Hacker GitHub

← All repos

mirleft/ocaml-tls

View on GitHub ↗ ★ 321 OCaml

TLS in pure OCaml

21 mentions on Hacker News by 15 people: 2 stories, 19 comments · first 2014-04-09 · latest 2019-06-29

Mentions per year 21 mentions · busiest year 2014 (10)
20082026
AllStoriesComments NewestTopOldest
  1. …along with x509[4]. [1] https://project-everest.github.io/ [2] https://www.fstar-lang.org/ [3] https://github.com/mirleft/ocaml-tls [4] https://github.com/mirleft/ocaml-x509
    comment by xvilka · 2019-06-29 · in SKS Keyserver Network Under Attack
  2. It's been done: https://github.com/mirleft/ocaml-tls https://usenix15.nqsb.io/
    comment by nickpsecurity · 2017-02-24 · in S2n Is Now Handling 100 Percent of SSL Traffic for Amazon S3
  3. Already done in Ocaml for projects willing to use something other than OpenSSL: https://github.com/mirleft/ocaml-tls It's performance was within 80% or so of regular TLS with Ocaml's safety and easier verification. Quite a few components…
    comment by nickpsecurity · 2016-10-20 · in OpenSSL after Heartbleed
  4. There is https://github.com/mirleft/ocaml-tls which is used in MirageOS: https://mirage.io/blog/introducing-ocaml-tls https://mirage.io/blog/ocaml-tls-api-internals-attacks-mitig... https://mirage.io/blog/why-ocaml-tls
    comment by schwarze_pest · 2016-09-26 · in OpenSSL Security Advisory - 26 Sep 2016
  5. Github is here: https://github.com/mirleft/ocaml-tls Those interested in an imperative implementation can still benefit. The method would be to use Ocaml as a safer, reference implementation for a derivation into SPARK Ada, a…
    comment by nickpsecurity · 2016-09-07 · in Not-quite-so-broken TLS – lessons in re-engineering a security protocol (2015) [pdf]
  6. Don't forget these functional alternatives to OpenSSL: 1. OCaml-TLS ( https://github.com/mirleft/ocaml-tls ) [1] 2. miTLS ( http://www.mitls.org/wsgi/home ) 3. s2n ( https://github.com/awslabs/s2n ) [1] Home of the epic Bitcoin Pinata!…
    comment by dguido · 2015-10-19 · in Qualys Security Advisory – LibreSSL
  7. Here's a start: https://github.com/mirleft/ocaml-tls
    comment by zeckalpha · 2015-09-06 · in OpenSSL's implementation of DSA appears to be broken
  8. …a better implementation then put your hands where your keyboard is. Show us the code. Here you go! https://github.com/mirleft/ocaml-tls
    comment by itistoday2 · 2015-07-09 · in OpenSSL Security Advisory
  9. …this is because TLS session resumption hasn't been merged in yet (but is available to test at https://github.com/mirleft/ocaml-tls/pull/283 )
    comment by avsm · 2015-06-26 · in MirageOS v2.5 with full TLS support
  10. This is about the DigestInfo -- which we generate and compare here: https://github.com/mirleft/ocaml-tls/blob/master/lib/handsha... The unpad does RSA unpadding... or am I completely mistaken?
    comment by hannesm · 2015-02-10 · in The Bitcoin Piñata
  11. …to avoid the safety problems of C, but that only applies if your libraries aren't written in C. See https://github.com/mirleft/ocaml-tls#why-a-new-tls-implement... (Almost all languages do offer some "FFI" to call C. But in languages that…
    comment by lmm · 2014-12-27 · in Would You Bet $100M on Your Pet Programming Language? (2007)
  12. Clicky link to the reply is: https://github.com/mirleft/ocaml-tls/issues/6#issuecomment-4...
    comment by amirmc · 2014-07-08 · in Introducing Transport Layer Security in pure OCaml
  13. …server on tls.openmirage.org to help us get more test coverage from visitors to the site (see the https://github.com/mirleft/ocaml-tls/tree/demo-random branch). We've mitigated most of the commonly known client incompatibilities, but there…
    comment by avsm · 2014-07-08 · in Introducing Transport Layer Security in pure OCaml
  14. …parameters on each connect to help us gauge the stack's behavior with various combinations (see https://github.com/mirleft/ocaml-tls/issues/159 ). Normally it uses first available from the list here: https://github.com/mirleft/ocaml-tls/blo…
    comment by pqwy · 2014-07-08 · in Introducing Transport Layer Security in pure OCaml
  15. …version for testing purposes, so that might explain the odd renegotiations that you observed: https://github.com/mirleft/ocaml-tls/issues/159
    comment by edwintorok · 2014-07-08 · in Introducing Transport Layer Security in pure OCaml
  16. …that could be made in a GCed language. Finally, if I look at the issue tracker I see things like https://github.com/mirleft/ocaml-tls/issues/6 - closed, with no explanation and marked as a security concern - which gives me no confidence…
    comment by richardwhiuk · 2014-07-08 · in Introducing Transport Layer Security in pure OCaml
  17. Looking at the development history it would appear that this project started in Feb 2014: https://github.com/mirleft/ocaml-tls/commit/10b53cd1ebde0360... . Writing an (almost complete) TLS 1.2 stack in such a short amount of time is…
    comment by edwintorok · 2014-07-08 · in Introducing Transport Layer Security in pure OCaml
  18. …mistakes (of others) is a good thing. For example, here's a TLS implementation in pure OCaml https://github.com/mirleft/ocaml-tls I'm glad Stripe is helping with things like this. It raises awareness of critical things we all use and…
    comment by amirmc · 2014-06-07 · in Stripe: Open Source Retreat Grantees
  19. There is a TLS implementation in OCaml in progress, it still has a long way to go though: https://github.com/mirleft/ocaml-tls
    comment by edwintorok · 2014-04-09 · in TLS/SSL implementation in Haskell