GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and
SSL 3.0 protocols. The library does not include any patented algorithms and
is available under the GNU Lesser GPL license.
Important features of the GnuTLS library include:
- Thread safety
- Support for both TLS 1.0 and SSL 3.0 protocols
- Support for both X.509 and OpenPGP certificates
- Support for basic parsing and verification of certificates
- Support for SRP for TLS authentication
- Support for TLS Extension mechanism
- Support for TLS Compression Methods
Additionaly GnuTLS provides an emulation API for the widely used
OpenSSL library, to ease integration with existing applications.
WWW: http://www.gnutls.org/
===> The following configuration options are available for gnutls3-3.1.25_3:
CXX=on: C++ language support
DOCS=on: Build and/or install documentation
EXAMPLES=on: Build and/or install examples
LIBDANE=off: DNSSEC support for DANE (danetool3 --check)
LIBTASN1=off: Use libtasn1 from ports
===> Use 'make config' to modify these settings
- Replace security/gnutls with security/gnutls3 and update to 3.2.15
- Bump PORTREVISION on all ports that depend on security/gnutls and
adjust all ports that depend on security/gnutls3
- Update mail/anubis to version 4.2 which supports gnutls 3.x
- Update mail/libvmime to a development snapshot (recommended by upstream
developers)
PR: 191274
Exp-run by: antoine
Approved by: portmgr (antoine)
- Convert security/trousers to USES=libtool and bump dependent ports
- Use standard USE_AUTOTOOLS
- Add INSTALL_TARGET=install-strip
- Drop PTHREAD_LIBS
- Fix build when info files get regenerated, thus causing info-5 to
disappear.
Depending on which makeinfo version is used it would spit out 6
files or 5 (.info,1-5). It would not always regenerate though.
The bundled info files went to -5. Now force regenerate it always
using the base makeinfo(1) and use --no-split so only 1 file is used.
PR: 190693
Reported by: many
- Hide libdane support behind option LIBDANE
- Disable by default as it ends up pulling in openssl via unbound, which
is odd for gnutls3 to do.
PR: ports/188184
Submitted by: Lawrence "The Dreamer" Chen <beastie@tardisi.com> (based on)
Discussed with: wg
- Update to 3.1.22
This fixes the following vulnerabilities:
CVE-2014-0092 - Certificate verification issue
CVE-2014-1959 - Certificate verification issue
All users are recommended to upgrade ASAP.
Security: f645aa90-a3e8-11e3-a422-3c970e169bc2
security/gnutls3: try to fix build for some people
- gnutls.info-5 was not being generated for some people
PR: ports/183577
Submitted by: Mamoru Iwaki <1wkmmr gmail.com>
security/gnutls3: GNU Transport Layer Security library
GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and
SSL 3.0 protocols. The library does not include any patented algorithms and
is available under the GNU Lesser GPL license.
Important features of the GnuTLS library include:
- Thread safety
- Support for both TLS 1.0 and SSL 3.0 protocols
- Support for both X.509 and OpenPGP certificates
- Support for basic parsing and verification of certificates
- Support for SRP for TLS authentication
- Support for TLS Extension mechanism
- Support for TLS Compression Methods
Additionaly GnuTLS provides an emulation API for the widely used
OpenSSL library, to ease integration with existing applications.
WWW: http://www.gnutls.org/
