GnuTLS
| GnuTLS | |
|---|---|
| File:GNUTLS-logo.svg | |
| Developers | Nikos Mavrogiannopoulos, Simon Josefsson |
| Stable release | 3.8.2 (November 15, 2023[1]) [±] |
| Repository |
|
| Written in | C, Assembly |
| Engine | |
| Operating system | Linux, macOS, Windows, BSD |
| Platform | x86, x86-64, ARM[2] |
| Type | Cryptography library |
| License | LGPL-2.1-or-later[3] |
| Website | www |
GnuTLS (/ˈɡnuː ˌtiː ˌɛl ˈɛs/, the GNU Transport Layer Security Library) is a free software implementation of the TLS, SSL and DTLS protocols. It offers an application programming interface (API) for applications to enable secure communication over the network transport layer, as well as interfaces to access X.509, PKCS #12, OpenPGP and other structures.
Features
[edit | edit source]GnuTLS consists of a library that allows client applications to start secure sessions using the available protocols. It also provides command-line tools, including an X.509 certificate manager, a test client and server, and random key and password generators.
GnuTLS has the following features:
- TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0, and SSL 3.0 protocols
- Datagram TLS (DTLS) 1.2, and DTLS 1.0, protocols
- TLS-SRP: Secure remote password protocol (SRP) for TLS authentication
- TLS-PSK: Pre-shared key (PSK) for TLS authentication
- X.509 and OpenPGP certificate[4] handling
- CPU assisted cryptography and cryptographic accelerator support (/dev/crypto), VIA PadLock and AES-NI instruction sets[5]
- Support for smart cards and for hardware security modules
- Storage of cryptographic keys in the system's Trusted Platform Module (TPM)
History
[edit | edit source]Origin
[edit | edit source]GnuTLS was initially created around March[6] to November[7] 2000, by Nikos Mavrogiannopoulos to allow applications of the GNU Project to use secure protocols such as TLS. Although OpenSSL already existed, OpenSSL's license is not compatible with the GPL;[8] thus software under the GPL, such as GNU software, could not use OpenSSL without making a GPL linking exception.
License
[edit | edit source]The GnuTLS library was licensed originally under the GNU Lesser General Public License v2, while included applications to use the GNU General Public License.
In August 2011 the library was updated to the LGPLv3.[9] After it was noticed[10] that there were new license compatibility problems introduced, especially with other free software with the license change, after discussions the license was downgraded again to LGPLv2.1 in March 2013.[11]
Split from GNU
[edit | edit source]GnuTLS was created for the GNU Project,[12][13] but in December 2012 its maintainer, Nikos Mavrogiannopoulos, dissociated the project from GNU after policy disputes with the Free Software Foundation.[12][13] Richard Stallman opposed this move and suggested forking the project instead.[14] Soon afterward, developer Paolo Bonzini ended his maintainership of GNU Sed and Grep, expressing concerns similar to those of GnuTLS maintainer Mavrogiannopoulos.[15]
Deployment
[edit | edit source]This section needs additional citations for verification. (January 2015) |
Software packages using GnuTLS include(d):
- GNOME
- CenterIM
- Exim[16]
- WeeChat
- Mutt
- Wireshark
- slrn
- Lynx[16]
- CUPS
- gnoMint[16]
- GNU Emacs
- Synology DiskStation Manager
- OpenConnect[17]
See also
[edit | edit source]Lua error in mw.title.lua at line 392: bad argument #2 to 'title.new' (unrecognized namespace name 'Portal').
- Comparison of TLS implementations
- wolfSSL (previously CyaSSL)
- mbed TLS (previously PolarSSL)
- List of free and open-source software packages
- Network Security Services
References
[edit | edit source]- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ RFC 6091
- ^ The GnuTLS Transport Layer Security Library
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Version 2.99.4 (released 2011-07-23)[...] ** libgnutls: license upgraded to LGPLv3
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ 2013-03-14 Nikos Mavrogiannopoulos (nmav@gnutls.org) * COPYING.LESSER, README: gnutls 3.1.10 is LGPLv2.1
- ^ a b GnuTLS, copyright assignment, and GNU project governance on lwn.net by Michael Kerrisk (December 20, 2012)
- ^ a b Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ a b c Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
- ^ Lua error in Module:Citation/CS1/Configuration at line 2172: attempt to index field '?' (a nil value).
External links
[edit | edit source]- Lua error in Module:Official_website at line 94: attempt to index field 'wikibase' (a nil value).
- GNU Friends - An Interview with GNU TLS developer Nikos Mavroyanopoulos – a 2003 interview
- Fellowship interview with Simon Josefsson – a 2009 interview
