GnuTLS

Features

GnuTLS consists of a library that allows client applications to start secure sessions using the available protocols. It also provides command-line tools, including an X.509 certificate manager, a test client and server, and random key and password generators.

GnuTLS has the following features:

• TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0, and SSL 3.0 protocols
• Datagram TLS (DTLS) 1.2, and DTLS 1.0, protocols
• TLS-SRP: Secure remote password protocol (SRP) for TLS authentication
• TLS-PSK: Pre-shared key (PSK) for TLS authentication
• X.509 and OpenPGP certificate handling
• CPU assisted cryptography and cryptographic accelerator support (/dev/crypto), VIA PadLock and AES-NI instruction sets
• Support for smart cards and for hardware security modules
• Storage of cryptographic keys in the system's Trusted Platform Module (TPM)

History

Origin

GnuTLS was initially created around March to November 2000, by Nikos Mavrogiannopoulos to allow applications of the GNU Project to use secure protocols such as TLS. Although OpenSSL already existed, OpenSSL's license is not compatible with the GPL; thus software under the GPL, such as GNU software, could not use OpenSSL without making a GPL linking exception.

License

The GnuTLS library was licensed originally under the GNU Lesser General Public License v2, while included applications to use the GNU General Public License.

In August 2011 the library was updated to the LGPLv3. After it was noticed that there were new license compatibility problems introduced, especially with other free software with the license change, after discussions the license was downgraded again to LGPLv2.1 in March 2013.

Split from GNU

GnuTLS was created for the GNU Project, but in December 2012 its maintainer, Nikos Mavrogiannopoulos, dissociated the project from GNU after policy disputes with the Free Software Foundation. | access-date = 2012-12-11 |df=dmy-all

Deployment

Software packages using GnuTLS include(d):

• GNOME
• CenterIM
• Exim
• WeeChat
• Mutt
• Wireshark
• slrn
• Lynx
• CUPS
• gnoMint
• GNU Emacs
• Synology DiskStation Manager
• OpenConnect

References

References

1. "Debian -- Details of package gnutls-bin in buster".
2. "LICENSE".
3. {{IETF RFC. 6091
4. [http://www.gnutls.org/ The GnuTLS Transport Layer Security Library]
5. (2000-03-07). "Initialized repository for GNU TLS (8aef5fff) · Commits · gnutls / GnuTLS · GitLab".
6. (2000-11-15). "gnutls0-0-4 · Tags · gnutls / GnuTLS · GitLab".
7. Mark McLoughlin. (2004-06-22). "The OpenSSL License and The GPL".
8. [http://upstream.rosalinux.ru/changelogs/gnutls/3.2.1/changelog.html Version 2.99.4 (released 2011-07-23)[...] ** libgnutls: license upgraded to LGPLv3]
9. Mavrogiannopoulos, Nikos. (2013-03-26). "The perils of LGPLv3". gnutls.org.
10. [http://www.gnutls.org/abi-tracker/changelog/gnutls/3.1.10/log.html 2013-03-14 Nikos Mavrogiannopoulos (nmav@gnutls.org) * COPYING.LESSER, README: gnutls 3.1.10 is LGPLv2.1]
11. [https://lwn.net/Articles/529522/ GnuTLS, copyright assignment, and GNU project governance] on lwn.net by Michael Kerrisk (December 20, 2012)
12. Stallman, Richard. (2012-12-11). "GNUTLS is not going anywhere".
13. Bonzini, Paolo. (2012-12-22). "GNU sed 4.2.2 released, and a rant from the maintainer".
14. (22 May 2010). "GnuTLS - GNU Project - Free Software Foundation (FSF)". [[Free Software Foundation]].
15. "OpenConnect VPN client technical details".