Expose TLS.supportedHashSignatures via TLSSettings

warp-tls/ChangeLog.md

@@ -1,3 +1,8 @@
+## 3.3.3
+
+* Expose TLS.supportedHashSignatures via TLSSettings
+  [#872](https://github.com/yesodweb/wai/pull/872)
+
 ## 3.3.2
 
 * Providing the Internal module.

warp-tls/Network/Wai/Handler/WarpTLS.hs

@@ -102,6 +102,7 @@ defaultTlsSettings = TLSSettings {
   , tlsSessionManagerConfig = Nothing
   , tlsCredentials = Nothing
   , tlsSessionManager = Nothing
+  , tlsSupportedHashSignatures = TLS.supportedHashSignatures def
   }
 
 -- taken from stunnel example in tls-extra
@@ -256,6 +257,7 @@ runTLSSocket' tlsset@TLSSettings{..} set credentials mgr sock app =
       , TLS.supportedClientInitiatedRenegotiation = False
       , TLS.supportedSession             = True
       , TLS.supportedFallbackScsv        = True
+      , TLS.supportedHashSignatures      = tlsSupportedHashSignatures
 #if MIN_VERSION_tls(1,5,0)
       , TLS.supportedGroups              = [TLS.X25519,TLS.P256,TLS.P384]
 #endif

warp-tls/Network/Wai/Handler/WarpTLS/Internal.hs

@@ -131,6 +131,11 @@ data TLSSettings = TLSSettings {
     --   specified, 'tlsSessionManagerConfig' is ignored.
     --
     --   Since 3.2.12
+  , tlsSupportedHashSignatures :: [TLS.HashAndSignatureAlgorithm]
+    -- ^ Specifying supported hash/signature algorithms, ordered by decreasing
+    -- priority. See the "Network.TLS" module for details
+    --
+    --   Since 3.3.3
   }