Commit graph

981 commits

Author SHA1 Message Date
Vincent Hanquez
ffd061ef95 Add a way to delay interpreting the SKX structure until actually needed.
In some case, with efficient servers, we end up parsing the SKX structure
without having yet set the pending cipher. The cipher key exchange type
being unknown at this stage, lead to not knowing how to parse the SKX
structure.

Fix it by keeping the byte un-interpreted when the cipher key exchange
is not known, and properly parse later on.

Fix #53.
2014-03-23 07:08:43 +00:00
Vincent Hanquez
5af55db180 bump version to 0.3.2 2014-03-23 06:19:45 +00:00
Vincent Hanquez
18b68ed251 bump version to 1.2.4 2014-03-23 06:19:00 +00:00
Vincent Hanquez
f281e1ee6e add items to changelog 2014-03-23 06:18:33 +00:00
Vincent Hanquez
410bc95951 Enable SSL3 protocol version by default. 2014-03-23 06:16:16 +00:00
Vincent Hanquez
14eb3c686c Accept non-fatal UnrecognizedName alert after ClientHello.
Misconfigured servers send an "Unrecognized Name" warning in the SSL
handshake which is ignored by most clients. Some stack would fail the same
way (i.e. Java 7 with SNI enabled).

Improve state machine slightly.

Fix #53.
2014-03-23 06:07:25 +00:00
Vincent Hanquez
3e9a67761b Add proper lower bounds for cereal. fix #57 2014-03-23 05:21:37 +00:00
Vincent Hanquez
4f2ca5cf14 get a way to activate io debug. 2014-03-22 16:08:11 +00:00
Vincent Hanquez
a93372da24 when specifying tls10, actually get tls10. not tls11 2014-03-22 16:07:52 +00:00
Vincent Hanquez
50ee02138d fix bug where version would be inferior to the one specified 2014-03-22 16:07:33 +00:00
Vincent Hanquez
a9225cabf5 bump version to 0.3.1 2014-03-22 07:46:57 +00:00
Vincent Hanquez
e5c7674a56 bump version to 1.2.3 2014-03-22 07:46:46 +00:00
Vincent Hanquez
d2f054b4e3 add CHANGELOG file 2014-03-22 07:46:34 +00:00
Vincent Hanquez
53541f5b9f add a Changelog. 2014-03-22 07:46:15 +00:00
Vincent Hanquez
1d80e2ea79 Fix supported protocol versions in simple client being too strict
allow protocol versions downgrade unless the no-downgrade flag is set.
2014-03-22 07:25:09 +00:00
Vincent Hanquez
7d0e1d5267 Allow handshake records to be split across records.
* Store continuations in record state
* parse handshake records one by one.
2014-03-22 06:54:37 +00:00
Vincent Hanquez
14c3325c75 put the type of the handshake for the parsing of handshake message. 2014-03-22 05:51:51 +00:00
Vincent Hanquez
8088d3e265 Export the partial capability and wrap it in a easier layer.
now runGet has the ability to return partial result and unparsed bytes.
2014-03-22 05:50:09 +00:00
Vincent Hanquez
53d028d208 remove old code commented 2014-03-21 11:16:07 +00:00
Vincent Hanquez
cacab68840 use byteable to get a -> Bytestring function. 2014-03-21 11:09:12 +00:00
Vincent Hanquez
84864e9b6f Merge pull request #51 from rethab/master
gitignore cabal sandbox and some spellings in Backend.hs
2014-02-22 14:20:51 +00:00
Reto Hablützel
53a09a45a3 Fixed typos in documentation 2014-02-21 10:50:54 +01:00
Reto Hablützel
362c51ab91 Ignore cabal sandbox files 2014-02-21 10:50:31 +01:00
Vincent Hanquez
4c5da1ce4f fix cabal description 2014-02-07 16:48:39 +00:00
Vincent Hanquez
2d35f1a118 bump version to 1.2.2 2014-01-29 04:41:54 +00:00
Vincent Hanquez
331651b0ca add a way to get credentials from memory instead of from files. 2014-01-29 04:41:47 +00:00
Vincent Hanquez
a59f8b334a clarify the documentation on what's expected from LoadX509 2014-01-29 04:41:18 +00:00
Vincent Hanquez
a96e575243 bump version to 1.2.1 2014-01-27 10:00:04 +00:00
Vincent Hanquez
47c7243385 When the KeyUsage extension is not here, no restrictions apply on the key 2014-01-27 09:56:51 +00:00
Vincent Hanquez
7d64ffe5a4 remove extra directory 2014-01-27 07:28:03 +00:00
Vincent Hanquez
7287817fae bump version to 0.3.0 2014-01-27 06:32:58 +00:00
Vincent Hanquez
0b1e299180 bump version to 1.2.0 2014-01-27 06:32:28 +00:00
Vincent Hanquez
98ebefa3bb prepare a release 2014-01-27 06:32:08 +00:00
Vincent Hanquez
f6ecbf82c6 export some extra validation data types 2014-01-27 04:17:30 +00:00
Vincent Hanquez
228928bf15 remaining cleanup and reactive all options, and tls-extra removal 2014-01-27 04:03:53 +00:00
Vincent Hanquez
8b03b9ca86 add Network.TLS.Extra for best compatibility with tls-extra removal 2014-01-27 04:03:26 +00:00
Vincent Hanquez
4905fb1ecb add ciphers tests. 2014-01-27 03:51:17 +00:00
Vincent Hanquez
182ef6a096 fold tls-extra ciphers in tls. 2014-01-27 03:51:02 +00:00
Vincent Hanquez
c6117b96f3 misc realignement 2014-01-27 03:50:20 +00:00
Vincent Hanquez
ad6ed6beac add some Show and Eq instances 2014-01-27 03:50:04 +00:00
Vincent Hanquez
51d9c999f0 align properly 2014-01-26 14:15:30 +00:00
Vincent Hanquez
ddc52166e3 repair Retrieve certificate and add ability to show fingerprint 2014-01-26 14:15:18 +00:00
Vincent Hanquez
eb156d78fe repair simple client 2014-01-26 14:15:10 +00:00
Vincent Hanquez
bc9c1e690d various updates related to new tls 2014-01-26 08:17:51 +00:00
Vincent Hanquez
72eb1d10f1 repair loggin 2014-01-26 07:06:39 +00:00
Vincent Hanquez
d76ae2efa3 add more ignore files 2014-01-26 07:03:24 +00:00
Vincent Hanquez
86375aaa57 move onHandshake to a serverHooks, and remove CommonHooks everywhere.
export modifyHooks as contextModifyHooks
2014-01-26 07:02:43 +00:00
Vincent Hanquez
251a0b2193 move logging into dynamic hooks 2014-01-26 06:50:47 +00:00
Vincent Hanquez
8dccb7d7bd document hooks 2014-01-26 06:38:53 +00:00
Vincent Hanquez
11575711bc add dynamic recv certificate hook and remove the static one. 2014-01-26 06:37:17 +00:00