GnuTLS







































GnuTLS
GNUTLS-logo.svg
Developer(s) Nikos Mavrogiannopoulos, Simon Josefsson
Stable release








stable 3.5.19 / July 16, 2018; 6 months ago (2018-07-16)[1]
stable-next 3.6.3 / July 16, 2018; 6 months ago (2018-07-16)[1]

Repository
  • gitlab.com/gnutls/gnutls.git
Edit this at Wikidata
Written in C
Type Security library
License
LGPLv2.1+
Website www.gnutls.org

GnuTLS (/ˈɡnuː ˌtiː ˌɛl ˈɛs/, the GNU Transport Layer Security Library) is a free software implementation of the TLS, SSL and DTLS protocols. It offers an application programming interface (API) for applications to enable secure communication over the network transport layer, as well as interfaces to access X.509, PKCS #12, OpenPGP and other structures.




Contents






  • 1 Features


  • 2 History


    • 2.1 Origin


    • 2.2 License


    • 2.3 Split from the GNU/FSF




  • 3 Deployment


  • 4 See also


  • 5 References


  • 6 External links





Features


GnuTLS consists of a library that allows client applications to start secure sessions using the available protocols.
It also provides command-line tools, including an X.509 certificate manager, a test client and server, and random key and password generators. As of 2011[update] administrators can configure Apache web server to use GnuTLS so as to support TLS 1.2.[2]


GnuTLS has the following features:




  • TLS 1.3, 1.2, TLS 1.1, TLS 1.0, and SSL 3.0 protocols


  • Datagram TLS (DTLS) 1.2, and DTLS 1.0, protocols


  • TLS-SRP: Secure remote password protocol (SRP) for TLS authentication


  • TLS-PSK: Pre-shared key (PSK) for TLS authentication


  • X.509 and OpenPGP certificate[3] handling

  • CPU assisted cryptography and cryptographic accelerator support (/dev/crypto), VIA PadLock and AES-NI instruction sets[4]

  • Support for smart cards and for hardware security modules

  • Storage of cryptographic keys in the system's Trusted Platform Module (TPM)



History



Origin


GnuTLS was initially created around March 2003[5] by Nikos Mavrogiannopoulos to allow applications of the GNU Project to use secure protocols such as TLS. Although OpenSSL already existed, OpenSSL's license is not compatible with the GPL;[6] thus software under the GPL, such as GNU software, could not use OpenSSL without making a GPL linking exception.



License


The GnuTLS library was licensed originally under the GNU Lesser General Public License v2, while included applications use the GNU General Public License.


In August 2011 the library was updated to the LGPLv3.[7] After it was noticed[8] that there were new license compatibility problems introduced, especially with other free software with the license change, after discussions the license was downgraded again to LGPLv2.1 in March 2013.[9]



Split from the GNU/FSF


Originally created for the GNU Project, its maintainer disassociated it from GNU in December 2012 after disputes with the Free Software Foundation over certain policies.[10][11]Richard Stallman objected this move and suggested forking of the project, which was ignored.[12] This step was followed by the GNU Sed maintainer Paolo Bonzini on end of December 2012 who put down his maintainership.[13]



Deployment


Software packages using GnuTLS include(d):



  • GNOME

  • CenterIM


  • Exim[14]

  • Weechat

  • Mutt

  • Wireshark

  • slrn


  • Lynx[14]

  • CUPS


  • gnoMint[14]

  • Emacs

  • Synology DiskStation Manager


  • OpenConnect[15]



See also




  • Comparison of TLS implementations


  • wolfSSL (previously CyaSSL)


  • mbed TLS (previously PolarSSL)

  • Network Security Services



References





  1. ^ ab "GnuTLS". Retrieved 17 July 2018..mw-parser-output cite.citation{font-style:inherit}.mw-parser-output .citation q{quotes:"""""""'""'"}.mw-parser-output .citation .cs1-lock-free a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/6/65/Lock-green.svg/9px-Lock-green.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .citation .cs1-lock-limited a,.mw-parser-output .citation .cs1-lock-registration a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/d/d6/Lock-gray-alt-2.svg/9px-Lock-gray-alt-2.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .citation .cs1-lock-subscription a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/a/aa/Lock-red-alt-2.svg/9px-Lock-red-alt-2.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output .cs1-subscription,.mw-parser-output .cs1-registration{color:#555}.mw-parser-output .cs1-subscription span,.mw-parser-output .cs1-registration span{border-bottom:1px dotted;cursor:help}.mw-parser-output .cs1-ws-icon a{background:url("//upload.wikimedia.org/wikipedia/commons/thumb/4/4c/Wikisource-logo.svg/12px-Wikisource-logo.svg.png")no-repeat;background-position:right .1em center}.mw-parser-output code.cs1-code{color:inherit;background:inherit;border:inherit;padding:inherit}.mw-parser-output .cs1-hidden-error{display:none;font-size:100%}.mw-parser-output .cs1-visible-error{font-size:100%}.mw-parser-output .cs1-maint{display:none;color:#33aa33;margin-left:0.3em}.mw-parser-output .cs1-subscription,.mw-parser-output .cs1-registration,.mw-parser-output .cs1-format{font-size:95%}.mw-parser-output .cs1-kern-left,.mw-parser-output .cs1-kern-wl-left{padding-left:0.2em}.mw-parser-output .cs1-kern-right,.mw-parser-output .cs1-kern-wl-right{padding-right:0.2em}


  2. ^ The GNU Transport Layer Security Library


  3. ^
    RFC 6091


  4. ^ The GnuTLS Transport Layer Security Library


  5. ^ Changelog 0.0.5


  6. ^ Mark McLoughlin (2004-06-22). "The OpenSSL License and The GPL". Retrieved 2011-04-06.


