source: postlfs/security/gnutls.xml@ 0b57c61a

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since 0b57c61a was 0b57c61a, checked in by Fernando de Oliveira <fernando@…>, 10 years ago

apr-1.5.1 and gnutls-3.3.1.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@12985 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 11.4 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnutls-download-http " ">
8 <!ENTITY gnutls-download-ftp "ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-&gnutls-version;.tar.xz">
9 <!ENTITY gnutls-md5sum "6bf7faa9d4996197e0e404e8c25016f8">
10 <!ENTITY gnutls-size "5.1 MB">
11 <!ENTITY gnutls-buildsize "103 MB (additional 9 MB for the tests)">
12 <!ENTITY gnutls-time "8.0 SBU (additional 1.8 SBU for the tests)">
13]>
14
15<sect1 id="gnutls" xreflabel="GnuTLS-&gnutls-version;">
16 <?dbhtml filename="gnutls.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuTLS-&gnutls-version;</title>
24
25 <indexterm zone="gnutls">
26 <primary sortas="a-GnuTLS">GnuTLS</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuTLS</title>
31
32 <para>
33 The <application>GnuTLS</application> package contains libraries and
34 userspace tools which provide a secure layer over a reliable transport
35 layer. Currently the <application>GnuTLS</application> library implements
36 the proposed standards by the IETF's TLS working group. Quoting from the
37 TLS protocol specification:
38 </para>
39
40 <para>
41 <quote>The TLS protocol provides communications privacy over the
42 Internet. The protocol allows client/server applications to communicate in
43 a way that is designed to prevent eavesdropping, tampering, or message
44 forgery.</quote>
45 </para>
46
47 <para>
48 <application>GnuTLS</application> provides support for TLS 1.1, TLS
49 1.0 and SSL 3.0 protocols, TLS extensions, including server name and max
50 record size. Additionally, the library supports authentication using the
51 SRP protocol, X.509 certificates and OpenPGP keys, along with support for
52 the TLS Pre-Shared-Keys (PSK) extension, the Inner Application (TLS/IA)
53 extension and X.509 and OpenPGP certificate handling.
54 </para>
55
56 &lfs75_checked;
57
58 <bridgehead renderas="sect3">Package Information</bridgehead>
59 <itemizedlist spacing="compact">
60 <listitem>
61 <para>
62 Download (HTTP): <ulink url="&gnutls-download-http;"/>
63 </para>
64 </listitem>
65 <listitem>
66 <para>
67 Download (FTP): <ulink url="&gnutls-download-ftp;"/>
68 </para>
69 </listitem>
70 <listitem>
71 <para>
72 Download MD5 sum: &gnutls-md5sum;
73 </para>
74 </listitem>
75 <listitem>
76 <para>
77 Download size: &gnutls-size;
78 </para>
79 </listitem>
80 <listitem>
81 <para>
82 Estimated disk space required: &gnutls-buildsize;
83 </para>
84 </listitem>
85 <listitem>
86 <para>
87 Estimated build time: &gnutls-time;
88 </para>
89 </listitem>
90 </itemizedlist>
91
92 <bridgehead renderas="sect3">GnuTLS Dependencies</bridgehead>
93
94 <bridgehead renderas="sect4">Required</bridgehead>
95 <para role="required">
96 <xref linkend="nettle"/>
97 </para>
98
99 <bridgehead renderas="sect4">Recommended</bridgehead>
100 <para role="recommended">
101 <xref linkend="cacerts"/> and
102 <xref linkend="libtasn1"/>
103 </para>
104
105 <bridgehead renderas="sect4">Optional</bridgehead>
106 <para role="optional">
107 <ulink url="http://ftp.gnu.org/gnu/autogen/">autogen</ulink>,
108 <xref linkend="gtk-doc"/>,
109<!-- <xref linkend="guile"/>,-->
110 <xref linkend="libidn"/>,
111 <xref linkend="p11-kit"/>,
112 <ulink url="http://sourceforge.net/projects/trousers/files/trousers/">Trousers</ulink> (Trusted Platform Module support),
113 <xref linkend="unbound"/> (to build the DANE library), and
114 <xref linkend="valgrind"/> (used during the test suite)
115 </para>
116
117 <note><para>
118 Note that if you do not install <xref linkend="libtasn1"/>, an older
119 version shipped in the <application>GnuTLS</application> tarball will be
120 used instead.
