tls-session-manager-0.0.6: In-memory TLS session DB and session ticket
Safe HaskellSafe-Inferred
LanguageHaskell2010

Network.TLS.SessionManager

Description

In-memory TLS 1.2/1.3 session manager.

  • Limitation: you can set the maximum size of the session data database.
  • Automatic pruning: old session data over their lifetime are pruned automatically.
  • Energy saving: no dedicate pruning thread is running when the size of session data database is zero.
  • Replay resistance: each session data is used at most once to prevent replay attacks against 0RTT early data of TLS 1.3.
Synopsis

Documentation

newSessionManager :: Config -> IO SessionManager Source #

Creating an in-memory session manager.

data Config Source #

Configuration for session managers.

defaultConfig :: Config Source #

ticketLifetime: 2 hours (7200 seconds), pruningDelay: 10 minutes (600 seconds), dbMaxSize: 1000 entries.

ticketLifetime :: Config -> Int Source #

Ticket lifetime in seconds.

pruningDelay :: Config -> Int Source #

Pruning delay in seconds. This is set to reaperDelay.

dbMaxSize :: Config -> Int Source #

The limit size of session data entries.