GNU Transport Layer Security Library

headers Shengwei Li | 7 Feb 23:23 · /lib/

_______________________________________________
Help-gnutls mailing list
Help-gnutls <at> gnu.org
https://lists.gnu.org/mailman/listinfo/help-gnutls

_______________________________________________
Help-gnutls mailing list
Help-gnutls <at> gnu.org
https://lists.gnu.org/mailman/listinfo/help-gnutls

Hello Everyone,

I am using the latest version of Debian. With lib nettle 2.4 installed:

ls /usr/lib/
libnettle.a
libnettle.so
libnettle.so.4
libnettle.so.4.3

When compiling GNU tls, I am getting the libnettle 2.4 not found.

I tried:

 ./configure --prefix=/usr
 ./configure --prefix=/usr --with-libnettle-prefix=/usr

And got the same error

Thanks in Advance,

Nicholas.

This release adds OCSP functionality to GnuTLS, and some other fixes.

* Version 3.0.12 (released 2012-01-20)

** libgnutls: Added OCSP support.
There is a new header file gnutls/ocsp.h and a set of new functions
under the gnutls_ocsp namespace.  Currently the functionality provided
is to parse and extract information from OCSP requests/responses, to
generate OCSP requests and to verify OCSP responses.  See the manual
for more information.  Run ./configure with --disable-ocsp to build
GnuTLS without OCSP support.

This work was sponsored by Smoothwall <http://smoothwall.net/>.

** ocsptool: Added new command line tool.
The tool can parse OCSP request/responses, generate OCSP requests and
verify OCSP responses.  See the manual for more information.

** certtool: --outder option now works for private
and public keys as well.

** libgnutls: Added error code GNUTLS_E_NO_PRIORITIES_WERE_SET
to warn when no or insufficient priorities were set.

** libgnutls: Corrected an alignment issue in ECDH
key generation which prevented some keys from being
correctly aligned in rare circumstances.

** libgnutls: Corrected memory leaks in DH parameter
generation and ecc_projective_check_point().

** libgnutls: Added gnutls_x509_dn_oid_name() to 
return a descriptive name of a DN OID.

** API and ABI modifications:
gnutls_pubkey_encrypt_data: Added
gnutls_x509_dn_oid_name: Added
gnutls_session_resumption_requested: Added
gnutls/ocsp.h: Added new header file.
gnutls_ocsp_print_formats_t: Added new type.
gnutls_ocsp_resp_status_t: Added new type.
gnutls_ocsp_cert_status_t: Added new type.
gnutls_x509_crl_reason_t: Added new type.
gnutls_ocsp_req_add_cert: Added.
gnutls_ocsp_req_add_cert_id: Added.
gnutls_ocsp_req_deinit: Added.
gnutls_ocsp_req_export: Added.
gnutls_ocsp_req_get_cert_id: Added.
gnutls_ocsp_req_get_extension: Added.
gnutls_ocsp_req_get_nonce: Added.
gnutls_ocsp_req_get_version: Added.
gnutls_ocsp_req_import: Added.
gnutls_ocsp_req_init: Added.
gnutls_ocsp_req_print: Added.
gnutls_ocsp_req_randomize_nonce: Added.
gnutls_ocsp_req_set_extension: Added.
gnutls_ocsp_req_set_nonce: Added.
gnutls_ocsp_resp_deinit: Added.
gnutls_ocsp_resp_export: Added.
gnutls_ocsp_resp_get_certs: Added.
gnutls_ocsp_resp_get_extension: Added.
gnutls_ocsp_resp_get_nonce: Added.
gnutls_ocsp_resp_get_produced: Added.
gnutls_ocsp_resp_get_responder: Added.
gnutls_ocsp_resp_get_response: Added.
gnutls_ocsp_resp_get_signature: Added.
gnutls_ocsp_resp_get_signature_algorithm: Added.
gnutls_ocsp_resp_get_single: Added.
gnutls_ocsp_resp_get_status: Added.
gnutls_ocsp_resp_get_version: Added.
gnutls_ocsp_resp_import: Added.
gnutls_ocsp_resp_init: Added.
gnutls_ocsp_resp_print: Added.
gnutls_ocsp_resp_verify: Added.

