Use require('tls') to access this module.
使用require('tls')访问此模块。
The tls module uses OpenSSL to provide Transport Layer Security and/or
Secure Socket Layer: encrypted stream communication.
tls模块使用OpenSSL提供Transport Layer Security（传输层安全协议）和 / 或Secure Socket Layer（安全套接层协议）：加密的通信流。
TLS/SSL is a public/private key infrastructure. Each client and each server must have a private key. A private key is created like this
TLS/SSL基于公钥/私钥的非对称加密体系，每一个客户端与服务器都需要拥有一个私有密钥。私有密钥可用如下方式生成：
openssl genrsa -out ryans-key.pem 1024All severs and some clients need to have a certificate. Certificates are public keys signed by a Certificate Authority or self-signed. The first step to getting a certificate is to create a "Certificate Signing Request" (CSR) file. This is done with:
所有服务器和一部分客户端需要拥有一份数字证书。数字证书是由某个CA（数字证书认证机构）使用其公钥签名授予的，或者也可以用户自签名。要获得一份数字证书，首先需要生成一个CSR（证书签名请求）文件。方法如下：
openssl req -new -key ryans-key.pem -out ryans-csr.pemTo create a self-signed certificate with the CSR, do this:
要使用CSR文件生成一个自签名的数字证书，方法如下：
openssl x509 -req -in ryans-csr.pem -signkey ryans-key.pem -out ryans-cert.pemAlternatively you can send the CSR to a Certificate Authority for signing.
你也可以将CSR文件发给一家CA以获得签名。
(TODO: docs on creating a CA, for now interested users should just look at
test/fixtures/keys/Makefile in the Node source code)
（关于如何创建CA的文档有待补充。感兴趣的用户可以直接浏览Node源代码中的test/fixtures/keys/Makefile文件）
Creates a new client connection to the given port and host. (If host
defaults to localhost.) options should be an object which specifies
建立一个到指定端口port和主机host的新的客户端连接。（host参数的默认值为localhost。）options是一个包含以下内容的对象：
key: A string or Buffer containing the private key of the server in
PEM format. (Required)
key：包含服务器私钥的字符串或Buffer对象。密钥的格式为PEM。（必选）
cert: A string or Buffer containing the certificate key of the server in
PEM format.
cert：包含服务器数字证书密钥的字符串或Buffer对象。密钥的格式为PEM。
ca: An array of strings or Buffers of trusted certificates. If this is
omitted several well known "root" CAs will be used, like VeriSign.
These are used to authorize connections.
ca：包含可信任数字证书字符串或Buffer对象的数组。如果忽略此属性，则会使用几个常见的"根"CA的数字证书，如VeriSign。这些数字证书将被用来对连接进行验证。
tls.connect() returns a cleartext CryptoStream object.
tls.connect()返回一个明文的CryptoStream对象。
After the TLS/SSL handshake the callback is called. The callback will be
called no matter if the server's certificate was authorized or not. It is up
to the user to test s.authorized to see if the server certificate was
signed by one of the specified CAs. If s.authorized === false then the error
can be found in s.authorizationError.
TLS/SSL连接握手之后callback回调函数会被调用。无论服务器的数字证书是否通过验证，callback函数都会被调用。用户应该检查s.authorized以确定服务器数字证书是否通过了验证（被某个可信任的CA签名）。当s.authorized === false时可以从s.authorizationError中获得具体的错误。
This class is a subclass of net.Server and has the same methods on it.
Instead of accepting just raw TCP connections, this accepts encrypted
connections using TLS or SSL.
这是net.Server的子类，拥有和net.Server完全一样的方法。区别在于这个类使用TLS或SSL建立加密的连接，而非仅仅接受原始的TCP连接。
Here is a simple example echo server:
下面是一个简单的回声服务器的例子：
var tls = require('tls');
var fs = require('fs');
var options = {
key: fs.readFileSync('server-key.pem'),
cert: fs.readFileSync('server-cert.pem')
};
tls.createServer(options, function (s) {
s.write("welcome!\n");
s.pipe(s);
}).listen(8000);You can test this server by connecting to it with openssl s_client:
你可以使用openssl s_client连接到这个服务器进行测试：
openssl s_client -connect 127.0.0.1:8000This is a constructor for the tls.Server class. The options object
has these possibilities:
这是tls.Server类的构造函数。参数options对象可以包含下列内容：
key: A string or Buffer containing the private key of the server in
PEM format. (Required)
key：包含服务器私钥的字符串或Buffer对象。密钥的格式为PEM。（必选）
cert: A string or Buffer containing the certificate key of the server in
PEM format. (Required)
cert：包含服务器数字证书密钥的字符串或Buffer对象。密钥的格式为PEM。（必选）
ca: An array of strings or Buffers of trusted certificates. If this is
omitted several well known "root" CAs will be used, like VeriSign.
These are used to authorize connections.
ca：包含可信任数字证书字符串或Buffer对象的数组。如果忽略此属性，则会使用几个常见的"根"CA的数字证书，如VeriSign。这些证书将被用来对连接进行验证。
requestCert: If true the server will request a certificate from
clients that connect and attempt to verify that certificate. Default:
false.
requestCert：如果设为true则服务器会向建立连接的客户端要求一个数字证书，并且试图去验证这份数字证书。默认为false。
rejectUnauthorized: If true the server will reject any connection
which is not authorized with the list of supplied CAs. This option only
has an effect if requestCert is true. Default: false.
rejectUnauthorized：如果设为true则服务器将拒绝任何没有通过CA验证的连接。此选项仅在requestCert设为true时有效。默认为false。
function (cleartextStream) {}
This event is emitted after a new connection has been successfully
handshaked. The argument is a duplex instance of stream.Stream. It has all
the common stream methods and events.
当一个新的连接成功完成握手过程后此事件被触发。参数是一个可读可写的stream.Stream实例对象，此对象具有Stream（流）对象所有公共的方法和事件。
cleartextStream.authorized is a boolean value which indicates if the
client has verified by one of the supplied certificate authorities for the
server. If cleartextStream.authorized is false, then
cleartextStream.authorizationError is set to describe how authorization
failed. Implied but worth mentioning: depending on the settings of the TLS
server, you unauthorized connections may be accepted.
cleartextStream.authorized是一个布尔值，用以表明客户端是否通过了服务器所指定的可信任CA的验证。如果cleartextStream.authorized值为false，则可以从cleartextStream.authorizationError中获得验证失败的原因。这意味着：未经验证的连接是有可能被接受的，这依赖于TLS服务器的具体设置。
Begin accepting connections on the specified port and host. If the
host is omitted, the server will accept connections directed to any
IPv4 address (INADDR_ANY).
开始在指定的端口port和主机名host上接受连接。如果没有设置host参数，服务器将接受到达本机所有IPv4地址（INADDR_ANY）的连接。
This function is asynchronous. The last parameter callback will be called
when the server has been bound.
此函数是异步的。最后一个参数callback所指定的回调函数会在服务器绑定完成后被调用。
See net.Server for more information.
更多信息参见net.Server。
Stops the server from accepting new connections. This function is
asynchronous, the server is finally closed when the server emits a 'close'
event.
关闭服务器，停止接受新的连接请求。此函数是异步的，当服务器触发一个'close'事件时才真正被关闭。
Set this property to reject connections when the server's connection count gets high.
服务器最大连接数量。服务器会拒绝超过此数量限制的连接，以防止同时建立的连接数过多。
The number of concurrent connections on the server.
服务器并发连接数量。