source: postlfs/security/gnutls.xml@ 8af694bb

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 8af694bb was 8af694bb, checked in by Fernando de Oliveira <fernando@…>, 9 years ago

Update to gnutls-3.4.2.
Update to appstream-glib-0.4.0.
Update to xorg-server-1.17.2.
Update to curl-7.43.0.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@16135 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 11.6 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnutls-download-http " ">
8 <!ENTITY gnutls-download-ftp "ftp://ftp.gnutls.org/gcrypt/gnutls/v3.4/gnutls-&gnutls-version;.tar.xz">
9 <!ENTITY gnutls-md5sum "4fb4a6253e09aa070e6c467cbb51ba33">
10 <!ENTITY gnutls-size "6.3 MB">
11 <!ENTITY gnutls-buildsize "145 MB (with built in API documentation and tests)">
12 <!ENTITY gnutls-time "4.0 SBU (with built in API documentation and tests)">
13]>
14
15<sect1 id="gnutls" xreflabel="GnuTLS-&gnutls-version;">
16 <?dbhtml filename="gnutls.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuTLS-&gnutls-version;</title>
24
25 <indexterm zone="gnutls">
26 <primary sortas="a-GnuTLS">GnuTLS</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuTLS</title>
31
32 <para>
33 The <application>GnuTLS</application> package contains libraries and
34 userspace tools which provide a secure layer over a reliable transport
35 layer. Currently the <application>GnuTLS</application> library implements
36 the proposed standards by the IETF's TLS working group. Quoting from the
37 TLS protocol specification:
38 </para>
39
40 <para>
41 <quote>The TLS protocol provides communications privacy over the
42 Internet. The protocol allows client/server applications to communicate in
43 a way that is designed to prevent eavesdropping, tampering, or message
44 forgery.</quote>
45 </para>
46
47 <para>
48 <application>GnuTLS</application> provides support for TLS 1.2, TLS 1.1,
49 TLS 1.0, and SSL 3.0 protocols, TLS extensions, including server name and max
50 record size. Additionally, the library supports authentication using the
51 SRP protocol, X.509 certificates and OpenPGP keys, along with support for
52 the TLS Pre-Shared-Keys (PSK) extension, the Inner Application (TLS/IA)
53 extension and X.509 and OpenPGP certificate handling.
54 </para>
55
56 &lfs77_checked; &gcc5_checked;
57
58 <bridgehead renderas="sect3">Package Information</bridgehead>
59 <itemizedlist spacing="compact">
60 <listitem>
61 <para>
62 Download (HTTP): <ulink url="&gnutls-download-http;"/>
63 </para>
64 </listitem>
65 <listitem>
66 <para>
67 Download (FTP): <ulink url="&gnutls-download-ftp;"/>
68 </para>
69 </listitem>
70 <listitem>
71 <para>
72 Download MD5 sum: &gnutls-md5sum;
73 </para>
74 </listitem>
75 <listitem>
76 <para>
77 Download size: &gnutls-size;
78 </para>
79 </listitem>
80 <listitem>
81 <para>
82 Estimated disk space required: &gnutls-buildsize;
83 </para>
84 </listitem>
85 <listitem>
86 <para>
87 Estimated build time: &gnutls-time;
88 </para>
89 </listitem>
90 </itemizedlist>
91
92 <bridgehead renderas="sect3">GnuTLS Dependencies</bridgehead>
93
94 <bridgehead renderas="sect4">Required</bridgehead>
95 <para role="required">
96 <xref linkend="nettle"/>
97 </para>
98
99 <bridgehead renderas="sect4">Recommended</bridgehead>
100 <para role="recommended">
101 <xref linkend="cacerts"/>,
102 <xref linkend="libtasn1"/> and
103 <xref linkend="p11-kit"/>
104 </para>
105
106 <bridgehead renderas="sect4">Optional</bridgehead>
107 <para role="optional">
108 <xref linkend="doxygen"/>,
109 <xref linkend="gtk-doc"/>,
110 <xref linkend="guile"/>,
111 <xref linkend="libidn"/>,
112 <xref linkend="texlive"/> or <xref linkend="tl-installer"/>,
113 <xref linkend="unbound"/> (to build the DANE library),
114 <xref linkend="valgrind"/> (used during the test suite),
115 <ulink url="http://ftp.gnu.org/gnu/autogen/">autogen</ulink>, and
116 <ulink url="http://sourceforge.net/projects/trousers/files/trousers/">Trousers</ulink> (Trusted Platform Module support)
117 </para>
118
119 <note><para>
120 Note that if you do not install <xref linkend="libtasn1"/>, an older
121 version shipped in the <application>GnuTLS</application> tarball will be
122 used instead.
