git.iko.soy/typeable/wai
on master help sign in
Use cprng-aes in order to be more economic with OS entropy
23ac840Lars Kuhtz
warp-tls/Network/Wai/Handler/WarpTLS.hs+2−2
compare with master
unifiedsplit
@@ -42,7 +42,7 @@ import qualified Data.PEM as PEM
42import Data.Conduit.Network (sourceSocket, sinkSocket, acceptSafe)
42import Data.Conduit.Network (sourceSocket, sinkSocket, acceptSafe)
43import Data.Maybe (fromMaybe)
43import Data.Maybe (fromMaybe)
44import qualified Data.IORef as I
44import qualified Data.IORef as I
45−import Crypto.Random.API (getSystemRandomGen)
45+import Crypto.Random.AESCtr (makeSystem)
46import Control.Exception (Exception, throwIO)
46import Control.Exception (Exception, throwIO)
47import Data.Typeable (Typeable)
47import Data.Typeable (Typeable)
48import qualified Data.Conduit.Binary as CB
48import qualified Data.Conduit.Binary as CB
@@ -117,7 +117,7 @@ runTLSSocket TLSSettings {..} set sock app = do
117 return bs
117 return bs
118 if maybe False ((== 0x16) . fst) (firstBS >>= B.uncons)
118 if maybe False ((== 0x16) . fst) (firstBS >>= B.uncons)
119 then do
119 then do
120− gen <- getSystemRandomGen
120+ gen <- makeSystem
121 ctx <- TLS.contextNew
121 ctx <- TLS.contextNew
122 TLS.Backend
122 TLS.Backend
123 { TLS.backendFlush = return ()
123 { TLS.backendFlush = return ()
warp-tls/warp-tls.cabal+1
@@ -27,6 +27,7 @@ Library
27 , tls >= 1.1
27 , tls >= 1.1
28 , crypto-random-api >= 0.2
28 , crypto-random-api >= 0.2
29 , network >= 2.2.1
29 , network >= 2.2.1
30+ , cprng-aes >= 0.3.4
30 Exposed-modules: Network.Wai.Handler.WarpTLS
31 Exposed-modules: Network.Wai.Handler.WarpTLS
31 ghc-options: -Wall
32 ghc-options: -Wall
32
33