Name:                tls
Version:             1.5.0
x-revision: 1
Description:
   Native Haskell TLS and SSL protocol implementation for server and client.
   .
   This provides a high-level implementation of a sensitive security protocol,
   eliminating a common set of security issues through the use of the advanced
   type system, high level constructions and common Haskell features.
   .
   Currently implement the SSL3.0, TLS1.0, TLS1.1, TLS1.2 and TLS 1.3 protocol,
   and support RSA and Ephemeral (Elliptic curve and regular) Diffie Hellman key exchanges,
   and many extensions.
   .
   Some debug tools linked with tls, are available through the
   <http://hackage.haskell.org/package/tls-debug/>.
License:             BSD3
License-file:        LICENSE
Copyright:           Vincent Hanquez <vincent@snarc.org>
Author:              Vincent Hanquez <vincent@snarc.org>
Maintainer:          Vincent Hanquez <vincent@snarc.org>
Synopsis:            TLS/SSL protocol native implementation (Server and Client)
Build-Type:          Simple
Category:            Network
stability:           experimental
Cabal-Version:       >=1.8
Homepage:            http://github.com/vincenthz/hs-tls
extra-source-files:  Tests/*.hs
                     CHANGELOG.md

Flag compat
  Description:       Accept SSLv2 client hello for beginning SSLv3 / TLS handshake
  Default:           True

Flag network
  Description:       Use the base network library
  Default:           True

Flag hans
  Description:       Use the Haskell Network Stack (HaNS)
  Default:           False

Library
  Build-Depends:     base >= 4.9 && < 5
                   , mtl >= 2 && <2.3
                   , transformers
                   , cereal >= 0.5.3
                   , bytestring
                   , data-default-class
                   -- crypto related
                   , memory >= 0.14.6
                   , cryptonite >= 0.25
                   -- certificate related
                   , asn1-types >= 0.2.0
                   , asn1-encoding
                   , x509 >= 1.7.5
                   , x509-store >= 1.6
                   , x509-validation >= 1.6.5
                   , async >= 2.0
                   , hourglass
  if flag(network)
    Build-Depends:   network >= 2.4.0.0
    cpp-options:     -DINCLUDE_NETWORK
  if flag(hans)
    Build-Depends:   hans
    cpp-options:     -DINCLUDE_HANS
  Exposed-modules:   Network.TLS
                     Network.TLS.Cipher
                     Network.TLS.Compression
                     Network.TLS.Internal
                     Network.TLS.Extra
                     Network.TLS.Extra.Cipher
                     Network.TLS.Extra.FFDHE
  other-modules:     Network.TLS.Cap
                     Network.TLS.Struct
                     Network.TLS.Struct13
                     Network.TLS.Core
                     Network.TLS.Context
                     Network.TLS.Context.Internal
                     Network.TLS.Credentials
                     Network.TLS.Backend
                     Network.TLS.Crypto
                     Network.TLS.Crypto.DH
                     Network.TLS.Crypto.IES
                     Network.TLS.Crypto.Types
                     Network.TLS.ErrT
                     Network.TLS.Extension
                     Network.TLS.Handshake
                     Network.TLS.Handshake.Common
                     Network.TLS.Handshake.Common13
                     Network.TLS.Handshake.Certificate
                     Network.TLS.Handshake.Key
                     Network.TLS.Handshake.Client
                     Network.TLS.Handshake.Server
                     Network.TLS.Handshake.Process
                     Network.TLS.Handshake.Random
                     Network.TLS.Handshake.Signature
                     Network.TLS.Handshake.State
                     Network.TLS.Handshake.State13
                     Network.TLS.Hooks
                     Network.TLS.IO
                     Network.TLS.Imports
                     Network.TLS.KeySchedule
                     Network.TLS.MAC
                     Network.TLS.Measurement
                     Network.TLS.Packet
                     Network.TLS.Packet13
                     Network.TLS.Parameters
                     Network.TLS.Record
                     Network.TLS.Record.Types
                     Network.TLS.Record.Types13
                     Network.TLS.Record.Engage
                     Network.TLS.Record.Engage13
                     Network.TLS.Record.Disengage
                     Network.TLS.Record.Disengage13
                     Network.TLS.Record.State
                     Network.TLS.RNG
                     Network.TLS.State
                     Network.TLS.Session
                     Network.TLS.Sending
                     Network.TLS.Sending13
                     Network.TLS.Receiving
                     Network.TLS.Receiving13
                     Network.TLS.Util
                     Network.TLS.Util.ASN1
                     Network.TLS.Util.Serialization
                     Network.TLS.Types
                     Network.TLS.Wire
                     Network.TLS.X509
  ghc-options:       -Wall
  if flag(compat)
    cpp-options:     -DSSLV2_COMPATIBLE

Test-Suite test-tls
  type:              exitcode-stdio-1.0
  hs-source-dirs:    Tests
  Main-is:           Tests.hs
  other-modules:     Certificate
                     Ciphers
                     Connection
                     Marshalling
                     PipeChan
                     PubKey
  Build-Depends:     base >= 3 && < 5
                   , async >= 2.0
                   , data-default-class
                   , tasty
                   , tasty-quickcheck
                   , tls
                   , QuickCheck
                   , cryptonite
                   , bytestring
                   , asn1-types
                   , x509
                   , x509-validation
                   , hourglass
  ghc-options:       -Wall -fno-warn-unused-imports

Benchmark bench-tls
  hs-source-dirs:    Benchmarks Tests
  Main-Is:           Benchmarks.hs
  type:              exitcode-stdio-1.0
  other-modules:     Certificate
                     Connection
                     PipeChan
                     PubKey
  Build-depends:     base >= 4 && < 5
                   , tls
                   , x509
                   , x509-validation
                   , data-default-class
                   , cryptonite
                   , gauge
                   , bytestring
                   , asn1-types
                   , async >= 2.0
                   , hourglass
                   , QuickCheck >= 2
                   , tasty-quickcheck
                   , tls
  ghc-options:       -Wall -fno-warn-unused-imports

source-repository head
  type: git
  location: https://github.com/vincenthz/hs-tls
  subdir: core