source: postlfs/security/gnutls.xml@ f8d89d4

10.0 10.1 11.0 11.1 11.2 11.3 12.0 12.1 7.10 7.5 7.6 7.6-blfs 7.6-systemd 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind gnome kde5-13430 kde5-14269 kde5-14686 kea ken/TL2024 ken/inkscape-core-mods ken/tuningfonts krejzi/svn lazarus lxqt nosym perl-modules plabs/newcss plabs/python-mods python3.11 qt5new rahul/power-profiles-daemon renodr/vulkan-addition systemd-11177 systemd-13485 trunk upgradedb xry111/intltool xry111/llvm18 xry111/soup3 xry111/test-20220226 xry111/xf86-video-removal
Last change on this file since f8d89d4 was f8d89d4, checked in by Fernando de Oliveira <fernando@…>, 10 years ago

Update to gnutls-3.2.8.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@12424 af4574ff-66df-0310-9fd7-8a98e5e911e0
  • Property mode set to 100644
File size: 11.5 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnutls-download-http " ">
8 <!ENTITY gnutls-download-ftp "ftp://ftp.gnutls.org/gcrypt/gnutls/v3.2/gnutls-&gnutls-version;.tar.xz">
9 <!ENTITY gnutls-md5sum "a961705dbe0cbbc7220b6c2d2d9e0028">
10 <!ENTITY gnutls-size "4.9 MB">
11 <!ENTITY gnutls-buildsize "102 MB (additional 10 MB for the tests and
12 3 MB for the API documentation rebuild)">
13 <!ENTITY gnutls-time "0.9 SBU (additional 1.6 SBU for the tests and
14 0.2 SBU for the API documentation rebuild)">
15]>
16
17<sect1 id="gnutls" xreflabel="GnuTLS-&gnutls-version;">
18 <?dbhtml filename="gnutls.html"?>
19
20 <sect1info>
21 <othername>$LastChangedBy$</othername>
22 <date>$Date$</date>
23 </sect1info>
24
25 <title>GnuTLS-&gnutls-version;</title>
26
27 <indexterm zone="gnutls">
28 <primary sortas="a-GnuTLS">GnuTLS</primary>
29 </indexterm>
30
31 <sect2 role="package">
32 <title>Introduction to GnuTLS</title>
33
34 <para>
35 The <application>GnuTLS</application> package contains libraries and
36 userspace tools which provide a secure layer over a reliable transport
37 layer. Currently the <application>GnuTLS</application> library implements
38 the proposed standards by the IETF's TLS working group. Quoting from the
39 TLS protocol specification:
40 </para>
41
42 <para>
43 <quote>The TLS protocol provides communications privacy over the
44 Internet. The protocol allows client/server applications to communicate in
45 a way that is designed to prevent eavesdropping, tampering, or message
46 forgery.</quote>
47 </para>
48
49 <para>
50 <application>GnuTLS</application> provides support for TLS 1.1, TLS
51 1.0 and SSL 3.0 protocols, TLS extensions, including server name and max
52 record size. Additionally, the library supports authentication using the
53 SRP protocol, X.509 certificates and OpenPGP keys, along with support for
54 the TLS Pre-Shared-Keys (PSK) extension, the Inner Application (TLS/IA)
55 extension and X.509 and OpenPGP certificate handling.
