8d953b28b0
- update to 1.2.17 * Fix an issue with stream cipher not correctly calculating the internal state, resulting systematically in bad record mac failure during handshake * support chain certificate in credentials * adding ALPN extension * adding support for AEAD, and particularly AES128-GCM * Adding support for ECDH * Do not support SSL3 by default for security reason. * add EnumSafe8 and 16 for specific sized Enum instance that are safer * export signatureAndHash parser/encoder * add a "known" list of extensions * add SignatureAlgorithms extension * add Heartbeat extension * add support for EC curves and point format extensions * add preliminary SessionTicket extension * Propagate asynchronous exception * Export TLSParams and HasBackend type names * Added FlexibleContexts flag required by ghc-7.9 * debug: add support for specifying the timeout length in milliseconds. * debug: add support for 3DES in simple client * add support for 3DES-EDE-CBC-SHA1 (cipher 0xa) * repair retrieve certificate validation, and improve fingerprints * remove groom from dependency * make RecordM an instance of Applicative * Fixes the Error_EOF partial pattern match error in exception handling * Fixed socket backend endless loop when the server does not close connection properly at the TLS level with the close notify alert. * Catch Error_EOF in recvData and return empty data. * Fixed Server key exchange data being parsed without the correct context, leading to not knowing how to parse the structure. OBS-URL: https://build.opensuse.org/request/show/304633 OBS-URL: https://build.opensuse.org/package/show/devel:languages:haskell/ghc-tls?expand=0&rev=3
47 lines
2.2 KiB
Plaintext
47 lines
2.2 KiB
Plaintext
-------------------------------------------------------------------
|
|
Thu Apr 23 18:32:31 UTC 2015 - mimi.vx@gmail.com
|
|
|
|
- update to 1.2.17
|
|
* Fix an issue with stream cipher not correctly calculating the internal state,
|
|
resulting systematically in bad record mac failure during handshake
|
|
* support chain certificate in credentials
|
|
* adding ALPN extension
|
|
* adding support for AEAD, and particularly AES128-GCM
|
|
* Adding support for ECDH
|
|
* Do not support SSL3 by default for security reason.
|
|
* add EnumSafe8 and 16 for specific sized Enum instance that are safer
|
|
* export signatureAndHash parser/encoder
|
|
* add a "known" list of extensions
|
|
* add SignatureAlgorithms extension
|
|
* add Heartbeat extension
|
|
* add support for EC curves and point format extensions
|
|
* add preliminary SessionTicket extension
|
|
* Propagate asynchronous exception
|
|
* Export TLSParams and HasBackend type names
|
|
* Added FlexibleContexts flag required by ghc-7.9
|
|
* debug: add support for specifying the timeout length in milliseconds.
|
|
* debug: add support for 3DES in simple client
|
|
* add support for 3DES-EDE-CBC-SHA1 (cipher 0xa)
|
|
* repair retrieve certificate validation, and improve fingerprints
|
|
* remove groom from dependency
|
|
* make RecordM an instance of Applicative
|
|
* Fixes the Error_EOF partial pattern match error in exception handling
|
|
* Fixed socket backend endless loop when the server does not close connection
|
|
properly at the TLS level with the close notify alert.
|
|
* Catch Error_EOF in recvData and return empty data.
|
|
* Fixed Server key exchange data being parsed without the correct
|
|
context, leading to not knowing how to parse the structure.
|
|
The bug happens on efficient server that happens to send the ServerKeyXchg
|
|
message together with the ServerHello in the same handshake packet.
|
|
This trigger parsing of all the messages without having set the pending cipher.
|
|
Delay parsing, when this happen, until we know what to do with it.
|
|
* Fixed unrecognized name non-fatal alert after client hello.
|
|
* Add SSL3 to the supported list of version by default.
|
|
* Fixed handshake records not being able to span multiples records.
|
|
|
|
-------------------------------------------------------------------
|
|
Mon Oct 7 07:12:32 UTC 2013 - sbahling@suse.com
|
|
|
|
- Initial package - version 1.1.5
|
|
|