By neglecting to specify a protocol, the code snippet below will establish an HTTPS server utilizing TLS 1.2:
var options = {
key: fs.readFileSync("security/server.key"),
cert: fs.readFileSync("security/server.crt")
};
https.createServer(options, app).listen(443);
However, I have a specific endpoint that needs to function as a subscriber endpoint for the Fitbit API, which specifically requires TLS 1.0. To achieve this, I must configure secureProtocol to utilize TLSv1_method.
var options = {
key: fs.readFileSync("security/server.key"),
cert: fs.readFileSync("security/server.crt"),
secureProtocol: "TLSv1_method" // Fitbit subscription API requires TLS 1.0
};
https.createServer(options, app).listen(443);
Is there a recommended approach to implement TLS 1.0 for a single endpoint while using TLS 1.2 for all other endpoints? It is possible that leveraging the http-proxy module could provide a solution, although interpreting the documentation to suit my requirements has proven challenging. Please note that I am segregating traffic based on different subdomains.