Network.TLS.SessionTicket

tls-session-manager-0.0.7: In-memory TLS session DB and session ticket

Safe Haskell | None
Language | Haskell2010

Network.TLS.SessionTicket

Description

A manager for TLS 1.2/1.3 session ticket.

Tracking client hello is not implemented yet. So, if this is used for TLS 1.3 0-RTT, replay attack is possible. If your application data in 0-RTT changes the status of server side, use `SessionManager` instead.

A dedicated thread is running repeatedly to replece secret keys. So, energy saving is not achieved.

Synopsis

- newSessionTicketManager :: Config -> IO SessionManager
- data Config
- defaultConfig :: Config
- ticketLifetime :: Config -> Int
- secretKeyInterval :: Config -> Int

# Documentation

newSessionTicketManager :: Config -> IO SessionManager #

Creating a session ticket manager.

data Config #

Configuration for session tickets.

defaultConfig :: Config #

ticketLifetime: 2 hours (7200 seconds), secretKeyInterval: 30 minutes (1800 seconds)

ticketLifetime :: Config -> Int #

Ticket lifetime in seconds.

secretKeyInterval :: Config -> Int #