More HTTPS tests

test/helpers/create-https-test-server.ts

@@ -3,10 +3,15 @@ import net from 'net';
 import express from 'express';
 import pify from 'pify';
 import pem from 'pem';
+import type {SecureContextOptions} from 'tls';
 
 export type HttpsServerOptions = {
 	commonName?: string;
 	days?: number;
+	ciphers?: SecureContextOptions['ciphers'];
+	honorCipherOrder?: SecureContextOptions['honorCipherOrder'];
+	minVersion?: SecureContextOptions['minVersion'];
+	maxVersion?: SecureContextOptions['maxVersion'];
 };
 
 export interface ExtendedHttpsTestServer extends express.Express {
@@ -49,7 +54,11 @@ const createHttpsTestServer = async (options: HttpsServerOptions = {}): Promise<
 			cert: serverCert,
 			ca: caCert,
 			requestCert: true,
-			rejectUnauthorized: false // This should be checked by the test
+			rejectUnauthorized: false, // This should be checked by the test
+			ciphers: options.ciphers,
+			honorCipherOrder: options.honorCipherOrder,
+			minVersion: options.minVersion,
+			maxVersion: options.maxVersion
 		},
 		server
 	);

test/https.ts

@@ -1,5 +1,5 @@
 import test from 'ava';
-import {DetailedPeerCertificate} from 'tls';
+import tls, {DetailedPeerCertificate} from 'tls';
 import pEvent from 'p-event';
 import pify from 'pify';
 import pem from 'pem';
@@ -434,3 +434,56 @@ test('client certificate PFX', withHttpsServer(), async (t, server, got) => {
 	t.is(response.peerCertificate.subject.CN, 'client');
 	t.is(response.peerCertificate.issuer.CN, 'authority');
 });
+
+const ciphers = tls.getCiphers().map(cipher => cipher.toUpperCase());
+
+test('https request with `ciphers` option', withHttpsServer({ciphers: `${ciphers[0]!}:${ciphers[1]!}:${ciphers[2]!}`}), async (t, server, got) => {
+	server.get('/', (request, response) => {
+		response.json({
+			cipher: (request.socket as any).getCipher().name
+		});
+	});
+
+	const response: any = await got({
+		httpsOptions: {
+			ciphers: ciphers[0]
+		}
+	}).json();
+
+	t.is(response.cipher, ciphers[0]);
+});
+
+test('https request with `honorCipherOrder` option', withHttpsServer({ciphers: `${ciphers[0]!}:${ciphers[1]!}`}), async (t, server, got) => {
+	server.get('/', (request, response) => {
+		response.json({
+			cipher: (request.socket as any).getCipher().name
+		});
+	});
+
+	const response: any = await got({
+		httpsOptions: {
+			ciphers: `${ciphers[1]!}:${ciphers[0]!}`,
+			honorCipherOrder: true
+		}
+	}).json();
+
+	t.is(response.cipher, ciphers[0]);
+});
+
+test('https request with `minVersion` option', withHttpsServer({maxVersion: 'TLSv1.2'}), async (t, server, got) => {
+	server.get('/', (request, response) => {
+		response.json({
+			version: (request.socket as any).getCipher().version
+		});
+	});
+
+	const request = got({
+		httpsOptions: {
+			minVersion: 'TLSv1.3'
+		}
+	});
+
+	await t.throwsAsync(request, {
+		code: 'EPROTO'
+	});
+});