Commit graph

991 commits

Author SHA1 Message Date
Vincent Hanquez
1e7a523e9f Merge branch 'master' of ssh://github.com/vincenthz/hs-tls 2014-04-18 09:35:29 +01:00
Vincent Hanquez
9c7736bc20 repair retrieve certificate validation, and improve fingerprints 2014-04-18 06:09:42 +01:00
Vincent Hanquez
b8c03c329d Merge pull request #59 from celwell/patch-1
spelling and grammar
2014-04-13 13:13:12 +01:00
Christopher Elwell
a405d8550c spelling and grammar 2014-04-08 19:10:34 -07:00
Vincent Hanquez
dbe54e51ac bump version to 1.2.6 2014-03-23 11:07:54 +00:00
Vincent Hanquez
fc4d94823b add new item to changelog 2014-03-23 11:07:40 +00:00
Vincent Hanquez
8653d49a42 catch Error_EOF exception and return empty data. 2014-03-23 10:55:39 +00:00
Vincent Hanquez
beb4e7c67d fix socket backend to stop looping when not receiving data
a endless loop would occur when empty of data is received
2014-03-23 10:55:03 +00:00
Vincent Hanquez
619d05f80f add item to changelog. 2014-03-23 07:18:32 +00:00
Vincent Hanquez
c7a41b4244 bump version to 1.2.5 2014-03-23 07:11:15 +00:00
Vincent Hanquez
ffd061ef95 Add a way to delay interpreting the SKX structure until actually needed.
In some case, with efficient servers, we end up parsing the SKX structure
without having yet set the pending cipher. The cipher key exchange type
being unknown at this stage, lead to not knowing how to parse the SKX
structure.

Fix it by keeping the byte un-interpreted when the cipher key exchange
is not known, and properly parse later on.

Fix #53.
2014-03-23 07:08:43 +00:00
Vincent Hanquez
5af55db180 bump version to 0.3.2 2014-03-23 06:19:45 +00:00
Vincent Hanquez
18b68ed251 bump version to 1.2.4 2014-03-23 06:19:00 +00:00
Vincent Hanquez
f281e1ee6e add items to changelog 2014-03-23 06:18:33 +00:00
Vincent Hanquez
410bc95951 Enable SSL3 protocol version by default. 2014-03-23 06:16:16 +00:00
Vincent Hanquez
14eb3c686c Accept non-fatal UnrecognizedName alert after ClientHello.
Misconfigured servers send an "Unrecognized Name" warning in the SSL
handshake which is ignored by most clients. Some stack would fail the same
way (i.e. Java 7 with SNI enabled).

Improve state machine slightly.

Fix #53.
2014-03-23 06:07:25 +00:00
Vincent Hanquez
3e9a67761b Add proper lower bounds for cereal. fix #57 2014-03-23 05:21:37 +00:00
Vincent Hanquez
4f2ca5cf14 get a way to activate io debug. 2014-03-22 16:08:11 +00:00
Vincent Hanquez
a93372da24 when specifying tls10, actually get tls10. not tls11 2014-03-22 16:07:52 +00:00
Vincent Hanquez
50ee02138d fix bug where version would be inferior to the one specified 2014-03-22 16:07:33 +00:00
Vincent Hanquez
a9225cabf5 bump version to 0.3.1 2014-03-22 07:46:57 +00:00
Vincent Hanquez
e5c7674a56 bump version to 1.2.3 2014-03-22 07:46:46 +00:00
Vincent Hanquez
d2f054b4e3 add CHANGELOG file 2014-03-22 07:46:34 +00:00
Vincent Hanquez
53541f5b9f add a Changelog. 2014-03-22 07:46:15 +00:00
Vincent Hanquez
1d80e2ea79 Fix supported protocol versions in simple client being too strict
allow protocol versions downgrade unless the no-downgrade flag is set.
2014-03-22 07:25:09 +00:00
Vincent Hanquez
7d0e1d5267 Allow handshake records to be split across records.
* Store continuations in record state
* parse handshake records one by one.
2014-03-22 06:54:37 +00:00
Vincent Hanquez
14c3325c75 put the type of the handshake for the parsing of handshake message. 2014-03-22 05:51:51 +00:00
Vincent Hanquez
8088d3e265 Export the partial capability and wrap it in a easier layer.
now runGet has the ability to return partial result and unparsed bytes.
2014-03-22 05:50:09 +00:00
Vincent Hanquez
53d028d208 remove old code commented 2014-03-21 11:16:07 +00:00
Vincent Hanquez
cacab68840 use byteable to get a -> Bytestring function. 2014-03-21 11:09:12 +00:00
Vincent Hanquez
84864e9b6f Merge pull request #51 from rethab/master
gitignore cabal sandbox and some spellings in Backend.hs
2014-02-22 14:20:51 +00:00
Reto Hablützel
53a09a45a3 Fixed typos in documentation 2014-02-21 10:50:54 +01:00
Reto Hablützel
362c51ab91 Ignore cabal sandbox files 2014-02-21 10:50:31 +01:00
Vincent Hanquez
4c5da1ce4f fix cabal description 2014-02-07 16:48:39 +00:00
Vincent Hanquez
2d35f1a118 bump version to 1.2.2 2014-01-29 04:41:54 +00:00
Vincent Hanquez
331651b0ca add a way to get credentials from memory instead of from files. 2014-01-29 04:41:47 +00:00
Vincent Hanquez
a59f8b334a clarify the documentation on what's expected from LoadX509 2014-01-29 04:41:18 +00:00
Vincent Hanquez
a96e575243 bump version to 1.2.1 2014-01-27 10:00:04 +00:00
Vincent Hanquez
47c7243385 When the KeyUsage extension is not here, no restrictions apply on the key 2014-01-27 09:56:51 +00:00
Vincent Hanquez
7d64ffe5a4 remove extra directory 2014-01-27 07:28:03 +00:00
Vincent Hanquez
7287817fae bump version to 0.3.0 2014-01-27 06:32:58 +00:00
Vincent Hanquez
0b1e299180 bump version to 1.2.0 2014-01-27 06:32:28 +00:00
Vincent Hanquez
98ebefa3bb prepare a release 2014-01-27 06:32:08 +00:00
Vincent Hanquez
f6ecbf82c6 export some extra validation data types 2014-01-27 04:17:30 +00:00
Vincent Hanquez
228928bf15 remaining cleanup and reactive all options, and tls-extra removal 2014-01-27 04:03:53 +00:00
Vincent Hanquez
8b03b9ca86 add Network.TLS.Extra for best compatibility with tls-extra removal 2014-01-27 04:03:26 +00:00
Vincent Hanquez
4905fb1ecb add ciphers tests. 2014-01-27 03:51:17 +00:00
Vincent Hanquez
182ef6a096 fold tls-extra ciphers in tls. 2014-01-27 03:51:02 +00:00
Vincent Hanquez
c6117b96f3 misc realignement 2014-01-27 03:50:20 +00:00
Vincent Hanquez
ad6ed6beac add some Show and Eq instances 2014-01-27 03:50:04 +00:00