hs-tls/core/tls.cabal

Name:                tls
Version:             1.2.6
Description:
   Native Haskell TLS and SSL protocol implementation for server and client.
   .
   This provides a high-level implementation of a sensitive security protocol,
   eliminating a common set of security issues through the use of the advanced
   type system, high level constructions and common Haskell features.
   .
   Currently implement the SSL3.0, TLS1.0, TLS1.1 and TLS1.2 protocol,
   and support RSA and Ephemeral Diffie Hellman key exchanges,
   and many extensions.
   .
   Some debug tools linked with tls, are available through the
   <http://hackage.haskell.org/package/tls-debug/>.
License:             BSD3
License-file:        LICENSE
Copyright:           Vincent Hanquez <vincent@snarc.org>
Author:              Vincent Hanquez <vincent@snarc.org>
Maintainer:          Vincent Hanquez <vincent@snarc.org>
Synopsis:            TLS/SSL protocol native implementation (Server and Client)
Build-Type:          Simple
Category:            Network
stability:           experimental
Cabal-Version:       >=1.8
Homepage:            http://github.com/vincenthz/hs-tls
extra-source-files:  Tests/*.hs
                     CHANGELOG.md

Flag compat
  Description:       Accept SSLv2 compatible handshake
  Default:           True

Library
  Build-Depends:     base >= 3 && < 5
                   , mtl
                   , cereal >= 0.4
                   , bytestring
                   , byteable
                   , network
                   , data-default-class
                   -- crypto related
                   , cryptohash >= 0.6
                   , crypto-random >= 0.0 && < 0.1
                   , crypto-numbers
                   , crypto-pubkey-types >= 0.4
                   , crypto-pubkey >= 0.2.4
                   , cipher-rc4
                   , cipher-aes >= 0.2 && < 0.3
                   -- certificate related
                   , asn1-types >= 0.2.0
                   , asn1-encoding
                   , x509 >= 1.4.3 && < 1.5.0
                   , x509-store >= 1.4.4
                   , x509-validation >= 1.5.0 && < 1.6.0
  Exposed-modules:   Network.TLS
                     Network.TLS.Cipher
                     Network.TLS.Compression
                     Network.TLS.Internal
                     Network.TLS.Extra
                     Network.TLS.Extra.Cipher
  other-modules:     Network.TLS.Cap
                     Network.TLS.Struct
                     Network.TLS.Core
                     Network.TLS.Context
                     Network.TLS.Context.Internal
                     Network.TLS.Credentials
                     Network.TLS.Backend
                     Network.TLS.Crypto
                     Network.TLS.Crypto.DH
                     Network.TLS.Extension
                     Network.TLS.Handshake
                     Network.TLS.Handshake.Common
                     Network.TLS.Handshake.Certificate
                     Network.TLS.Handshake.Key
                     Network.TLS.Handshake.Client
                     Network.TLS.Handshake.Server
                     Network.TLS.Handshake.Process
                     Network.TLS.Handshake.Signature
                     Network.TLS.Handshake.State
                     Network.TLS.Hooks
                     Network.TLS.IO
                     Network.TLS.MAC
                     Network.TLS.Measurement
                     Network.TLS.Packet
                     Network.TLS.Parameters
                     Network.TLS.Record
                     Network.TLS.Record.Types
                     Network.TLS.Record.Engage
                     Network.TLS.Record.Disengage
                     Network.TLS.Record.State
                     Network.TLS.RNG
