12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667 |
- "use strict";
- Object.defineProperty(exports, "__esModule", { value: true });
- exports.ipIsPrivateV4Address = exports.upgradeSocket = exports.describeAddress = exports.describeTLS = void 0;
- const tls_1 = require("tls");
- /**
- * Returns a string describing the encryption on a given socket instance.
- */
- function describeTLS(socket) {
- if (socket instanceof tls_1.TLSSocket) {
- const protocol = socket.getProtocol();
- return protocol ? protocol : "Server socket or disconnected client socket";
- }
- return "No encryption";
- }
- exports.describeTLS = describeTLS;
- /**
- * Returns a string describing the remote address of a socket.
- */
- function describeAddress(socket) {
- if (socket.remoteFamily === "IPv6") {
- return `[${socket.remoteAddress}]:${socket.remotePort}`;
- }
- return `${socket.remoteAddress}:${socket.remotePort}`;
- }
- exports.describeAddress = describeAddress;
- /**
- * Upgrade a socket connection with TLS.
- */
- function upgradeSocket(socket, options) {
- return new Promise((resolve, reject) => {
- const tlsOptions = Object.assign({}, options, {
- socket
- });
- const tlsSocket = (0, tls_1.connect)(tlsOptions, () => {
- const expectCertificate = tlsOptions.rejectUnauthorized !== false;
- if (expectCertificate && !tlsSocket.authorized) {
- reject(tlsSocket.authorizationError);
- }
- else {
- // Remove error listener added below.
- tlsSocket.removeAllListeners("error");
- resolve(tlsSocket);
- }
- }).once("error", error => {
- reject(error);
- });
- });
- }
- exports.upgradeSocket = upgradeSocket;
- /**
- * Returns true if an IP is a private address according to https://tools.ietf.org/html/rfc1918#section-3.
- * This will handle IPv4-mapped IPv6 addresses correctly but return false for all other IPv6 addresses.
- *
- * @param ip The IP as a string, e.g. "192.168.0.1"
- */
- function ipIsPrivateV4Address(ip = "") {
- // Handle IPv4-mapped IPv6 addresses like ::ffff:192.168.0.1
- if (ip.startsWith("::ffff:")) {
- ip = ip.substr(7); // Strip ::ffff: prefix
- }
- const octets = ip.split(".").map(o => parseInt(o, 10));
- return octets[0] === 10 // 10.0.0.0 - 10.255.255.255
- || (octets[0] === 172 && octets[1] >= 16 && octets[1] <= 31) // 172.16.0.0 - 172.31.255.255
- || (octets[0] === 192 && octets[1] === 168) // 192.168.0.0 - 192.168.255.255
- || ip === "127.0.0.1";
- }
- exports.ipIsPrivateV4Address = ipIsPrivateV4Address;
|