|Stable release||) [±]|
GnuTLS (/ /, the GNU Transport Layer Security Library) is a free software implementation of the TLS, SSL and DTLS protocols. It offers an application programming interface (API) for applications to enable secure communication over the network transport layer, as well as interfaces to access X.509, PKCS #12, OpenPGP and other structures.
GnuTLS consists of a library that allows client applications to start secure sessions using the available protocols. It also provides command-line tools, including an X.509 certificate manager, a test client and server, and random key and password generators. As of 2011[update] administrators can configure Apache web server to use GnuTLS so as to support TLS 1.2.
GnuTLS has the following features:
- TLS 1.2, TLS 1.1, TLS 1.0, and SSL 3.0 protocols
- Datagram TLS (DTLS) 1.2, and DTLS 1.0, protocols
- Secure remote password protocol (SRP) for TLS authentication
- Pre-shared key (PSK) for TLS authentication
- X.509 and OpenPGP certificate handling
- CPU assisted cryptography and cryptographic accelerator support (/dev/crypto), VIA PadLock and AES-NI instruction sets
- Support for smart cards and for hardware security modules
- Storage of cryptographic keys in the system's Trusted Platform Module (TPM)
GnuTLS was initially created around March 2003 by Nikos Mavrogiannopoulos to allow applications of the GNU Project to use secure protocols such as TLS. Although OpenSSL already existed, OpenSSL's license is not compatible with the GPL; thus software under the GPL, such as GNU software, could not use OpenSSL without making a GPL linking exception.
In August 2011 the library was updated to the LGPLv3. After it was noticed that there were new license compatibility problems introduced, especially with other free software with the license change, after discussions the license was downgraded again to LGPLv2.1 in March 2013.
Split from the GNU/FSF
|This section needs additional citations for verification. (January 2015)|
Software packages using GnuTLS include(d):
- Comparison of TLS implementations
- wolfSSL (previously CyaSSL)
- mbed TLS (previously PolarSSL)
- Network Security Services
- "GnuTLS". 2015-10-20. Retrieved 2015-11-18.
- The GNU Transport Layer Security Library
- RFC 6091
- The GnuTLS Transport Layer Security Library
- Changelog 0.0.5
- Mark McLoughlin (2004-06-22). "The OpenSSL License and The GPL". Retrieved 2011-04-06.
- Version 2.99.4 (released 2011-07-23)[... ** libgnutls: license upgraded to LGPLv3]
- Mavrogiannopoulos, Nikos (2013-03-26). "The perils of LGPLv3". gnutls.org. Retrieved 2015-11-18.
LGPLv3 is the latest version of the GNU Lesser General Public License. It follows the successful LGPLv2.1 license, and was released by Free Software Foundation as a counterpart to its GNU General Public License version 3. The goal of the GNU Lesser General Public Licenses is to provide software that can be used by both proprietary and free software. This goal has been successfully handled so far by LGPLv2.1, and there is a multitude of libraries using that license. Now we have LGPLv3 as the latest, and the question is how successful is LGPLv3 on this goal? In my opinion, very little. If we assume that its primary goal is to be used by free software, then it blatantly fails that.
- 2013-03-14 Nikos Mavrogiannopoulos (email@example.com) * COPYING.LESSER, README: gnutls 3.1.10 is LGPLv2.1
- Nikos Mavrogiannopoulos (2012-12-18). "gnutls is moving". Retrieved 2012-12-11.
- "GnuTLS - GNU Project - Free Software Foundation (FSF)". Free Software Foundation. 22 May 2010. Archived from the original on 31 May 2010. Retrieved 25 January 2015.
- Official website
- GNU Friends - An Interview with GNU TLS developer Nikos Mavroyanopoulos – a 2003 interview
- Fellowship interview with Simon Josefsson – a 2009 interview