Network.TLS.Extra

Cipher related definition

cipher suite

ciphersuite_all :: [Cipher]

all encrypted ciphers supported ordered from strong to weak. this choice of ciphersuite should satisfy most normal need

ciphersuite_medium :: [Cipher]

list of medium ciphers.

ciphersuite_strong :: [Cipher]

the strongest ciphers supported.

ciphersuite_unencrypted :: [Cipher]

all unencrypted ciphers, do not use on insecure network.

individual ciphers

cipher_null_null :: Cipher

this is not stricly a usable cipher; it's the initial cipher of a TLS connection

cipher_null_SHA1 :: Cipher

unencrypted cipher using RSA for key exchange and SHA1 for digest

cipher_null_MD5 :: Cipher

unencrypted cipher using RSA for key exchange and MD5 for digest

cipher_RC4_128_MD5 :: Cipher

RC4 cipher, RSA key exchange and MD5 for digest

cipher_RC4_128_SHA1 :: Cipher

RC4 cipher, RSA key exchange and SHA1 for digest

cipher_AES128_SHA1 :: Cipher

AES cipher (128 bit key), RSA key exchange and SHA1 for digest

cipher_AES256_SHA1 :: Cipher

AES cipher (256 bit key), RSA key exchange and SHA1 for digest

cipher_AES128_SHA256 :: Cipher

AES cipher (128 bit key), RSA key exchange and SHA256 for digest

cipher_AES256_SHA256 :: Cipher

AES cipher (256 bit key), RSA key exchange and SHA256 for digest

Certificate helpers

certificateVerifyChain :: [X509] -> IO Bool

verify a certificates chain using the system certificates available.

each certificate of the list is verified against the next certificate, until it can be verified against a system certificate (system certificates are assumed as trusted)

certificateVerify :: X509 -> X509 -> IO Bool

verify a certificate against another one. the first certificate need to be signed by the second one for this function to succeed.