diff options
author | James M Snell <jasnell@gmail.com> | 2020-04-18 21:25:04 +0300 |
---|---|---|
committer | James M Snell <jasnell@gmail.com> | 2020-04-22 03:21:45 +0300 |
commit | 14aa3131864fea00edb3c6887e25cd1d7c533e0d (patch) | |
tree | d91c04c68665444968c41c28f2973408cccbfbf3 /lib/internal/options.js | |
parent | 91ca22106c8d20dd4b09741c59c2f24f3a287277 (diff) |
tls: move getAllowUnauthorized to internal/options
Make it so that the allow unauthorized warning can be easily reused
by the QUIC impl once that lands.
Extracted from https://github.com/nodejs/node/pull/32379
Signed-off-by: James M Snell <jasnell@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/32917
Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Diffstat (limited to 'lib/internal/options.js')
-rw-r--r-- | lib/internal/options.js | 19 |
1 files changed, 18 insertions, 1 deletions
diff --git a/lib/internal/options.js b/lib/internal/options.js index e494787b96c..03586f9dae6 100644 --- a/lib/internal/options.js +++ b/lib/internal/options.js @@ -3,6 +3,8 @@ const { getOptions } = internalBinding('options'); const { options, aliases } = getOptions(); +let warnOnAllowUnauthorized = true; + function getOptionValue(option) { const result = options.get(option); if (!result) { @@ -11,8 +13,23 @@ function getOptionValue(option) { return result.value; } +function getAllowUnauthorized() { + const allowUnauthorized = process.env.NODE_TLS_REJECT_UNAUTHORIZED === '0'; + + if (allowUnauthorized && warnOnAllowUnauthorized) { + warnOnAllowUnauthorized = false; + process.emitWarning( + 'Setting the NODE_TLS_REJECT_UNAUTHORIZED ' + + 'environment variable to \'0\' makes TLS connections ' + + 'and HTTPS requests insecure by disabling ' + + 'certificate verification.'); + } + return allowUnauthorized; +} + module.exports = { options, aliases, - getOptionValue + getOptionValue, + getAllowUnauthorized, }; |