123 </para></note>
124
125 <para condition="html" role="usernotes">User Notes:
126 <ulink url="&blfs-wiki;/gnutls"/>
127 </para>
128 </sect2>
129
130 <sect2 role="installation">
131 <title>Installation of GnuTLS</title>
132
133 <para>
134 Install <application>GnuTLS</application> by running the
135 following commands:
136 </para>
137
138<screen><userinput>./configure --prefix=/usr \
139 --with-default-trust-store-file=/etc/ssl/ca-bundle.crt &amp;&amp;
140
141make</userinput></screen>
142
143 <para>
144 To test the results, issue: <command>make check</command>.
145 </para>
146
147 <para>
148 Now, as the <systemitem class="username">root</systemitem>
149 user:
150 </para>
151
152<screen role="root"><userinput>make install</userinput></screen>
153
154 <para>
155 If you did not pass the <option>--enable-gtk-doc</option> parameter to
156 the <command>configure</command> script, you can install the API
157 documentation to the <filename
158 class="directory">/usr/share/gtk-doc/html/gnutls</filename> directory
159 using the following command as the
160 <systemitem class="username">root</systemitem> user:
161 </para>
162
163<screen role="root"><userinput>make -C doc/reference install-data-local</userinput></screen>
164
165 </sect2>
166
167 <sect2 role="commands">
168 <title>Command Explanations</title>
169
170 <para>
171 <parameter>--with-default-trust-store-file=/etc/ssl/ca-bundle.crt</parameter>:
172 This switch tells <command>configure</command> where to find the
173 CA Certificates.
174 </para>
175
176 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
177 href="../../xincludes/gtk-doc-rebuild.xml"/>
178
179 <para>
180 <option>--enable-openssl-compatibility</option>:
181 Use this switch if you wish to build the OpenSSL compatibility library.
182 </para>
183
184 <para>
185 <option>--without-p11-kit</option>: use this switch if you have not
186 installed <application>p11-kit</application>.
187 </para>
188
189 </sect2>
190
191 <sect2 role="content">
192 <title>Contents</title>
193
194 <segmentedlist>
195 <segtitle>Installed Programs</segtitle>
196 <segtitle>Installed Libraries</segtitle>
197 <segtitle>Installed Directories</segtitle>
198
199 <seglistitem>
200 <seg>
201 certtool, crywrap, danetool, gnutls-cli, gnutls-cli-debug,
202 gnutls-serv, ocsptool, p11tool, psktool, and srptool
203 </seg>
204 <seg>
205 libgnutls.so, libgnutls-dane.so, libgnutlsxx.so, and
206 /usr/lib/guile/2.0/guile-gnutls-v-2.so
207 </seg>
208 <seg>
209 /usr/{include,share/{gtk-doc/html,guile/site}}/gnutls
210 </seg>
211 </seglistitem>
212 </segmentedlist>
213
214 <variablelist>
215 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
216 <?dbfo list-presentation="list"?>
217 <?dbhtml list-presentation="table"?>
218
219 <varlistentry id="certtool">
220 <term><command>certtool</command></term>
221 <listitem>
222 <para>
223 is used to generate X.509 certificates, certificate requests,
224 and private keys.
225 </para>
226 <indexterm zone="gnutls certtool">
227 <primary sortas="b-certtool">certtool</primary>
228 </indexterm>
229 </listitem>
230 </varlistentry>
231
232 <varlistentry id="crywrap">
233 <term><command>crywrap</command></term>
234 <listitem>
235 <para>
236 is a simple wrapper that waits for TLS/SSL connections,
237 and proxies them to an unencrypted location. Only installed if
238 <xref linkend="libidn"/> is present.
