1// Copyright Joyent, Inc. and other Node contributors. 2// 3// Permission is hereby granted, free of charge, to any person obtaining a 4// copy of this software and associated documentation files (the 5// "Software"), to deal in the Software without restriction, including 6// without limitation the rights to use, copy, modify, merge, publish, 7// distribute, sublicense, and/or sell copies of the Software, and to permit 8// persons to whom the Software is furnished to do so, subject to the 9// following conditions: 10// 11// The above copyright notice and this permission notice shall be included 12// in all copies or substantial portions of the Software. 13// 14// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS 15// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 16// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN 17// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, 18// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR 19// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE 20// USE OR OTHER DEALINGS IN THE SOFTWARE. 21 22'use strict'; 23const common = require('../common'); 24if (!common.hasCrypto) 25 common.skip('missing crypto'); 26 27// Check getPeerCertificate can properly handle '\0' for fix CVE-2009-2408. 28 29const assert = require('assert'); 30const tls = require('tls'); 31const fixtures = require('../common/fixtures'); 32 33const server = tls.createServer({ 34 key: fixtures.readSync(['0-dns', '0-dns-key.pem']), 35 cert: fixtures.readSync(['0-dns', '0-dns-cert.pem']) 36}, common.mustCall((c) => { 37 c.once('data', common.mustCall(() => { 38 c.destroy(); 39 server.close(); 40 })); 41})).listen(0, common.mustCall(() => { 42 const c = tls.connect(server.address().port, { 43 rejectUnauthorized: false 44 }, common.mustCall(() => { 45 const cert = c.getPeerCertificate(); 46 assert.strictEqual(cert.subjectaltname, 47 'DNS:"good.example.org\\u0000.evil.example.com", ' + 48 'DNS:just-another.example.com, ' + 49 'IP Address:8.8.8.8, ' + 50 'IP Address:8.8.4.4, ' + 51 'DNS:last.example.com'); 52 c.write('ok'); 53 })); 54})); 55