Function createServer

test/parallel/test-tls-ticket.js:46–97

()

let serverCount = 0;
function createServer() {
  const id = serverCount++;

  let counter = 0;
  let previousKey = null;

  const server = tls.createServer({
    key: fixtures.readKey('agent1-key.pem'),
    cert: fixtures.readKey('agent1-cert.pem'),
    ticketKeys: keys
  }, common.mustCallAtLeast(function(c) {
    serverLog.push(id);
    // TODO(@sam-github) Triggers close_notify before NewSessionTicket bug.
    // c.end();
    c.end('x');

    counter++;

    // Rotate ticket keys
    //
    // Take especial care to account for TLS1.2 and TLS1.3 differences around
    // when ticket keys are encrypted. In TLS1.2, they are encrypted before the
    // handshake complete callback, but in TLS1.3, they are encrypted after.
    // There is no callback or way for us to know when they were sent, so hook
    // the client's reception of the keys, and use it as proof that the current
    // keys were used, and its safe to rotate them.
    //
    // Rotation can occur right away if the session was reused, the keys were
    // already decrypted or we wouldn't have a reused session.
    function setTicketKeys(keys) {
      if (c.isSessionReused())
        server.setTicketKeys(keys);
      else
        s.once('session', () => {
          server.setTicketKeys(keys);
        });
    }
    if (counter === 1) {
      previousKey = server.getTicketKeys();
      assert.strictEqual(previousKey.compare(keys), 0);
      setTicketKeys(crypto.randomBytes(48));
    } else if (counter === 2) {
      setTicketKeys(previousKey);
    } else if (counter === 3) {
      // Use keys from counter=2
    } else {
      throw new Error('UNREACHABLE');
    }
  }));

  return server;
}

const naturalServers = [ createServer(), createServer(), createServer() ];