  7. ^ Version 2.99.4 (released 2011-07-23)[...] ** libgnutls: license upgraded to LGPLv3


  8. ^ Mavrogiannopoulos, Nikos (2013-03-26). "The perils of LGPLv3". gnutls.org. Retrieved 2015-11-18. LGPLv3 is the latest version of the GNU Lesser General Public License. It follows the successful LGPLv2.1 license, and was released by Free Software Foundation as a counterpart to its GNU General Public License version 3. The goal of the GNU Lesser General Public Licenses is to provide software that can be used by both proprietary and free software. This goal has been successfully handled so far by LGPLv2.1, and there is a multitude of libraries using that license. Now we have LGPLv3 as the latest, and the question is how successful is LGPLv3 on this goal? In my opinion, very little. If we assume that its primary goal is to be used by free software, then it blatantly fails that.


  9. ^ 2013-03-14 Nikos Mavrogiannopoulos (nmav@gnutls.org) * COPYING.LESSER, README: gnutls 3.1.10 is LGPLv2.1


  10. ^ GnuTLS, copyright assignment, and GNU project governance on lwn.net by Michael Kerrisk (December 20, 2012)


  11. ^
    Nikos Mavrogiannopoulos (2012-12-18). "gnutls is moving". Retrieved 2012-12-11.


  12. ^ GNUTLS is not going anywhere on lists.gnu.org "you cannot take GNUTLS out of the GNU Project." (11 Dec 2012)


  13. ^ Subject: GNU sed 4.2.2 released, and a rant from the maintainer Archived January 7, 2016, at the Wayback Machine on gmane.comp.lang.smalltalk.gnu.general by Paolo Bonzini (on 2012-12-22)


  14. ^ abc "GnuTLS - GNU Project - Free Software Foundation (FSF)". Free Software Foundation. 22 May 2010. Archived from the original on 31 May 2010. Retrieved 25 January 2015.


  15. ^ "OpenConnect VPN client technical details".




External links




  • Official website Edit this at Wikidata


  • GNU Friends - An Interview with GNU TLS developer Nikos Mavroyanopoulos – a 2003 interview


  • Fellowship interview with Simon Josefsson – a 2009 interview











-

Popular posts from this blog

Bressuire

Image
Subprefecture and commune in Nouvelle-Aquitaine, France Bressuire Subprefecture and commune Chateau de Bressuire and the Eglise Notre-Dame Coat of arms Location of Bressuire Bressuire Show map of France Bressuire Show map of Nouvelle-Aquitaine Coordinates: 46°50′27″N 0°29′14″W  /  46.8408°N 0.4872°W  / 46.8408; -0.4872 Coordinates: 46°50′27″N 0°29′14″W  /  46.8408°N 0.4872°W  / 46.8408; -0.4872 Country France Region Nouvelle-Aquitaine Department Deux-Sèvres Arrondissement Bressuire Canton Bressuire Government  • Mayor .mw-parser-output .nobold{font-weight:normal} (2014–20) Jean Michel Bernier Area 1 180.59 km 2 (69.73 sq mi) Population (2014) 2 19,300  • Density 110/km 2 (280/sq mi) Time zone UTC+01:00 (CET)  • Summer (DST) UTC+02:00 (CEST) INSEE/Postal code 79049 /79300 Elevation 98–236 m (322–774 ft) (avg. 173 m or 568 ft) 1 French Land Register data, which exclude...
Read more

Vorschmack

Image
Vorschmack Ukrainian Jewish-style vorschmack served on rye bread Course Hors d'oeuvre Region or state Eastern Europe Associated national cuisine Ashkenazi Jewish, Finnish, German, Ukrainian, Polish, Russian Main ingredients Ground meat and/or fish Cookbook: Vorschmack   Media: Vorschmack Vorschmack or forshmak (Yiddish: פֿאָרשמאַק ‎, from archaic German Vorschmack , "foretaste" [1] or "appetizer" [2] ) is an originally East European dish made of salty minced fish or meat. Different variants of this dish are especially common in Ashkenazi Jewish and Finnish cuisine. Some varieties are also known in Russian and Polish cuisine. Contents 1 In Jewish cuisine 2 In Russian cuisine 3 In Polish cuisine 4 In Finnish cuisine 5 See also 6 References In Jewish cuisine According to Gil Marks, the German name points to the possible Germanic origin of this dish. [1] William Pokhlyobkin descr...
Read more

Quarantine

Image
For other uses, see Quarantine (disambiguation). Signal flag "Lima" called the "Yellow Jack" which when flown in harbor means ship is under quarantine. A simple yellow flag (also called the "Yellow Jack") had historically been used to signal quarantine (it stands for Q among signal flags), but now indicates the opposite, as a signal of a ship free of disease that requests boarding and inspection. A quarantine is used to separate and restrict the movement of people; it is 'a restraint upon the activities or communication of persons or the transport of goods designed to prevent the spread of disease or pests', for a certain period of time. [1] This is often used in connection to disease and illness, such as those who may possibly have been exposed to a communicable disease. [2] The term is often erroneously used to mean medical isolation, which is "to separate ill persons who have a communicable disease from those who are healthy...
Read more