Taking advantage of the new TLS debugging capabilities
This commit is contained in:
parent
cc8053fc80
commit
7840059d8d
3 changed files with 7 additions and 3 deletions
|
@ -33,7 +33,8 @@ defaultTLSConfig = TLSConfig
|
||||||
, cipher_AES256_SHA1
|
, cipher_AES256_SHA1
|
||||||
, cipher_AES128_SHA256
|
, cipher_AES128_SHA256
|
||||||
, cipher_AES256_SHA256 ]
|
, cipher_AES256_SHA256 ]
|
||||||
, sslVerify = True }
|
, sslVerify = True
|
||||||
|
, sslLogging = defaultLogging }
|
||||||
|
|
||||||
noSSL :: TLSConfig
|
noSSL :: TLSConfig
|
||||||
noSSL = defaultTLSConfig { sslOn = False }
|
noSSL = defaultTLSConfig { sslOn = False }
|
||||||
|
|
|
@ -93,5 +93,6 @@ data TLSConfig = TLSConfig
|
||||||
, sslVersions :: [Network.TLS.Version]
|
, sslVersions :: [Network.TLS.Version]
|
||||||
, sslCiphers :: [Network.TLS.Cipher]
|
, sslCiphers :: [Network.TLS.Cipher]
|
||||||
, sslVerify :: Bool
|
, sslVerify :: Bool
|
||||||
} deriving (Show)
|
, sslLogging :: TLSLogging
|
||||||
|
}
|
||||||
|
|
||||||
|
|
|
@ -64,6 +64,8 @@ initTLSEnv :: TLSConfig -> IO TLSParams
|
||||||
initTLSEnv ssl = do
|
initTLSEnv ssl = do
|
||||||
let versions = sslVersions ssl
|
let versions = sslVersions ssl
|
||||||
ciphers = sslCiphers ssl
|
ciphers = sslCiphers ssl
|
||||||
|
logging = sslLogging ssl
|
||||||
return $ defaultParams { pAllowedVersions = versions
|
return $ defaultParams { pAllowedVersions = versions
|
||||||
, pCiphers = ciphers }
|
, pCiphers = ciphers
|
||||||
|
, pLogging = logging }
|
||||||
|
|
||||||
|
|
Reference in a new issue