56 </para>
57
58 &lfs74_checked;
59
60 <bridgehead renderas="sect3">Package Information</bridgehead>
61 <itemizedlist spacing="compact">
62 <listitem>
63 <para>
64 Download (HTTP): <ulink url="&gnutls-download-http;"/>
65 </para>
66 </listitem>
67 <listitem>
68 <para>
69 Download (FTP): <ulink url="&gnutls-download-ftp;"/>
70 </para>
71 </listitem>
72 <listitem>
73 <para>
74 Download MD5 sum: &gnutls-md5sum;
75 </para>
76 </listitem>
77 <listitem>
78 <para>
79 Download size: &gnutls-size;
80 </para>
81 </listitem>
82 <listitem>
83 <para>
84 Estimated disk space required: &gnutls-buildsize;
85 </para>
86 </listitem>
87 <listitem>
88 <para>
89 Estimated build time: &gnutls-time;
90 </para>
91 </listitem>
92 </itemizedlist>
93
94 <bridgehead renderas="sect3">GnuTLS Dependencies</bridgehead>
95
96 <bridgehead renderas="sect4">Required</bridgehead>
97 <para role="required">
98 <xref linkend="nettle"/>
99 </para>
100
101 <bridgehead renderas="sect4">Recommended</bridgehead>
102 <para role="recommended">
103 <xref linkend="cacerts"/> and
104 <xref linkend="libtasn1"/>
105 </para>
106
107 <bridgehead renderas="sect4">Optional</bridgehead>
108 <para role="optional">
109 <xref linkend="gtk-doc"/>,
110 <xref linkend="guile"/>,
111 <xref linkend="libidn"/>,
112 <xref linkend="p11-kit"/>,
113 <ulink url="http://sourceforge.net/projects/trousers/files/trousers/">Trousers</ulink> (Trusted Platform Module support),
114 <xref linkend="unbound"/> (to build the DANE library), and
115 <ulink url="http://valgrind.org/">Valgrind</ulink> (used during the test suite)
116 </para>
117
118 <note><para>
119 Note that if you do not install <xref linkend="libtasn1"/>, an older
120 version shipped in the <application>GnuTLS</application> tarball will be
121 used instead.
122 </para></note>
123
124 <para condition="html" role="usernotes">User Notes:
125 <ulink url="&blfs-wiki;/gnutls"/>
126 </para>
127 </sect2>
128
129 <sect2 role="installation">
130 <title>Installation of GnuTLS</title>
131
132 <para>
133 Install <application>GnuTLS</application> by running the
134 following commands:
135 </para>
136
137<screen><userinput>./configure --prefix=/usr \
138 --disable-static \
139 --with-default-trust-store-file=/etc/ssl/ca-bundle.crt &amp;&amp;
140make</userinput></screen>
141
142 <para>
143 To test the results, issue: <command>make check</command>.
144 </para>
145
146 <para>
147 Now, as the <systemitem class="username">root</systemitem>
148 user:
149 </para>
150
151<screen role="root"><userinput>make install</userinput></screen>
152
153 <para>
154 If you did not pass the <option>--enable-gtk-doc</option> parameter
155 to the <command>configure</command> script, you can install the API documentation
156 to the <filename class="directory">/usr/share/gtk-doc/html/gnutls</filename>
157 directory using the following command as the
158 <systemitem class="username">root</systemitem> user:
159 </para>
160
161<screen role="root"><userinput>make -C doc/reference install-data-local</userinput></screen>
162
163 </sect2>
164
165 <sect2 role="commands">
166 <title>Command Explanations</title>
167
168 <para>
169 <parameter>--with-default-trust-store-file=/etc/ssl/ca-bundle.crt</parameter>:
170 This switch tells <command>configure</command> where to find the
171 CA Certificates.
172 </para>
173
174 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
175 href="../../xincludes/static-libraries.xml"/>
176
177 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
178 href="../../xincludes/gtk-doc-rebuild.xml"/>
179
180 </sect2>
181
182 <sect2 role="content">
183 <title>Contents</title>
184
185 <segmentedlist>
186 <segtitle>Installed Programs</segtitle>
187 <segtitle>Installed Libraries</segtitle>
188 <segtitle>Installed Directories</segtitle>
189
190 <seglistitem>
191 <seg>
192 certtool, crywrap, danetool, gnutls-cli, gnutls-cli-debug,
193 gnutls-serv, ocsptool, p11tool, psktool and srptool
194 </seg>
195 <seg>
196 libgnutls.so, libgnutls-openssl.so, libgnutls-xssl.so, libgnutlsxx.so
197 and /usr/lib/guile/2.0/guile-gnutls-v-2.so (optional)
198 </seg>
199 <seg>
200 /usr/include/gnutls,
201 /usr/share/gtk-doc/html/gnutls and
202 /usr/share/guile/site/gnutls (optional)
203 </seg>
204 </seglistitem>
205 </segmentedlist>
206
207 <variablelist>
208 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
209 <?dbfo list-presentation="list"?>
210 <?dbhtml list-presentation="table"?>
211
212 <varlistentry id="certtool">
213 <term><command>certtool</command></term>
214 <listitem>
215 <para>
216 is used to generate X.509 certificates, certificate requests,
217 and private keys.