239 </para>
240 <indexterm zone="gnutls crywrap">
241 <primary sortas="b-crywrap">crywrap</primary>
242 </indexterm>
243 </listitem>
244 </varlistentry>
245
246 <varlistentry id="danetool">
247 <term><command>danetool</command></term>
248 <listitem>
249 <para>
250 is a tool used to generate and check DNS resource records
251 for the DANE protocol.
252 </para>
253 <indexterm zone="gnutls danetool">
254 <primary sortas="b-danetool">danetool</primary>
255 </indexterm>
256 </listitem>
257 </varlistentry>
258
259 <varlistentry id="gnutls-cli">
260 <term><command>gnutls-cli</command></term>
261 <listitem>
262 <para>
263 is a simple client program to set up a TLS connection to some
264 other computer.
265 </para>
266 <indexterm zone="gnutls gnutls-cli">
267 <primary sortas="b-gnutls-cli">gnutls-cli</primary>
268 </indexterm>
269 </listitem>
270 </varlistentry>
271
272 <varlistentry id="gnutls-cli-debug">
273 <term><command>gnutls-cli-debug</command></term>
274 <listitem>
275 <para>
276 is a simple client program to set up a TLS connection to some
277 other computer and produces very verbose progress results.
278 </para>
279 <indexterm zone="gnutls gnutls-cli-debug">
280 <primary sortas="b-gnutls-cli-debug">gnutls-cli-debug</primary>
281 </indexterm>
282 </listitem>
283 </varlistentry>
284
285 <varlistentry id="gnutls-serv">
286 <term><command>gnutls-serv</command></term>
287 <listitem>
288 <para>
289 is a simple server program that listens to incoming TLS
290 connections.
291 </para>
292 <indexterm zone="gnutls gnutls-serv">
293 <primary sortas="b-gnutls-serv">gnutls-serv</primary>
294 </indexterm>
295 </listitem>
296 </varlistentry>
297
298 <varlistentry id="ocsptool">
299 <term><command>ocsptool</command></term>
300 <listitem>
301 <para>
302 is a program that can parse and print information about OCSP
303 requests/responses, generate requests and verify responses.
304 </para>
305 <indexterm zone="gnutls ocsptool">
306 <primary sortas="b-ocsptool">ocsptool</primary>
307 </indexterm>
308 </listitem>
309 </varlistentry>
310
311 <varlistentry id="p11tool">
312 <term><command>p11tool</command></term>
313 <listitem>
314 <para>
315 is a program that allows handling data from PKCS #11 smart cards
316 and security modules.
317 </para>
318 <indexterm zone="gnutls p11tool">
319 <primary sortas="b-p11tool">p11tool</primary>
320 </indexterm>
321 </listitem>
322 </varlistentry>
323
324 <varlistentry id="psktool">
325 <term><command>psktool</command></term>
326 <listitem>
327 <para>
328 is a simple program that generates random keys for use with TLS-PSK.
329 </para>
330 <indexterm zone="gnutls psktool">
331 <primary sortas="b-psktool">psktool</primary>
332 </indexterm>
333 </listitem>
334 </varlistentry>
335
336 <varlistentry id="srptool">
337 <term><command>srptool</command></term>
338 <listitem>
339 <para>
340 is a simple program that emulates the programs in the Stanford
341 SRP (Secure Remote Password) libraries using GnuTLS.
342 </para>
343 <indexterm zone="gnutls srptool">
344 <primary sortas="b-srptool">srptool</primary>
345 </indexterm>
346 </listitem>
347 </varlistentry>
348
349 <varlistentry id="libgnutls">
350 <term><filename class="libraryfile">libgnutls.so</filename></term>
351 <listitem>
352 <para>
353 contains the core API functions and X.509 certificate API functions.
354 </para>
355 <indexterm zone="gnutls libgnutls">
356 <primary sortas="c-libgnutls">libgnutls.so</primary>
357 </indexterm>
358 </listitem>
359 </varlistentry>
360
361 </variablelist>
362
363 </sect2>
364
365</sect1>
Note: See TracBrowser for help on using the repository browser.