                     Network.TLS.State
                     Network.TLS.Session
                     Network.TLS.Sending
                     Network.TLS.Receiving
                     Network.TLS.Util
                     Network.TLS.Util.ASN1
                     Network.TLS.Util.Serialization
                     Network.TLS.Types
                     Network.TLS.Wire
                     Network.TLS.X509
  ghc-options:       -Wall -fwarn-tabs
  if impl(ghc == 7.6.1)
    ghc-options:     -O0
  if flag(compat)
    cpp-options:     -DSSLV2_COMPATIBLE

Test-Suite test-tls
  type:              exitcode-stdio-1.0
  hs-source-dirs:    Tests
  Main-is:           Tests.hs
  Build-Depends:     base >= 3 && < 5
                   , mtl
                   , cereal >= 0.3
                   , data-default-class
                   , QuickCheck >= 2
                   , test-framework
                   , test-framework-quickcheck2
                   , cprng-aes >= 0.5
                   , crypto-pubkey >= 0.2
                   , bytestring
                   , x509
                   , x509-validation
                   , tls
                   , time
                   , crypto-random
                   , crypto-pubkey
  ghc-options:       -Wall -fno-warn-orphans -fno-warn-missing-signatures -fwarn-tabs

Benchmark bench-tls
  hs-source-dirs:    Benchmarks Tests
  Main-Is:           Benchmarks.hs
  type:              exitcode-stdio-1.0
  Build-depends:     base >= 4 && < 5
                   , tls
                   , x509
                   , x509-validation
                   , data-default-class
                   , crypto-random
                   , criterion
                   , cprng-aes
                   , mtl
                   , bytestring
                   , crypto-pubkey >= 0.2
                   , time
                   , QuickCheck >= 2

source-repository head
  type: git
  location: git://github.com/vincenthz/hs-tls
  subdir: core
initial import 2010-09-09 21:47:19 +00:00			`Name: tls`
bump version to 1.2.6 2014-03-23 11:07:54 +00:00			`Version: 1.2.6`
initial import 2010-09-09 21:47:19 +00:00			`Description:`
update description to be more accurate and descriptive 2011-08-07 08:59:57 +00:00			`Native Haskell TLS and SSL protocol implementation for server and client.`
initial import 2010-09-09 21:47:19 +00:00			`.`
update description to be more accurate and descriptive 2011-08-07 08:59:57 +00:00			`This provides a high-level implementation of a sensitive security protocol,`
			`eliminating a common set of security issues through the use of the advanced`
			`type system, high level constructions and common Haskell features.`
update cabal file and bump version to 0.2 2010-10-06 08:21:20 +00:00			`.`
update documentation: TLS1.2 is working 2011-08-17 19:50:57 +00:00			`Currently implement the SSL3.0, TLS1.0, TLS1.1 and TLS1.2 protocol,`
fix cabal description 2014-02-07 16:48:39 +00:00			`and support RSA and Ephemeral Diffie Hellman key exchanges,`
			`and many extensions.`
update description to be more accurate and descriptive 2011-08-07 08:59:57 +00:00			`.`
fix cabal description 2014-02-07 16:48:39 +00:00			`Some debug tools linked with tls, are available through the`
			`<http://hackage.haskell.org/package/tls-debug/>.`
initial import 2010-09-09 21:47:19 +00:00			`License: BSD3`
			`License-file: LICENSE`
			`Copyright: Vincent Hanquez <vincent@snarc.org>`
			`Author: Vincent Hanquez <vincent@snarc.org>`
			`Maintainer: Vincent Hanquez <vincent@snarc.org>`
update cabal file and bump version to 0.2 2010-10-06 08:21:20 +00:00			`Synopsis: TLS/SSL protocol native implementation (Server and Client)`
initial import 2010-09-09 21:47:19 +00:00			`Build-Type: Simple`
			`Category: Network`
			`stability: experimental`