218 </para>
219 <indexterm zone="gnutls certtool">
220 <primary sortas="b-certtool">certtool</primary>
221 </indexterm>
222 </listitem>
223 </varlistentry>
224
225 <varlistentry id="crywrap">
226 <term><command>crywrap</command></term>
227 <listitem>
228 <para>
229 (optional) is a simple wrapper that waits for TLS/SSL connections,
230 and proxies them to an unencrypted location. Only installed if
231 <xref linkend="libidn"/> is present.
232 </para>
233 <indexterm zone="gnutls crywrap">
234 <primary sortas="b-crywrap">crywrap</primary>
235 </indexterm>
236 </listitem>
237 </varlistentry>
238
239 <varlistentry id="danetool">
240 <term><command>danetool</command></term>
241 <listitem>
242 <para>
243 is a tool used to generate and check DNS resource records
244 for the DANE protocol.
245 </para>
246 <indexterm zone="gnutls danetool">
247 <primary sortas="b-danetool">danetool</primary>
248 </indexterm>
249 </listitem>
250 </varlistentry>
251
252 <varlistentry id="gnutls-cli">
253 <term><command>gnutls-cli</command></term>
254 <listitem>
255 <para>
256 is a simple client program to set up a TLS connection to some
257 other computer.
258 </para>
259 <indexterm zone="gnutls gnutls-cli">
260 <primary sortas="b-gnutls-cli">gnutls-cli</primary>
261 </indexterm>
262 </listitem>
263 </varlistentry>
264
265 <varlistentry id="gnutls-cli-debug">
266 <term><command>gnutls-cli-debug</command></term>
267 <listitem>
268 <para>
269 is a simple client program to set up a TLS connection to some
270 other computer and produces very verbose progress results.
271 </para>
272 <indexterm zone="gnutls gnutls-cli-debug">
273 <primary sortas="b-gnutls-cli-debug">gnutls-cli-debug</primary>
274 </indexterm>
275 </listitem>
276 </varlistentry>
277
278 <varlistentry id="gnutls-serv">
279 <term><command>gnutls-serv</command></term>
280 <listitem>
281 <para>
282 is a simple server program that listens to incoming TLS
283 connections.
284 </para>
285 <indexterm zone="gnutls gnutls-serv">
286 <primary sortas="b-gnutls-serv">gnutls-serv</primary>
287 </indexterm>
288 </listitem>
289 </varlistentry>
290
291 <varlistentry id="ocsptool">
292 <term><command>ocsptool</command></term>
293 <listitem>
294 <para>
295 is a program that can parse and print information about OCSP
296 requests/responses, generate requests and verify responses.
297 </para>
298 <indexterm zone="gnutls ocsptool">
299 <primary sortas="b-ocsptool">ocsptool</primary>
300 </indexterm>
301 </listitem>
302 </varlistentry>
303
304 <varlistentry id="p11tool">
305 <term><command>p11tool</command></term>
306 <listitem>
307 <para>
308 is a program that allows handling data from PKCS #11 smart cards
309 and security modules.
310 </para>
311 <indexterm zone="gnutls p11tool">
312 <primary sortas="b-p11tool">p11tool</primary>
313 </indexterm>
314 </listitem>
315 </varlistentry>
316
317 <varlistentry id="psktool">
318 <term><command>psktool</command></term>
319 <listitem>
320 <para>
321 is a simple program that generates random keys for use with TLS-PSK.
322 </para>
323 <indexterm zone="gnutls psktool">
324 <primary sortas="b-psktool">psktool</primary>
325 </indexterm>
326 </listitem>
327 </varlistentry>
328
329 <varlistentry id="srptool">
330 <term><command>srptool</command></term>
331 <listitem>
332 <para>
333 is a simple program that emulates the programs in the Stanford
334 SRP (Secure Remote Password) libraries using GnuTLS.
335 </para>
336 <indexterm zone="gnutls srptool">
337 <primary sortas="b-srptool">srptool</primary>
338 </indexterm>
339 </listitem>
340 </varlistentry>
341
342 <varlistentry id="libgnutls">
343 <term><filename class="libraryfile">libgnutls.so</filename></term>
344 <listitem>
345 <para>
346 contains the core API functions and X.509 certificate API functions.
347 </para>
348 <indexterm zone="gnutls libgnutls">
349 <primary sortas="c-libgnutls">libgnutls.so</primary>
350 </indexterm>
351 </listitem>
352 </varlistentry>
353
354 </variablelist>
355
356 </sect2>
357
358</sect1>
Note: See TracBrowser for help on using the repository browser.