121 </para></note>
122
123 <para condition="html" role="usernotes">User Notes:
124 <ulink url="&blfs-wiki;/gnutls"/>
125 </para>
126 </sect2>
127
128 <sect2 role="installation">
129 <title>Installation of GnuTLS</title>
130
131 <para>
132 Install <application>GnuTLS</application> by running the
133 following commands:
134 </para>
135
136<screen><userinput>./configure --prefix=/usr \
137 --disable-guile \
138 --with-default-trust-store-file=/etc/ssl/ca-bundle.crt &amp;&amp;
139make</userinput></screen>
140
141 <para>
142 To test the results, issue: <command>make -k check</command>. Tests may
143 fail for unknown reasons.
144 </para>
145
146 <para>
147 Now, as the <systemitem class="username">root</systemitem>
148 user:
149 </para>
150
151<screen role="root"><userinput>make install</userinput></screen>
152
153 <para>
154 If you did not pass the <option>--enable-gtk-doc</option> parameter
155 to the <command>configure</command> script, you can install the API documentation
156 to the <filename class="directory">/usr/share/gtk-doc/html/gnutls</filename>
157 directory using the following command as the
158 <systemitem class="username">root</systemitem> user:
159 </para>
160
161<screen role="root"><userinput>make -C doc/reference install-data-local</userinput></screen>
162
163 </sect2>
164
165 <sect2 role="commands">
166 <title>Command Explanations</title>
167
168 <para>
169 <parameter>--disable-guile</parameter>:
170 Current version cannot be built with <xref linkend="guile"/>.
171 </para>
172
173 <para>
174 <parameter>--with-default-trust-store-file=/etc/ssl/ca-bundle.crt</parameter>:
175 This switch tells <command>configure</command> where to find the
176 CA Certificates.
177 </para>
178
179 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
180 href="../../xincludes/gtk-doc-rebuild.xml"/>
181
182 </sect2>
183
184 <sect2 role="content">
185 <title>Contents</title>
186
187 <segmentedlist>
188 <segtitle>Installed Programs</segtitle>
189 <segtitle>Installed Libraries</segtitle>
190 <segtitle>Installed Directories</segtitle>
191
192 <seglistitem>
193 <seg>
194 certtool, crywrap, danetool, gnutls-cli, gnutls-cli-debug,
195 gnutls-serv, ocsptool, p11tool, psktool and srptool
196 </seg>
197 <seg>
198 libgnutls.so, libgnutls-dane.so, libgnutls-openssl.so,
199 and libgnutlsxx.so
200<!-- and /usr/lib/guile/2.0/guile-gnutls-v-2.so-->
201 </seg>
202 <seg>
203 /usr/include/gnutls and
204 /usr/share/gtk-doc/html/gnutls
205<!-- and /usr/share/guile/site/gnutls-->
206 </seg>
207 </seglistitem>
208 </segmentedlist>
209
210 <variablelist>
211 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
212 <?dbfo list-presentation="list"?>
213 <?dbhtml list-presentation="table"?>
214
215 <varlistentry id="certtool">
216 <term><command>certtool</command></term>
217 <listitem>
218 <para>
219 is used to generate X.509 certificates, certificate requests,
220 and private keys.
221 </para>
222 <indexterm zone="gnutls certtool">
223 <primary sortas="b-certtool">certtool</primary>
224 </indexterm>
225 </listitem>
226 </varlistentry>
227
228 <varlistentry id="crywrap">
229 <term><command>crywrap</command></term>
230 <listitem>
231 <para>
232 is a simple wrapper that waits for TLS/SSL connections,
233 and proxies them to an unencrypted location. Only installed if
234 <xref linkend="libidn"/> is present.
