GnuTLS
 |
This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. (March 2011) |
| Developer(s) | Free Software Foundation |
|---|---|
| Stable release |
3.0.14 (February 24, 2012 [1]) [±] |
| Preview release | [±] |
| Operating system | Multi-platform |
| Type | Security library |
| License | GNU Lesser General Public License |
| Website | www.gnutls.org |
GnuTLS (
/ˈɡnuː ˌtiː ˌɛl ˈɛs/, the GNU Transport Layer Security Library) is a free software implementation of the SSL, TLS and DTLS protocols. It offers an application programming interface (API) for applications to enable secure communication over their network transport layer, as well as interfaces to access X.509, PKCS #12, OpenPGP and other structures.
Contents |
[edit] Features
GnuTLS consists of a library that allows client applications to start secure sessions using the available protocols, as well as of a few command-line tools, including an X.509 certificate manager, test client and server, random key and password generators. As of 2011[update] Apache can be configured to use GnuTLS so as to support TLS 1.2.[3]
GnuTLS has the following features:
- SSL 3.0, TLS 1.0, TLS 1.1 protocols and the current TLS 1.2 protocol
- Datagram TLS (DTLS) 1.0
- Secure remote password protocol (SRP) for TLS authentication
- Pre-shared key (PSK) for TLS authentication
- X.509 and OpenPGP certificate[4] handling
- CPU assisted cryptography and cryptographic accelerator support
- Support for smart cards and for hardware security modules
[edit] License and motivation
The GnuTLS library is licensed under the GNU Lesser General Public License; included applications are licensed under the GNU General Public License.
GnuTLS was initially created to allow applications of the GNU project to use secure protocols such as TLS. Although OpenSSL already existed, OpenSSL's license is not compatible with the GPL;[5] thus software under the GPL, such as GNU software, could not use OpenSSL without making a GPL linking exception.
The list of software packages using GnuTLS includes GNOME, CenterIM, Exim, Weechat, Mutt, slrn, Lynx, CUPS and gnoMint.[6]
[edit] See also
- CyaSSL
- OpenSSL
- PolarSSL
- Network Security Services
- Comparison of TLS Implementations
- Transport Layer Security
[edit] References
- ^ "The GNU Transport Layer Security Library News". http://www.gnu.org/software/gnutls/news.html. Retrieved 2012-02-24.
- ^ "The GNU Transport Layer Security Library News". http://www.gnu.org/software/gnutls/news.html. Retrieved 2011-04-23.
- ^ The GNU Transport Layer Security Library
- ^ RFC 6091
- ^ Mark McLoughlin (2004-06-22). "The OpenSSL License and The GPL". http://people.gnome.org/~markmc/openssl-and-the-gpl.html. Retrieved 2011-04-06.
- ^ The GNU Transport Layer Security Library
[edit] External links
- Official website
- A 2003 interview with GnuTLS primary author Nikos Mavrogiannopoulos
- A 2009 interview with GnuTLS maintainer Simon Josefsson
|
|||||||||||||||||||