Getting the Software
====================

GnuTLS may be downloaded from one of the GNU mirror sites or directly
From <ftp://ftp.gnu.org/gnu/gnutls/≥.  The list of GNU mirrors can be
found at <http://www.gnu.org/prep/ftp.html> and a list of GnuTLS mirrors
can be found at <http://www.gnu.org/software/gnutls/download.html>.

Here are the XZ compressed sources:

  ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.12.tar.xz
  http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.12.tar.xz
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.12.tar.xz

Here are OpenPGP detached signatures signed using key 0xB565716F:

  ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.12.tar.xz.sig
  http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.12.tar.xz.sig
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.12.tar.xz.sig

pub   1280R/B565716F 2002-05-05 [expires: 2013-05-10]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <simon <at> josefsson.org>
sub   1280R/4D5D40AE 2002-05-05 [expires: 2013-05-10]

Happy hacking,
Simon

_______________________________________________
Help-gnutls mailing list
Help-gnutls <at> gnu.org
https://lists.gnu.org/mailman/listinfo/help-gnutls

Hi,

Following on from my previous mail about using the certificate parts
of GnuTLS with Qt, I've just written a fairly detailed blog post about
the results of writing the code needed to use the actual SSL/TLS parts
too. It's at http://blogs.kde.org/node/4523 if anyone wants to take a
look.

Cheers

Rich.

_______________________________________________
Help-gnutls mailing list
Help-gnutls <at> gnu.org
https://lists.gnu.org/mailman/listinfo/help-gnutls

_______________________________________________
Help-gnutls mailing list
Help-gnutls <at> gnu.org
https://lists.gnu.org/mailman/listinfo/help-gnutls

I was wondering ever since the paper that describes the attack on
pre-tls 1.2
(http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.61.5887&rep=rep1&type=pdf
) whether it is possible to use gnutls on mozilla software instead of
libnss.  Has anyone ever attempted doing something similar?  I am
assuming it is theoretically possible to import gnutls libraries in the
mozilla source and re-compile.

I would like to know if anyone has attempted such a thing.

--Ali

I've been evaluating using GnuTLS with Qt this weekend. There's a
basic tool that prints out cert info and converts from some Qt data
types like QDateTime etc. at
http://xmelegance.org/devel/cert-prototype.tar.bz2 I'm just posting it
here in case it happens to be useful to anyone. Issues I've
encountered are documented in the NOTES file.

Cheers

Rich.

Hello,
 I've just released gnutls 3.0.10. This release adds support 
for random-art images which display a drawing representing the 
public key's fingerprint, fixes several open issues for ms-windows 
support, and other fixes.

* Version 3.0.10 (released 2012-01-04)

** gnutls-cli/serv: Set don't fragment bit in DTLS sessions
in Linux as well as in BSD.

** gnutls-cli: Fixed reading from windows terminals.

** libgnutls: When GNUTLS_OPENPGP_FMT_BASE64 is specified
the stream is assumed to be base64 encoded (previously
the encoding was auto-detected). This avoids a decoding
issue in windows systems.

** libgnutls: Corrected ciphersuite GNUTLS_ECDHE_PSK_AES_256_CBC_SHA384

** libgnutls: Added ciphersuites: GNUTLS_PSK_WITH_AES_256_GCM_SHA384
and GNUTLS_DHE_PSK_WITH_AES_256_GCM_SHA384.

** libgnutls: Added function gnutls_random_art() to convert
fingerprints to images (currently ascii-art).

** libgnutls: Corrected bug in DSA private key parsing, which
prevented the verification of the key.

** API and ABI modifications:
gnutls_random_art: Added

Getting the Software
====================

GnuTLS may be downloaded from one of the GNU mirror sites or directly
From <ftp://ftp.gnu.org/gnu/gnutls/≥.  The list of GNU mirrors can be
found at <http://www.gnu.org/prep/ftp.html> and a list of GnuTLS mirrors
can be found at <http://www.gnu.org/software/gnutls/download.html>.

