Hoogle Search
Within LTS Haskell 24.66 (ghc-9.10.3)
Note that Stackage only displays results for the latest LTS and Nightly snapshot. Learn more.
-
crypton-x509-validation Data.X509.Validation No documentation available.
-
crypton-x509-validation Data.X509.Validation A set of hooks to manipulate the way the verification works. BEWARE, it's easy to change behavior leading to compromised security.
-
crypton-x509-validation Data.X509.Validation No documentation available.
checkTimeValidity :: ValidationChecks -> Boolcrypton-x509-validation Data.X509.Validation check time validity of every certificate in the chain. the make sure that current time is between each validity bounds in the certificate
defaultValidationCache :: ValidationCachecrypton-x509-validation Data.X509.Validation No documentation available.
exceptionValidationCache :: [(ServiceID, Fingerprint)] -> ValidationCachecrypton-x509-validation Data.X509.Validation create a simple constant cache that list exceptions to the certification validation. Typically this is use to allow self-signed certificates for specific use, with out-of-bounds user checks. No fingerprints will be added after the instance is created. The underlying structure for the check is kept as a list, as usually the exception list will be short, but when the list go above a dozen exceptions it's recommended to use another cache mechanism with a faster lookup mechanism (hashtable, map, etc). Note that only one fingerprint is allowed per ServiceID, for other use, another cache mechanism need to be use.
hookValidateName :: ValidationHooks -> HostName -> Certificate -> [FailedReason]crypton-x509-validation Data.X509.Validation validate the certificate leaf name with the DNS named used to connect
hookValidateTime :: ValidationHooks -> DateTime -> Certificate -> [FailedReason]crypton-x509-validation Data.X509.Validation check whether the certificate in the second argument is valid at the time provided in the first argument. Return an empty list for success or else one or more failure reasons.
tofuValidationCache :: [(ServiceID, Fingerprint)] -> IO ValidationCachecrypton-x509-validation Data.X509.Validation Trust on first use (TOFU) cache with an optional list of exceptions this is similar to the exceptionCache, except that after each succesfull validation it does add the fingerprint to the database. This prevent any further modification of the fingerprint for the remaining
-
crypton-x509-validation Data.X509.Validation X509 validation the function first interrogate the cache and if the validation fail, proper verification is done. If the verification pass, the add to cache callback is called.