From b659385791681fe8375d3c2ba9c6136d3e19f328 Mon Sep 17 00:00:00 2001
From: Sam Roberts <vieuxtech@gmail.com>
Date: Tue, 23 May 2017 09:02:07 -0700
Subject: [PATCH] src: allow --tls-cipher-list in NODE_OPTIONS

PR-URL: https://github.com/nodejs/node/pull/13172
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
Reviewed-By: Refael Ackermann <refack@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Gibson Fahnestock <gibfahn@gmail.com>
---
 doc/api/cli.md | 1 +
 src/node.cc    | 3 ++-
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/doc/api/cli.md b/doc/api/cli.md
index c48489f4f7ff4e..1d3f736967df1f 100644
--- a/doc/api/cli.md
+++ b/doc/api/cli.md
@@ -444,6 +444,7 @@ Node options that are allowed are:
 - `--redirect-warnings`
 - `--require`, `-r`
 - `--throw-deprecation`
+- `--tls-cipher-list`
 - `--trace-deprecation`
 - `--trace-events-categories`
 - `--trace-events-enabled`
diff --git a/src/node.cc b/src/node.cc
index 9b57d3c3344ef2..9c44c56fc43f23 100644
--- a/src/node.cc
+++ b/src/node.cc
@@ -3712,7 +3712,7 @@ static void CheckIfAllowedInEnv(const char* exe, bool is_env,
   size_t arglen = eq ? eq - arg : strlen(arg);
 
   static const char* whitelist[] = {
-    // Node options
+    // Node options, sorted in `node --help` order for ease of comparison.
     "--require", "-r",
     "--inspect",
     "--inspect-brk",
@@ -3730,6 +3730,7 @@ static void CheckIfAllowedInEnv(const char* exe, bool is_env,
     "--track-heap-objects",
     "--zero-fill-buffers",
     "--v8-pool-size",
+    "--tls-cipher-list",
     "--use-bundled-ca",
     "--use-openssl-ca",
     "--enable-fips",