File ghc-tls.changes of Package ghc-tls
-------------------------------------------------------------------
Thu Aug 6 20:43:26 UTC 2015 - mimi.vx@gmail.com
- update to 1.3.1
* Repair DHE RSA handling on the cipher by creating signature properly
* modernize the crypto stack by using cryptonite.
-------------------------------------------------------------------
Sun Jun 21 16:56:51 UTC 2015 - mimi.vx@gmail.com
- update to 1.2.18
* add more tests (network, local)
* cleanup cipher / bulk code, certificate verify / creation, and digitall signed handling
* fix handling of DHE ciphers with MS SSL stack that serialize leading zero.
-------------------------------------------------------------------
Thu Apr 23 18:32:31 UTC 2015 - mimi.vx@gmail.com
- update to 1.2.17
* Fix an issue with stream cipher not correctly calculating the internal state,
resulting systematically in bad record mac failure during handshake
* support chain certificate in credentials
* adding ALPN extension
* adding support for AEAD, and particularly AES128-GCM
* Adding support for ECDH
* Do not support SSL3 by default for security reason.
* add EnumSafe8 and 16 for specific sized Enum instance that are safer
* export signatureAndHash parser/encoder
* add a "known" list of extensions
* add SignatureAlgorithms extension
* add Heartbeat extension
* add support for EC curves and point format extensions
* add preliminary SessionTicket extension
* Propagate asynchronous exception
* Export TLSParams and HasBackend type names
* Added FlexibleContexts flag required by ghc-7.9
* debug: add support for specifying the timeout length in milliseconds.
* debug: add support for 3DES in simple client
* add support for 3DES-EDE-CBC-SHA1 (cipher 0xa)
* repair retrieve certificate validation, and improve fingerprints
* remove groom from dependency
* make RecordM an instance of Applicative
* Fixes the Error_EOF partial pattern match error in exception handling
* Fixed socket backend endless loop when the server does not close connection
properly at the TLS level with the close notify alert.
* Catch Error_EOF in recvData and return empty data.
* Fixed Server key exchange data being parsed without the correct
context, leading to not knowing how to parse the structure.
The bug happens on efficient server that happens to send the ServerKeyXchg
message together with the ServerHello in the same handshake packet.
This trigger parsing of all the messages without having set the pending cipher.
Delay parsing, when this happen, until we know what to do with it.
* Fixed unrecognized name non-fatal alert after client hello.
* Add SSL3 to the supported list of version by default.
* Fixed handshake records not being able to span multiples records.
-------------------------------------------------------------------
Mon Oct 7 07:12:32 UTC 2013 - sbahling@suse.com
- Initial package - version 1.1.5