235 </para>
236 <indexterm zone="gnutls crywrap">
237 <primary sortas="b-crywrap">crywrap</primary>
238 </indexterm>
239 </listitem>
240 </varlistentry>
241
242 <varlistentry id="danetool">
243 <term><command>danetool</command></term>
244 <listitem>
245 <para>
246 is a tool used to generate and check DNS resource records
247 for the DANE protocol.
248 </para>
249 <indexterm zone="gnutls danetool">
250 <primary sortas="b-danetool">danetool</primary>
251 </indexterm>
252 </listitem>
253 </varlistentry>
254
255 <varlistentry id="gnutls-cli">
256 <term><command>gnutls-cli</command></term>
257 <listitem>
258 <para>
259 is a simple client program to set up a TLS connection to some
260 other computer.
261 </para>
262 <indexterm zone="gnutls gnutls-cli">
263 <primary sortas="b-gnutls-cli">gnutls-cli</primary>
264 </indexterm>
265 </listitem>
266 </varlistentry>
267
268 <varlistentry id="gnutls-cli-debug">
269 <term><command>gnutls-cli-debug</command></term>
270 <listitem>
271 <para>
272 is a simple client program to set up a TLS connection to some
273 other computer and produces very verbose progress results.
274 </para>
275 <indexterm zone="gnutls gnutls-cli-debug">
276 <primary sortas="b-gnutls-cli-debug">gnutls-cli-debug</primary>
277 </indexterm>
278 </listitem>
279 </varlistentry>
280
281 <varlistentry id="gnutls-serv">
282 <term><command>gnutls-serv</command></term>
283 <listitem>
284 <para>
285 is a simple server program that listens to incoming TLS
286 connections.
287 </para>
288 <indexterm zone="gnutls gnutls-serv">
289 <primary sortas="b-gnutls-serv">gnutls-serv</primary>
290 </indexterm>
291 </listitem>
292 </varlistentry>
293
294 <varlistentry id="ocsptool">
295 <term><command>ocsptool</command></term>
296 <listitem>
297 <para>
298 is a program that can parse and print information about OCSP
299 requests/responses, generate requests and verify responses.
300 </para>
301 <indexterm zone="gnutls ocsptool">
302 <primary sortas="b-ocsptool">ocsptool</primary>
303 </indexterm>
304 </listitem>
305 </varlistentry>
306
307 <varlistentry id="p11tool">
308 <term><command>p11tool</command></term>
309 <listitem>
310 <para>
311 is a program that allows handling data from PKCS #11 smart cards
312 and security modules.
313 </para>
314 <indexterm zone="gnutls p11tool">
315 <primary sortas="b-p11tool">p11tool</primary>
316 </indexterm>
317 </listitem>
318 </varlistentry>
319
320 <varlistentry id="psktool">
321 <term><command>psktool</command></term>
322 <listitem>
323 <para>
324 is a simple program that generates random keys for use with TLS-PSK.
325 </para>
326 <indexterm zone="gnutls psktool">
327 <primary sortas="b-psktool">psktool</primary>
328 </indexterm>
329 </listitem>
330 </varlistentry>
331
332 <varlistentry id="srptool">
333 <term><command>srptool</command></term>
334 <listitem>
335 <para>
336 is a simple program that emulates the programs in the Stanford
337 SRP (Secure Remote Password) libraries using GnuTLS.
338 </para>
339 <indexterm zone="gnutls srptool">
340 <primary sortas="b-srptool">srptool</primary>
341 </indexterm>
342 </listitem>
343 </varlistentry>
344
345 <varlistentry id="libgnutls">
346 <term><filename class="libraryfile">libgnutls.so</filename></term>
347 <listitem>
348 <para>
349 contains the core API functions and X.509 certificate API functions.
350 </para>
351 <indexterm zone="gnutls libgnutls">
352 <primary sortas="c-libgnutls">libgnutls.so</primary>
353 </indexterm>
354 </listitem>
355 </varlistentry>
356
357 </variablelist>
358
359 </sect2>
360
361</sect1>
Note: See TracBrowser for help on using the repository browser.