René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"`@SECLEVEL=X` does not enable TLSv1","articleBody":"### Affected URL(s)\n\nhttps://nodejs.org/api/tls.html#setting-security-levels\n\n### Description of the problem\n\nAfter running the below script:\n```js\nimport { createServer, connect } from 'node:tls';\nconst port = 443;\n\ncreateServer({ ciphers: 'DEFAULT@SECLEVEL=0', minVersion: 'TLSv1' }, function(socket) {\n  console.log('Client connected with protocol:', socket.getProtocol());\n  socket.end();\n  this.close();\n})\n.listen(port, () => {\n  connect(port, { ciphers: 'DEFAULT@SECLEVEL=0', maxVersion: 'TLSv1' });\n});\n```\nI get the error:\n```\nnode:events:486\n      throw er; // Unhandled 'error' event\n      ^\n\nError: 80F3C7A933760000:error:0A0000BF:SSL routines:tls_setup_handshake:no protocols available:../deps/openssl/openssl/ssl/statem/statem_lib.c:155:\n\n    at TLSSocket._start (node:internal/tls/wrap:1097:16)\n    at Object.onceWrapper (node:events:622:28)\n    at TLSSocket.emit (node:events:520:35)\n    at TCPConnectWrap.afterConnect [as oncomplete] (node:net:1622:10)\nEmitted 'error' event on TLSSocket instance at:\n    at emitErrorNT (node:internal/streams/destroy:170:8)\n    at emitErrorCloseNT (node:internal/streams/destroy:129:3)\n    at process.processTicksAndRejections (node:internal/process/task_queues:89:21) {\n  library: 'SSL routines',\n  reason: 'no protocols available',\n  code: 'ERR_SSL_NO_PROTOCOLS_AVAILABLE'\n}\n```\n\nIt seems like `tls.DEFAULT_MIN_VERSION` is TLSv1.2. Maybe when setting a lower `maxVersion`, this property is not automatically lowered.","author":{"url":"https://github.com/davidebombelli","@type":"Person","name":"davidebombelli"},"datePublished":"2025-11-03T16:09:02Z","url":"https://github.com/nodejs/node/issues/60569"}