text: 'use strict';
  var common = require('../common');
  var assert = require('assert');
  
  if (!common.hasCrypto) {
    common.skip('missing crypto');
    return;
  }
  var tls = require('tls');
  
  var exec = require('child_process').exec;
  var fs = require('fs');
  
  var options = {
    key: fs.readFileSync(common.fixturesDir + '/keys/agent2-key.pem'),
    cert: fs.readFileSync(common.fixturesDir + '/keys/agent2-cert.pem'),
    ciphers: '-ALL:ECDHE-RSA-AES128-SHA256',
    ecdhCurve: 'prime256v1'
  };
  
  var reply = 'I AM THE WALRUS'; // something recognizable
  
  var server = tls.createServer(options, common.mustCall(function(conn) {
    conn.end(reply);
  }));
  
  server.listen(0, '127.0.0.1', common.mustCall(function() {
    var cmd = '"' + common.opensslCli + '" s_client -cipher ' + options.ciphers +
              ` -connect 127.0.0.1:${this.address().port}`;
  
    // for the performance and stability issue in s_client on Windows
    if (common.isWindows)
      cmd += ' -no_rand_screen';
  
    exec(cmd, common.mustCall(function(err, stdout, stderr) {
      if (err) throw err;
      assert.notEqual(stdout.indexOf(reply), -1);
      server.close();
    }));
  }));
  