upgrade cabal-version and fixup problems related to the upgrade. 2012-07-12 08:02:27 +00:00			`Cabal-Version: >=1.8`
add homepage link 2010-09-25 22:17:30 +00:00			`Homepage: http://github.com/vincenthz/hs-tls`
Include all test files in the cabal package. Reported-by: Alexander Vershilov 2012-04-22 19:18:47 +00:00			`extra-source-files: Tests/*.hs`
add a Changelog. 2014-03-22 07:46:15 +00:00			`CHANGELOG.md`
initial import 2010-09-09 21:47:19 +00:00
add flag to reject SSLv2 compatible handshake. 2012-11-16 16:01:41 +00:00			`Flag compat`
			`Description: Accept SSLv2 compatible handshake`
add the SSLv2_COMPATIBLE flag to the tests. add flag default to true. 2012-12-04 08:13:54 +00:00			`Default: True`
add flag to reject SSLv2 compatible handshake. 2012-11-16 16:01:41 +00:00
initial import 2010-09-09 21:47:19 +00:00			`Library`
stylistic change in cabal file. 2011-02-20 17:35:09 +00:00			`Build-Depends: base >= 3 && < 5`
			`, mtl`
Add proper lower bounds for cereal. fix #57 2014-03-23 05:21:37 +00:00			`, cereal >= 0.4`
stylistic change in cabal file. 2011-02-20 17:35:09 +00:00			`, bytestring`
use byteable to get a -> Bytestring function. 2014-03-21 11:09:12 +00:00			`, byteable`
properly define the server name extension to be a variant type. This allow to have a better high level type and simplify the user side. 2012-10-20 07:59:39 +00:00			`, network`
Change the way parameters are created. This is still WIP and this commit is truly horrific. Sadly, it's just too much effort to do clean commit with this, and it doesn't mix with experimentation either. 2014-01-25 16:51:51 +00:00			`, data-default-class`
fold tls-extra ciphers in tls. 2014-01-27 03:51:02 +00:00			`-- crypto related`
			`, cryptohash >= 0.6`
move to crypto-random 2013-09-01 06:42:43 +00:00			`, crypto-random >= 0.0 && < 0.1`
separate some helpers and add new one. 2013-12-07 04:04:53 +00:00			`, crypto-numbers`
add some wrapper for DH operations. 2013-12-11 07:53:55 +00:00			`, crypto-pubkey-types >= 0.4`
limit to crypto-pubkey > 0.2.4 2013-12-28 15:26:03 +00:00			`, crypto-pubkey >= 0.2.4`
fold tls-extra ciphers in tls. 2014-01-27 03:51:02 +00:00			`, cipher-rc4`
			`, cipher-aes >= 0.2 && < 0.3`
			`-- certificate related`
update for x509 2013-05-19 07:05:46 +00:00			`, asn1-types >= 0.2.0`
			`, asn1-encoding`
			`, x509 >= 1.4.3 && < 1.5.0`
add a way to get credentials from memory instead of from files. 2014-01-29 04:41:47 +00:00			`, x509-store >= 1.4.4`
Change the way parameters are created. This is still WIP and this commit is truly horrific. Sadly, it's just too much effort to do clean commit with this, and it doesn't mix with experimentation either. 2014-01-25 16:51:51 +00:00			`, x509-validation >= 1.5.0 && < 1.6.0`
add more haddock related stuff 2011-03-02 08:43:05 +00:00			`Exposed-modules: Network.TLS`
expose some needed modules and expose TLSClient type (noticed by Michael Snoyman) 2010-09-22 17:31:42 +00:00			`Network.TLS.Cipher`
add more haddock related stuff 2011-03-02 08:43:05 +00:00			`Network.TLS.Compression`
add internal module as backdoor for hidden function/definition. also export core sendPacket/recvPacket 2011-03-19 21:45:43 +00:00			`Network.TLS.Internal`
add Network.TLS.Extra for best compatibility with tls-extra removal 2014-01-27 04:03:26 +00:00			`Network.TLS.Extra`
fold tls-extra ciphers in tls. 2014-01-27 03:51:02 +00:00			`Network.TLS.Extra.Cipher`
add more haddock related stuff 2011-03-02 08:43:05 +00:00			`other-modules: Network.TLS.Cap`
			`Network.TLS.Struct`
unify clientparams and serverparams 2011-03-01 20:01:40 +00:00			`Network.TLS.Core`
split context structure and accessor out of Core. 2011-12-06 00:15:00 +00:00			`Network.TLS.Context`
