- update to 1.3.2
* Add cipher suites for forward secrecy on more clients (Aaron Friel)
* Maintain more handshake information to be queried by protocol (Adam Wick)
* handle SCSV on client and server side (Kazu Yamamoto)
* Cleanup renegotiation logic (Kazu Yamamoto)
* Various testing improvements with the openssl test parts
* Cleanup AEAD handling for future support of other ciphers
OBS-URL: https://build.opensuse.org/request/show/328084
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/ghc-tls?expand=0&rev=4
* Add cipher suites for forward secrecy on more clients (Aaron Friel)
* Maintain more handshake information to be queried by protocol (Adam Wick)
* handle SCSV on client and server side (Kazu Yamamoto)
* Cleanup renegotiation logic (Kazu Yamamoto)
* Various testing improvements with the openssl test parts
* Cleanup AEAD handling for future support of other ciphers
OBS-URL: https://build.opensuse.org/package/show/devel:languages:haskell/ghc-tls?expand=0&rev=9
- update to 1.2.17
* Fix an issue with stream cipher not correctly calculating the internal state,
resulting systematically in bad record mac failure during handshake
* support chain certificate in credentials
* adding ALPN extension
* adding support for AEAD, and particularly AES128-GCM
* Adding support for ECDH
* Do not support SSL3 by default for security reason.
* add EnumSafe8 and 16 for specific sized Enum instance that are safer
* export signatureAndHash parser/encoder
* add a "known" list of extensions
* add SignatureAlgorithms extension
* add Heartbeat extension
* add support for EC curves and point format extensions
* add preliminary SessionTicket extension
* Propagate asynchronous exception
* Export TLSParams and HasBackend type names
* Added FlexibleContexts flag required by ghc-7.9
* debug: add support for specifying the timeout length in milliseconds.
* debug: add support for 3DES in simple client
* add support for 3DES-EDE-CBC-SHA1 (cipher 0xa)
* repair retrieve certificate validation, and improve fingerprints
* remove groom from dependency
* make RecordM an instance of Applicative
* Fixes the Error_EOF partial pattern match error in exception handling
* Fixed socket backend endless loop when the server does not close connection
properly at the TLS level with the close notify alert.
* Catch Error_EOF in recvData and return empty data.
* Fixed Server key exchange data being parsed without the correct
context, leading to not knowing how to parse the structure.
OBS-URL: https://build.opensuse.org/request/show/304633
OBS-URL: https://build.opensuse.org/package/show/devel:languages:haskell/ghc-tls?expand=0&rev=3
