Native Haskell TLS and SSL protocol implementation for server and client.
This provides a high-level implementation of a sensitive security protocol, eliminating a common set of security issues through the use of the advanced type system, high level constructions and common Haskell features.
Currently implement the SSL3.0, TLS1.0, TLS1.1 and TLS1.2 protocol, and support RSA and Ephemeral (Elliptic curve and regular) Diffie Hellman key exchanges, and many extensions.
Some debug tools linked with tls, are available through the http://hackage.haskell.org/package/tls-debug/.
- Wrap renegotiation failures with HandshakeFailed #237
- Improve selection of server certificate and use "signature_algorithms" extension #236
- Change Bytes to ByteString and deprecate the Bytes type alias #230
- Session compression and SNI #223
- Deprecating ciphersuitemedium. Putting WARNING to ciphersuiteall since this includes RC4 #153 #222
- Removing NPN #214
- Supporting RSAPSS defined in TLS 1.3 #207
- Supporting X25519 and X448 in the IES style. #205
- Strip leading zeros in DHE premaster secret #201
- RSASSA-PSS signatures can be enabled with
supportedHashSignatures. This uses assignments from TLS 1.3, for example
- Diffie-Hellman with elliptic curves X25519 and X448: This can be enabled with
supportedGroups, which also gives control over curve preference.
- ECDH with curve P-256 now uses optimized C implementation from package
- Cipher list
ciphersuite_mediumis now deprecated, users are advised to use
ciphersuite_allis kept for compatibility with old servers but this is discouraged and generates a warning (this includes RC4 ciphers, see #153 for reference).
- Support for NPN (Next Protocol Negotiation) has been removed. The replacement is ALPN (Application-Layer Protocol Negotiation).
- Data type
SessionDatanow contains fields for compression algorithm and client SNI. A
SessionManagerimplementation that serializes/deserializes
SessionDatavalues must deal with the new fields.
Network.TLSexports a type alias named
Byteswhich is now deprecated. The replacement is to use strict
Using reliable versions of dependent libraries.
- Selecting a cipher based on "signature_algorithms" #193
- Respecting the "signature_algorithms" extension #137
- Fix RSA signature in CertificateVerify with TLS < 1.2 #189
- Fix ECDSA with TLS 1.0 / TLS 1.1 #187
- Sending an empty server name from a server if necessary. #175
Network.TLS.Extraprovides Finite Field Diffie-Hellman Ephemeral Parameters in RFC 7919 #174
- Restore ability to renegotiate#164
- Drop support for old GHC.
- Enable sha384 ciphers and provide
ciphersuite_defaultas default set of ciphers for common needs #168
- SNI late checks #147
- Expose the HasBackend(..) class fully, so that developers can use TLS over their own channels #149
Fix older GHC builds
Disable SHA384 based cipher, as they don't work properly yet.
- Add new ciphers
- Improve some debugging and outputs
- Fix a bug with ECDHE based cipher where serialization
- Debugging: Add a way to print random seed and a way to side-load a seed for replayability
- Improve tests
- Fix tests on 32 bits
time_tmachines (time not within bound)
- VirtualHost: Add a way to load credentials related to the hostname used by the client (Julian Beaumont)
- VirtualHost: Expose an API to query which hostname the client has contacted (Julian Beaumont)
- Add a way to disable empty packet that are use for security when using old versions + old CBC based cipher (Anton Dessiatov)
- Add support for Hans (Haskell Network Stack) (Adam Wick)
- Add support for ECDSA signature
- Add support for ECDSA-ECDHE Cipher
- Improve parsing of ECC related structure
- Add cipher suites for forward secrecy on more clients (Aaron Friel)
- Maintain more handshake information to be queried by protocol (Adam Wick)
- handle SCSV on client and server side (Kazu Yamamoto)
- Cleanup renegotiation logic (Kazu Yamamoto)
- Various testing improvements with the openssl test parts
- Cleanup AEAD handling for future support of other ciphers
Repair DHE RSA handling on the cipher by creating signature properly
modernize the crypto stack by using cryptonite.
- add more tests (network, local)
- cleanup cipher / bulk code, certificate verify / creation, and digitall signed handling
- fix handling of DHE ciphers with MS SSL stack that serialize leading zero.
Fix an issue of type of key / hash that prevented connection with SChannel.
Fix an issue with stream cipher not correctly calculating the internal state, resulting systematically in bad record mac failure during handshake
support chain certificate in credentials
- adding ALPN extension
- adding support for AEAD, and particularly AES128-GCM
- Adding support for ECDH
- Do not support SSL3 by default for security reason.
- add EnumSafe8 and 16 for specific sized Enum instance that are safer
- export signatureAndHash parser/encoder
- add a "known" list of extensions
- add SignatureAlgorithms extension
- add Heartbeat extension
- add support for EC curves and point format extensions
- add preliminary SessionTicket extension
- Debug: Add the ability to choose arbitrary cipher in the client hello.
Fix compilation with old mtl version
Propagate asynchronous exception
- use hourglass instead of time
- use tasty instead of test-framework
- add travis file
- remove old de-optimisation flag as the bytestring bug is old now and it conflict with cabal check
Update x509 dependencies
- Export TLSParams and HasBackend type names
- Added FlexibleContexts flag required by ghc-7.9
- debug: add support for specifying the timeout length in milliseconds.
- debug: add support for 3DES in simple client
add support for 3DES-EDE-CBC-SHA1 (cipher 0xa)
- repair retrieve certificate validation, and improve fingerprints
- remove groom from dependency
- make RecordM an instance of Applicative
- Fixes the Error_EOF partial pattern match error in exception handling
Version 1.2.6 (23 Mar 2014)
- Fixed socket backend endless loop when the server does not close connection properly at the TLS level with the close notify alert.
- Catch Error_EOF in recvData and return empty data.
Version 1.2.5 (23 Mar 2014)
Fixed Server key exchange data being parsed without the correct context, leading to not knowing how to parse the structure. The bug happens on efficient server that happens to send the ServerKeyXchg message together with the ServerHello in the same handshake packet. This trigger parsing of all the messages without having set the pending cipher. Delay parsing, when this happen, until we know what to do with it.
Version 1.2.4 (23 Mar 2014)
- Fixed unrecognized name non-fatal alert after client hello.
- Add SSL3 to the supported list of version by default.
- Fix cereal lower bound to 0.4.0 minimum
Version 1.2.3 (22 Mar 2014)
- Fixed handshake records not being able to span multiples records.