Change the way parameters are created. This is still WIP and this commit is truly horrific. Sadly, it's just too much effort to do clean commit with this, and it doesn't mix with experimentation either. 2014-01-25 16:51:51 +00:00			`Network.TLS.Context.Internal`
add a credentials module 2013-12-28 15:12:14 +00:00			`Network.TLS.Credentials`
split Backend and introduce a new HasBackend class the HasBackend class allow to not have multiples contextNewOnX calls, but instead will favor only one contextNew that can take all HasBackend types. 2014-01-10 07:01:34 +00:00			`Network.TLS.Backend`
expose some needed modules and expose TLSClient type (noticed by Michael Snoyman) 2010-09-22 17:31:42 +00:00			`Network.TLS.Crypto`
add some wrapper for DH operations. 2013-12-11 07:53:55 +00:00			`Network.TLS.Crypto.DH`
move extension decoding and encoding in a separate file. 2012-05-14 05:39:20 +00:00			`Network.TLS.Extension`
Add missing module Network.TLS.Handshake to .cabal file. 2012-07-04 20:15:19 +00:00			`Network.TLS.Handshake`
Split handshake module. preparation step, removing common functions. 2012-08-18 21:46:53 +00:00			`Network.TLS.Handshake.Common`
split apart certificate stuff from handshake. at the moment it's mostly a stub, but will host all handling of client&server certificates. 2012-08-18 21:57:58 +00:00			`Network.TLS.Handshake.Certificate`
move handshake stuff in Handshake layer. 2013-07-28 08:19:28 +00:00			`Network.TLS.Handshake.Key`
split client handshake from handshake. 2012-08-18 22:05:56 +00:00			`Network.TLS.Handshake.Client`
split server from handshake. 2012-08-18 22:13:13 +00:00			`Network.TLS.Handshake.Server`
move handshake stuff in Handshake layer. 2013-07-28 08:19:28 +00:00			`Network.TLS.Handshake.Process`
split signature apart from handshake 2012-08-18 22:05:37 +00:00			`Network.TLS.Handshake.Signature`
separate handshake state from state. 2013-07-18 06:19:05 +00:00			`Network.TLS.Handshake.State`
move logging and hooks into a Hooks module 2013-12-11 07:55:24 +00:00			`Network.TLS.Hooks`
separate lowlevel IO operation in its own module. 2012-04-27 06:21:29 +00:00			`Network.TLS.IO`
add some measurements of bytes received/sent and number of handshakes per context. 2011-11-11 19:05:17 +00:00			`Network.TLS.MAC`
			`Network.TLS.Measurement`
initial import 2010-09-09 21:47:19 +00:00			`Network.TLS.Packet`
split parameters from context 2014-01-05 11:14:17 +00:00			`Network.TLS.Parameters`
Create a record type to help type safety 2011-08-12 17:41:49 +00:00			`Network.TLS.Record`
cleanup the record layer properly from other layer on top. simplify and make the code much more straighforward. 2011-11-30 21:51:22 +00:00			`Network.TLS.Record.Types`
			`Network.TLS.Record.Engage`
			`Network.TLS.Record.Disengage`
split record state from state. 2013-07-13 07:03:25 +00:00			`Network.TLS.Record.State`
			`Network.TLS.RNG`
initial import 2010-09-09 21:47:19 +00:00			`Network.TLS.State`
switch session related callback to a new SessionManager class. add necessary helper setSessionManager to not have to propagate Rank2Types and ExistentialQuantification to the user. 2012-07-12 07:59:59 +00:00			`Network.TLS.Session`
initial import 2010-09-09 21:47:19 +00:00			`Network.TLS.Sending`
			`Network.TLS.Receiving`
add util file in cabal 2010-09-26 17:52:58 +00:00			`Network.TLS.Util`
add a helper module for ASN1 2013-12-05 06:51:23 +00:00			`Network.TLS.Util.ASN1`
separate some helpers and add new one. 2013-12-07 04:04:53 +00:00			`Network.TLS.Util.Serialization`
split some common types from struct and move them to types. 2012-07-12 07:56:16 +00:00			`Network.TLS.Types`
initial import 2010-09-09 21:47:19 +00:00			`Network.TLS.Wire`
update for x509 2013-05-19 07:05:46 +00:00			`Network.TLS.X509`
add -fwarn-tabs to tls. 2013-09-18 06:20:48 +00:00			`ghc-options: -Wall -fwarn-tabs`
