tlsSocket.getFinished()


  • 返回值: <Buffer> | <undefined> 最近一次作为 SSL/TLS 握手的一部分发送到套接字的 Finished 消息,如果尚未发送任何 Finished 消息,则为 undefined

Finished 消息是完整握手的消息摘要(TLS 1.0 共 192 位,SSL 3.0 更长),当不需要或 SSL/TLS 提供的认证不够时,它们可以用于外部认证过程。

【As the Finished messages are message digests of the complete handshake (with a total of 192 bits for TLS 1.0 and more for SSL 3.0), they can be used for external authentication procedures when the authentication provided by SSL/TLS is not desired or is not enough.】

对应于 OpenSSL 中的 SSL_get_finished 例程,可用于实现 RFC 5929tls-unique 通道绑定。

【Corresponds to the SSL_get_finished routine in OpenSSL and may be used to implement the tls-unique channel binding from RFC 5929.】