`SSL_CB_HANDSHAKE_START` and `SSL_CB_HANDSHAKE_DONE` are called
sending HelloRequest in OpenSSL-1.1.1.
We need to check whether this is in a renegotiation state or not.
Sam Roberts [Sun, 6 May 2018 04:52:34 +0000 (13:52 +0900)]
tls: add min/max protocol version options
The existing secureProtocol option only allows setting the allowed
protocol to a specific version, or setting it to "all supported
versions". It also used obscure strings based on OpenSSL C API
functions. Directly setting the min or max is easier to use and explain.
Backport-PR-URL: https://github.com/nodejs/node/pull/24676
PR-URL: https://github.com/nodejs/node/pull/24405 Reviewed-By: Refael Ackermann <refack@gmail.com> Reviewed-By: Rod Vagg <rod@vagg.org>
Gbp-Pq: Topic ssl
Gbp-Pq: Name acb73518b7274bacdfc133fd121e91dfd6ba460b.patch
* Avoid two tests to cause a FTBFS (Closes #919588)
+ test-fs-error-messages fails with eatmydata
+ test-net-listen-after-destroying-stdin is flaky
* gbp for debian/buster branch