How to set the allowed protocol for a node.js HTTPS server?

Question

I have built a HTTPS server using the default https module and express .

However, I can't find anywhere how to tell it to only use the latest version of TLS, nor any information on which version of SSL/TLS was supported by the default server.

I did found some express middlware promising to enforce SSL , but SSL is obsolete since 2015, and there is still no information on which version is enforced.

How can I define which version of TLS to use for my app? Or at least how to find out which version is used?

Answer 1

Have a look in the nodejs documentation. They refer to your OpenSSL version, for example here .

So if you set secureProtocol in the options, you can choose the protocol.