node:tls
#Import
import tls from "nstdlib/tls";Note
Only the API surface is available. No OpenSSL, so tls.connect() cannot make a secure context unless a host fills the node_binding_crypto_secure_context_dispatch and node_binding_tls_wrap_dispatch hooks. native/ does, over mbedTLS, and tls.connect() then verifies a chain for real. rootCertificates and getCACertificates() answer [] unless a host fills the getBundledRootCertificates hook. native/ does, from the submodule's own store.
#Runtime support
| Where it runs | Status | Export coverage | Details |
|---|---|---|---|
| nstd | ✅ works | – | Native tests match Node.js: tls. |
| Browser | ❔ not tested | 100% of Node.js | It imports with the small process shim. 19/19 Node.js exports are available. No module-specific behavior test ran. |
| Node.js (host) | ⚠️ some support | 100% of Node.js | 19/19 exports. |
#Exports (19 of 19)
Each cell shows what happens when code reads an export:
- ✅ Available through every import style. A named error also counts.
- ⚠️ Available through only some import styles.
- ❔ The export exists but has no value.
- ❌ The export does not exist.
- – This environment was not measured.
| Export | Node.js | nstdlib | browser |
|---|---|---|---|
CLIENT_RENEG_LIMIT | ✅ | ✅ | ✅ |
CLIENT_RENEG_WINDOW | ✅ | ✅ | ✅ |
DEFAULT_CIPHERS | ✅ | ✅ | ✅ |
DEFAULT_ECDH_CURVE | ✅ | ✅ | ✅ |
DEFAULT_MAX_VERSION | ✅ | ✅ | ✅ |
DEFAULT_MIN_VERSION | ✅ | ✅ | ✅ |
SecureContext | ✅ | ✅ | ✅ |
Server | ✅ | ✅ | ✅ |
TLSSocket | ✅ | ✅ | ✅ |
checkServerIdentity | ✅ | ✅ | ✅ |
connect | ✅ | ✅ | ✅ |
convertALPNProtocols | ✅ | ✅ | ✅ |
createSecureContext | ✅ | ✅ | ✅ |
createServer | ✅ | ✅ | ✅ |
getCACertificates | ✅ | ✅ | ✅ |
getCertificateCompressionAlgorithms | ✅ | ✅ | ✅ |
getCiphers | ✅ | ✅ | ✅ |
rootCertificates | ✅ | ✅ | ✅ |
setDefaultCACertificates | ✅ | ✅ | ✅ |