Here are the XZ compressed sources:

  ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.10.tar.xz
  http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.10.tar.xz
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.10.tar.xz

Here are OpenPGP detached signatures signed using key 0x96865171:

  ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.10.tar.xz.sig
  http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.10.tar.xz.sig
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.10.tar.xz.sig

Note that it has been signed with my openpgp key:
pub   3104R/96865171 2008-05-04 [expires: 2028-04-29]
uid                  Nikos Mavrogiannopoulos <nmav <at> gnutls.org>
uid                  Nikos Mavrogiannopoulos <n.mavrogiannopoulos <at>
gmail.com>
sub   2048R/9013B842 2008-05-04 [expires: 2018-05-02]
sub   2048R/1404A91D 2008-05-04 [expires: 2018-05-02]

regards,
Nikos

---------- Forwarded message ----------
From: Karl Berry <karl <at> freefriends.org>
Date: Wed, Jan 4, 2012 at 12:02 AM
Subject: FSF fundraising drive
To: gnu-prog <at> gnu.org

The FSF is nearing the end of its current fundraising drive and all
support is welcome, as always.  Of course, the more members and/or
donations, the more support for GNU infrastructure and free software
campaigns.

The direct url to join is http://www.fsf.org/join, or donate at
https://my.fsf.org/donate.

If you think it's appropriate, please forward this to your project
mailing list and/or specific friends you think would be interested.  Or
if you'd like to join yourself, please go for it :).  If you're already
a member, and in any case for your contributions to GNU, thanks very
much.

Happy hacking to all,
Karl

_______________________________________________
Help-gnutls mailing list
Help-gnutls <at> gnu.org
https://lists.gnu.org/mailman/listinfo/help-gnutls

8	February 2012
24	January 2012
25	December 2011
49	November 2011
35	October 2011
24	September 2011
9	August 2011
23	July 2011
22	June 2011
29	May 2011
28	April 2011
14	March 2011
11	February 2011
15	January 2011
37	December 2010
39	November 2010
9	October 2010
33	September 2010
19	August 2010
34	July 2010
40	June 2010
25	May 2010
38	April 2010
13	March 2010
23	February 2010
10	January 2010
17	December 2009
38	November 2009
60	October 2009
24	September 2009
18	August 2009
41	July 2009
36	June 2009
46	May 2009
28	April 2009
19	March 2009
36	February 2009
15	January 2009
27	December 2008
67	November 2008
40	October 2008
41	September 2008
22	August 2008
14	July 2008
30	June 2008
59	May 2008
108	April 2008
30	March 2008
36	February 2008
14	January 2008
22	December 2007
31	November 2007
38	October 2007
18	September 2007
24	August 2007
4	July 2007
15	June 2007
34	May 2007
54	April 2007
28	March 2007
71	February 2007
58	January 2007
15	December 2006
14	November 2006
29	October 2006
27	September 2006
12	August 2006
47	July 2006
17	June 2006
12	May 2006
3	April 2006
24	March 2006
12	February 2006
21	January 2006
16	December 2005
31	November 2005
22	October 2005
24	September 2005
44	August 2005
14	July 2005
5	June 2005
19	May 2005
40	April 2005
22	March 2005
12	February 2005
4	January 2005
16	November 2004
4	October 2004
7	September 2004
2	August 2004
8	July 2004
5	June 2004
13	May 2004
4	April 2004
8	February 2004
1	January 2004
4	December 2003
10	November 2003
16	October 2003
1	August 2003
1	July 2003
3	June 2003
4	May 2003
2	April 2003
11	March 2003
4	January 2003
2	September 2002
7	August 2002
1	July 2002
5	June 2002

Cross compile issue about gnutls 3.0.12 on ubuntu with MinGW

HELP: Client-Server code for anonymous authentication NOT working

Libnettle 2.4 was not found

GnuTLS 3.0.12

Further experiments with using GnuTLS in Qt

Error when using an encrypted private key

configure cannot find -lhogweed

porting gnutls to mozilla

Experiments with GnuTLS and Qt

gnutls 3.0.10

Fwd: FSF fundraising drive

Mon	Tue	Wed	Thu	Fri	Sat	Sun

		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29