tlsSocket.getEphemeralKeyInfo() returns empty object on PFS connection

[WRMSRwasTaken]

Version: v10.0.0
Platform: Windows 10 Education 1709 x64
Subsystem: TLS

I wanted to see if node negotiates the new ciphers introduced with OpenSSL 1.1 with my server, already running OpenSSL 1.1

const tls = require('tls');

const tlsSocket = tls.connect(443, '<server>');

tlsSocket.on('secureConnect', info => {
	console.log('TLS version:', tlsSocket.getProtocol());
	console.log('Cipher:', tlsSocket.getCipher().name);
	console.log('Curve:', tlsSocket.getEphemeralKeyInfo());
});

The seen Output then is:

TLS version: TLSv1.2
Cipher: ECDHE-RSA-CHACHA20-POLY1305
Curve: {}

Why is tlsSocket.getEphemeralKeyInfo() returning an empty object? It's clearly a PFS connection.

It should return something like this: { type: 'ECDHE', name: 'X25519', size: 253}

[Trott]

@nodejs/crypto

[bnoordhuis]

Why is tlsSocket.getEphemeralKeyInfo() returning an empty object?

Because it currently only knows about DH and ECDH keys. Pull requests welcome.

[shigeki]

This issue is caused by EVP_PKEY_EC which only covers ANSI X9.62 curves not IETF ones.
I will submit a PR to fix this.