Projects / GNU Transport Layer Securit...

GNU Transport Layer Security Library

GnuTLS is a secure communications library implementing the SSL, TLS, and DTLS protocols and technologies around them. It provides a simple C language application programming interface (API) to access the secure communications protocols, as well as APIs to parse and write X.509, PKCS #12, OpenPGP, and other required structures. It is intended to be portable and efficient with a focus on security and interoperability.

Tags
Licenses
Operating Systems
Implementation

RSS Recent releases

  •  22 Apr 2012 18:42

Release Notes: PKCS #11 URLs support reading the PIN from a file. Updates in DSA, ECDSA, and Diffie-Hellman handling.

Release Notes: This is a bugfix release on the current stable branch. It includes date-related (Y2K38) fixes, a fix for older VIA processors, and adds new APIs related to extraction of session random numbers and certificate parsing.

  •  16 Mar 2012 21:50

    Release Notes: This is a bugfix release on the current stable branch. The main fixes are an SRP-RSA fix under TLS 1.2 and the addition of assembler files for Mac OS X.

    •  03 Mar 2012 00:32

      Release Notes: This release adds several bugfixes and updates.

      •  21 Feb 2012 01:08

        Release Notes: This release adds support for a new helper interface to support trust on first use (SSH-like authentication), online OCSP verification in included programs, and several updates in the Datagram TLS layer.

        RSS Recent comments

        15 May 2007 10:27 free2malloc

        Re: License

        > An SSL/TLS library under the GPL. Yuck!

        > What's the

        > purpose of this except of having a GNU

        > label in front of

        > a SSL library?

        >

        > OpenSSL can do the same, while having a

        > much more

        > reasonable license.

        >

        good point. i say the same about linux, what a

        stupid project, let's just all use windows because it

        works the way we all expect it to.

        pfft...

        14 Dec 2002 09:50 jharr Thumbs up

        Re: License
        TAKE THAT :P

        (to the original poster) Honestly do you have to be that partial to OpenSSL. GPL is about keeping your mind open. OpenSSL has to get some merrit for being one of the first open source SSL implementations, however stuff doesn't get better unless it is challenged. And if OpenSSL gets shot down by GNUTLS because of its speed and reliability, it'll be for a reason. I'm not saying it will, but it could happen.

        >
        > % OpenSSL can do the same, while having
        > % a much more
        > % reasonable license.
        > %
        >
        >
        > resonability is in the eye of the
        > beholder; dismissing
        > something based on your own preferences
        > is a bit
        > silly. some people would prefer a GPL'd
        >
        > implementation.
        >
        > beyond that, OpenSSL is getting rather
        > huge and
        > slow (or so my crypto budies tell me)
        > and a rewrite
        > resulting in a smaller, faster library
        > could be exactly
        > what the doctor ordered for many
        > projects.
        >
        > then again, perhaps those involved in
        > the project
        > simply wanted to write a TLS library for
        > their own
        > satisfaction and education.
        >
        >

        16 Jun 2002 22:46 bug1

        Re: License
        Its questionable wether GPL'ed binaries can link to openssl. The issue is mentioned in the openssl FAQ, however its not as clear cut as they make out.

        openssl is not Free to developers who use the GPL, gnutls is.

        06 Nov 2001 13:26 aseigo

        Re: License

        > OpenSSL can do the same, while having
        > a much more
        > reasonable license.
        >

        resonability is in the eye of the beholder; dismissing
        something based on your own preferences is a bit
        silly. some people would prefer a GPL'd
        implementation.

        beyond that, OpenSSL is getting rather huge and
        slow (or so my crypto budies tell me) and a rewrite
        resulting in a smaller, faster library could be exactly
        what the doctor ordered for many projects.

        then again, perhaps those involved in the project
        simply wanted to write a TLS library for their own
        satisfaction and education.

        06 Nov 2001 11:34 dglaude

        Re: License

        > What's the purpose of this
        > except of having a GNU
        > label in front of a SSL library?

        Good question...

        Maybe someone will be more likely to invest time in contributing to something that will stay free and open rather than something that can/could be used in closed world with private modification distribute as binary.

        Check for GPL in www.openssl.org/suppor...
        and you see the begining of an issue with openssl.

        Does anybody know GPL program that use OpenSSL
        and do they have a GPL exception stated?

        Screenshot

        Project Spotlight

        spdylay

        An experimental SPDY protocol implementation in C.

        Screenshot

        Project Spotlight

        Samizdat

        An RDF-based open publishing engine.