Disable optimisation for ghc 7.6.1 to workaround the bad record mac problem Temporary fix until the bug is resolved upstream. see http://hackage.haskell.org/trac/ghc/ticket/7270 2012-09-25 07:09:37 +00:00			`if impl(ghc == 7.6.1)`
			`ghc-options: -O0`
add flag to reject SSLv2 compatible handshake. 2012-11-16 16:01:41 +00:00			`if flag(compat)`
			`cpp-options: -DSSLV2_COMPATIBLE`
initial import 2010-09-09 21:47:19 +00:00
create a test-suite that use tls as a library instead of using directly. use the secret Network.TLS.Internal module, and as a result, compile tls modules once now instead of twice each. 2012-12-05 07:57:13 +00:00			`Test-Suite test-tls`
			`type: exitcode-stdio-1.0`
			`hs-source-dirs: Tests`
initial import 2010-09-09 21:47:19 +00:00			`Main-is: Tests.hs`
create a test-suite that use tls as a library instead of using directly. use the secret Network.TLS.Internal module, and as a result, compile tls modules once now instead of twice each. 2012-12-05 07:57:13 +00:00			`Build-Depends: base >= 3 && < 5`
upgrade cabal-version and fixup problems related to the upgrade. 2012-07-12 08:02:27 +00:00			`, mtl`
			`, cereal >= 0.3`
Change the way parameters are created. This is still WIP and this commit is truly horrific. Sadly, it's just too much effort to do clean commit with this, and it doesn't mix with experimentation either. 2014-01-25 16:51:51 +00:00			`, data-default-class`
stylistic change in cabal file. 2011-02-20 17:35:09 +00:00			`, QuickCheck >= 2`
upgrade test suite to test-framework 2011-10-23 16:54:07 +00:00			`, test-framework`
			`, test-framework-quickcheck2`
move to crypto-random 2013-09-01 06:42:43 +00:00			`, cprng-aes >= 0.5`
			`, crypto-pubkey >= 0.2`
stylistic change in cabal file. 2011-02-20 17:35:09 +00:00			`, bytestring`
update for x509 2013-05-19 07:05:46 +00:00			`, x509`
Change the way parameters are created. This is still WIP and this commit is truly horrific. Sadly, it's just too much effort to do clean commit with this, and it doesn't mix with experimentation either. 2014-01-25 16:51:51 +00:00			`, x509-validation`
create a test-suite that use tls as a library instead of using directly. use the secret Network.TLS.Internal module, and as a result, compile tls modules once now instead of twice each. 2012-12-05 07:57:13 +00:00			`, tls`
re-introduce certificate marshalling tests now that we can generate keys. 2011-11-11 22:53:17 +00:00			`, time`
move to crypto-random 2013-09-01 06:42:43 +00:00			`, crypto-random`
add tests for DHE_RSA. 2013-12-11 08:40:24 +00:00			`, crypto-pubkey`
add -fwarn-tabs to tls. 2013-09-18 06:20:48 +00:00			`ghc-options: -Wall -fno-warn-orphans -fno-warn-missing-signatures -fwarn-tabs`
initial import 2010-09-09 21:47:19 +00:00
add benchmark section (empty for now) 2013-07-13 07:04:26 +00:00			`Benchmark bench-tls`
			`hs-source-dirs: Benchmarks Tests`
			`Main-Is: Benchmarks.hs`
			`type: exitcode-stdio-1.0`
			`Build-depends: base >= 4 && < 5`
			`, tls`
			`, x509`
Change the way parameters are created. This is still WIP and this commit is truly horrific. Sadly, it's just too much effort to do clean commit with this, and it doesn't mix with experimentation either. 2014-01-25 16:51:51 +00:00			`, x509-validation`
			`, data-default-class`
move to crypto-random 2013-09-01 06:42:43 +00:00			`, crypto-random`
add benchmark section (empty for now) 2013-07-13 07:04:26 +00:00			`, criterion`
			`, cprng-aes`
			`, mtl`
			`, bytestring`
move to crypto-random 2013-09-01 06:42:43 +00:00			`, crypto-pubkey >= 0.2`
add benchmark section (empty for now) 2013-07-13 07:04:26 +00:00			`, time`
			`, QuickCheck >= 2`

initial import 2010-09-09 21:47:19 +00:00			`source-repository head`
			`type: git`
			`location: git://github.com/vincenthz/hs-tls`
prepare for 1.2 branch 2013-05-26 06:24:02 +00:00			`subdir: core`