text: // Copyright Joyent, Inc. and other Node contributors.
  //
  // Permission is hereby granted, free of charge, to any person obtaining a
  // copy of this software and associated documentation files (the
  // "Software"), to deal in the Software without restriction, including
  // without limitation the rights to use, copy, modify, merge, publish,
  // distribute, sublicense, and/or sell copies of the Software, and to permit
  // persons to whom the Software is furnished to do so, subject to the
  // following conditions:
  //
  // The above copyright notice and this permission notice shall be included
  // in all copies or substantial portions of the Software.
  //
  // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
  // OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  // MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
  // NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
  // DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
  // OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
  // USE OR OTHER DEALINGS IN THE SOFTWARE.
  
  'use strict';
  const common = require('../common');
  const fixtures = require('../common/fixtures');
  
  if (!common.hasCrypto)
    common.skip('missing crypto');
  
  if (!common.opensslCli)
    common.skip('missing openssl-cli');
  
  const assert = require('assert');
  const tls = require('tls');
  
  const exec = require('child_process').exec;
  
  const options = {
    key: fixtures.readKey('agent2-key.pem'),
    cert: fixtures.readKey('agent2-cert.pem'),
    ciphers: '-ALL:ECDHE-RSA-AES128-SHA256',
    ecdhCurve: 'prime256v1'
  };
  
  const reply = 'I AM THE WALRUS'; // something recognizable
  
  const server = tls.createServer(options, common.mustCall(function(conn) {
    conn.end(reply);
  }));
  
  server.listen(0, '127.0.0.1', common.mustCall(function() {
    const cmd = `"${common.opensslCli}" s_client -cipher ${
      options.ciphers} -connect 127.0.0.1:${this.address().port}`;
  
    exec(cmd, common.mustCall(function(err, stdout, stderr) {
      assert.ifError(err);
      assert(stdout.includes(reply));
      server.close();
    }));
  }));
  