tls 0.9.2 → 0.9.3
raw patch · 2 files changed
+22/−2 lines, 2 filesdep ~basedep ~certificate
Dependency ranges changed: base, certificate
Files
README.md view
@@ -23,3 +23,23 @@ * bulk algorithm supported: any stream or block ciphers. * supported extensions: secure renegociation +Common Issues+-------------++The tools mentioned below are all available from the tls-debug package.++* Certificate issues++It's useful to run the following command, which will connect to the destination and+retrieve the certificate chained used.++ tls-retrievecertificate -d <destination> -p <port> -v -c++As an output it will print every certificates in the chain and will gives the issuer and subjects of each.+It creates a chain where issuer of certificate is the subject of the next certificate part of the chain:++ (subject #1, issuer #2) -> (subject #2, issuer #3) -> (subject #3, issuer #3)++A "CA is unknown" error indicates that your system doesn't have a certificate in+the trusted store belonging to any of the node of the chain.+
tls.cabal view
@@ -1,5 +1,5 @@ Name: tls-Version: 0.9.2+Version: 0.9.3 Description: Native Haskell TLS and SSL protocol implementation for server and client. .@@ -42,7 +42,7 @@ , bytestring , crypto-api >= 0.5 , cryptocipher >= 0.3.0- , certificate >= 1.1.1 && < 1.2.0+ , certificate >= 1.2.0 && < 1.3.0 Exposed-modules: Network.TLS Network.TLS.Cipher Network.TLS.Compression