Forge TLS 协议的本地实现

Forge 是一个 TLS 协议的本地实现，一个实用的加密程序以及一组利用多网络资源开发 Web 应用的工具。

Transports

TLS：提供本地 JavaScript 客户端和服务器端 TLS 实现。

例如：

//createTLSclientvarclient=forge.tls.createConnection({server:false,caStore:/*ArrayofPEM-formattedcertsoraCAstoreobject*/,sessionCache:{},//supportedciphersuitesinorderofpreferencecipherSuites:[forge.tls.CipherSuites.TLS_RSA_WITH_AES_128_CBC_SHA,forge.tls.CipherSuites.TLS_RSA_WITH_AES_256_CBC_SHA],virtualHost:'example.com',verify:function(connection,verified,depth,certs){if(depth===0){varcn=certs[0].subject.getField('CN').value;if(cn!=='example.com'){verified={alert:forge.tls.Alert.Description.bad_certificate,message:'Certificatecommonnamedoesnotmatchhostname.'};}}returnverified;},connected:function(connection){console.log('connected');//sendmessagetoserverconnection.prepare(forge.util.encodeUtf8('Hiserver!'));/*NOTE:experimental,startheartbeatretransmissiontimermyHeartbeatTimer=setInterval(function(){connection.prepareHeartbeatRequest(forge.util.createBuffer('1234'));},5*60*1000);*/},/*provideaclient-sidecertifyouwantgetCertificate:function(connection,hint){returnmyClientCertificate;},/*theprivatekeyfortheclient-sidecertifprovided*/getPrivateKey:function(connection,cert){returnmyClientPrivateKey;},tlsDataReady:function(connection){//TLSdata(encrypted)isreadytobesenttotheserversendToServerSomehow(connection.tlsData.getBytes());//ifyouwerecommunicatingwiththeserverbelow,you'ddo://server.process(connection.tlsData.getBytes());},dataReady:function(connection){//cleardatafromtheserverisreadyconsole.log('theserversent:'+forge.util.decodeUtf8(connection.data.getBytes()));//closeconnectionconnection.close();},/*NOTE:experimentalheartbeatReceived:function(connection,payload){//restartretransmissiontimer,lookatpayloadclearInterval(myHeartbeatTimer);myHeartbeatTimer=setInterval(function(){connection.prepareHeartbeatRequest(forge.util.createBuffer('1234'));},5*60*1000);payload.getBytes();},*/closed:function(connection){console.log('disconnected');},error:function(connection,error){console.log('uhoh',error);}});//startthehandshakeprocessclient.handshake();//whenencryptedTLSdataisreceivedfromtheserver,processitclient.process(encryptedBytesFromServer);//createTLSservervarserver=forge.tls.createConnection({server:true,caStore:/*ArrayofPEM-formattedcertsoraCAstoreobject*/,sessionCache:{},//supportedciphersuitesinorderofpreferencecipherSuites:[forge.tls.CipherSuites.TLS_RSA_WITH_AES_128_CBC_SHA,forge.tls.CipherSuites.TLS_RSA_WITH_AES_256_CBC_SHA],//requireaclient-sidecertificateifyouwantverifyClient:true,verify:function(connection,verified,depth,certs){if(depth===0){varcn=certs[0].subject.getField('CN').value;if(cn!=='the-client'){verified={alert:forge.tls.Alert.Description.bad_certificate,message:'Certificatecommonnamedoesnotmatchexpectedclient.'};}}returnverified;},connected:function(connection){console.log('connected');//sendmessagetoclientconnection.prepare(forge.util.encodeUtf8('Hiclient!'));/*NOTE:experimental,startheartbeatretransmissiontimermyHeartbeatTimer=setInterval(function(){connection.prepareHeartbeatRequest(forge.util.createBuffer('1234'));},5*60*1000);*/},getCertificate:function(connection,hint){returnmyServerCertificate;},getPrivateKey:function(connection,cert){returnmyServerPrivateKey;},tlsDataReady:function(connection){//TLSdata(encrypted)isreadytobesenttotheclientsendToClientSomehow(connection.tlsData.getBytes());//ifyouwerecommunicatingwiththeclientaboveyou'ddo://client.process(connection.tlsData.getBytes());},dataReady:function(connection){//cleardatafromtheclientisreadyconsole.log('theclientsent:'+forge.util.decodeUtf8(connection.data.getBytes()));//closeconnectionconnection.close();},/*NOTE:experimentalheartbeatReceived:function(connection,payload){//restartretransmissiontimer,lookatpayloadclearInterval(myHeartbeatTimer);myHeartbeatTimer=setInterval(function(){connection.prepareHeartbeatRequest(forge.util.createBuffer('1234'));},5*60*1000);payload.getBytes();},*/closed:function(connection){console.log('disconnected');},error:function(connection,error){console.log('uhoh',error);}});//whenencryptedTLSdataisreceivedfromtheclient,processitserver.process(encryptedBytesFromClient);