to the tls
    // server where is too small. This depends on the openssl
    // security level
    const minDHSize = minDHSizeOverride ?? ((secLevel > 1) ? 3072 : 2048);
    const client = tls.connect({
      minDHSize: minDHSize,
      port: this.address().port,
      rejectUnauthorized: false,
      maxVersion: 'TLSv1.2',
    }, function() {
      nsuccess++;
      server.close();
    });
    if (err) {
      client.on('error', common.mustCall((e) => {
        nerror++;
        assert.strictEqual(e.code, 'ERR_TLS_DH_PARAM_SIZE');
        server.close();
      }));
    }
  }));
}

// A client connection fails with an error when a client has an
// 2048 bits minDHSize option and a server has 1024 bits dhparam