Moduletls-session-manager-0.1.0Haskell2010

Network.TLS.SessionTicket

A manager for TLS 1.2/1.3 session ticket.

Tracking client hello is not implemented yet. So, if this is used for TLS 1.3 0-RTT, replay attack is possible. If your application data in 0-RTT changes the status of server side, use SessionManager instead.

A dedicated thread is running repeatedly to replece secret keys. So, energy saving is not achieved.

Synopsis

value newSessionTicketManager
value newSessionTicketManager'
data Config
value defaultConfig
value ticketLifetime
value secretKeyInterval

Packagetls-session-manager-0.1.0
Exports6
LanguageHaskell2010
LicenceBSD-3-Clause
SourceSessionTicket.hs

valuenewSessionTicketManager :: Config -> IO SessionManager

Source#

Creating a session ticket manager.

valuenewSessionTicketManager' :: Config -> IO (SessionManager, IO ())

datadata Config

Source#

Configuration for session tickets.

valuedefaultConfig :: Config

Source#

ticketLifetime: 2 hours (7200 seconds), secretKeyInterval: 30 minutes (1800 seconds)

valueticketLifetime :: Config -> Int

Source#

Ticket lifetime in seconds.

valuesecretKeyInterval :: Config -> Int