Network.TLS.SessionManager

In-memory TLS 1.2/1.3 session manager.

• Limitation: you can set the maximum size of the session data database.
• Automatic pruning: old session data over their lifetime are pruned automatically.
• Energy saving: no dedicate pruning thread is running when the size of session data database is zero.
• Replay resistance: each session data is used at most once to prevent replay attacks against 0RTT early data of TLS 1.3.

Documentation

newSessionManager :: Config -> IO SessionManager

Creating an in-memory session manager.

data Config

Configuration for session managers.

defaultConfig :: Config

ticketLifetime: 2 hours (7200 seconds), pruningDelay: 10 minutes (600 seconds), dbMaxSize: 1000 entries.

ticketLifetime :: Config -> Int

Ticket lifetime in seconds.

pruningDelay :: Config -> Int

Pruning delay in seconds. This is set to reaperDelay.

dbMaxSize :: Config -> Int

The limit size of session data entries.