test.js

#!/usr/bin/env node
var fs = require('fs');
var net = require('net');
var tls = require('tls');

var secureContext = tls.createSecureContext({
  cert: fs.readFileSync('test_cert.pem'),
  key: fs.readFileSync('test_key.pem')
})

var server = net.Server(function(raw) {
  var pair = tls.createSecurePair(null, true, false, false, {
    SNICallback: function(servername, cb) {
      console.log('servername', servername);
      cb(null, secureContext); 
    }
  });
  raw.pipe(pair.encrypted).pipe(raw);
});

server.listen(4443, function() {
  var addr = server.address();
  console.log('Server listening on %s %s:%d', addr.family, addr.address, addr.port);
});