source: postlfs/security/gnutls.xml@ fa668ec

10.0 10.1 11.0 7.10 7.6 7.7 7.8 7.9 8.0 8.1 8.2 8.3 8.4 9.0 9.1 basic bdubbs/svn elogind ken/refactor-virt krejzi/svn lazarus nosym perl-modules qt5new trunk upgradedb xry111/git-date xry111/git-date-for-trunk xry111/git-date-test
Last change on this file since fa668ec was fa668ec, checked in by Fernando de Oliveira <fernando@…>, 7 years ago

Cdrdao-1.2.3: remove instructions for gcdmaster build. Thanks to Christopher G, from systemd branch.
Brasero-3.10.0: fix cdrtools link. Thanks to Christopher G, from systemd branch.
Update to gnutls-3.3.7.
Update to libfm-1.2.2.1.
Update to grilo-0.2.11.
Update to grilo-plugins-0.2.13.
Minor fixes to libtasn1-4.1 and Gvfs-1.20.3 (reordered externa/internal optional dependencies, for the latter).

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@14091 af4574ff-66df-0310-9fd7-8a98e5e911e0

  • Property mode set to 100644
File size: 11.2 KB
Line 
1<?xml version="1.0" encoding="ISO-8859-1"?>
2<!DOCTYPE sect1 PUBLIC "-//OASIS//DTD DocBook XML V4.5//EN"
3 "http://www.oasis-open.org/docbook/xml/4.5/docbookx.dtd" [
4 <!ENTITY % general-entities SYSTEM "../../general.ent">
5 %general-entities;
6
7 <!ENTITY gnutls-download-http " ">
8 <!ENTITY gnutls-download-ftp "ftp://ftp.gnutls.org/gcrypt/gnutls/v3.3/gnutls-&gnutls-version;.tar.xz">
9 <!ENTITY gnutls-md5sum "a7a73cfa883cd106d70b15300552a5b5">
10 <!ENTITY gnutls-size "5.8 MB">
11 <!ENTITY gnutls-buildsize "104 MB (additional 8 MB for the tests)">
12 <!ENTITY gnutls-time "0.9 SBU (additional 1.8 SBU for the tests)">
13]>
14
15<sect1 id="gnutls" xreflabel="GnuTLS-&gnutls-version;">
16 <?dbhtml filename="gnutls.html"?>
17
18 <sect1info>
19 <othername>$LastChangedBy$</othername>
20 <date>$Date$</date>
21 </sect1info>
22
23 <title>GnuTLS-&gnutls-version;</title>
24
25 <indexterm zone="gnutls">
26 <primary sortas="a-GnuTLS">GnuTLS</primary>
27 </indexterm>
28
29 <sect2 role="package">
30 <title>Introduction to GnuTLS</title>
31
32 <para>
33 The <application>GnuTLS</application> package contains libraries and
34 userspace tools which provide a secure layer over a reliable transport
35 layer. Currently the <application>GnuTLS</application> library implements
36 the proposed standards by the IETF's TLS working group. Quoting from the
37 TLS protocol specification:
38 </para>
39
40 <para>
41 <quote>The TLS protocol provides communications privacy over the
42 Internet. The protocol allows client/server applications to communicate in
43 a way that is designed to prevent eavesdropping, tampering, or message
44 forgery.</quote>
45 </para>
46
47 <para>
48 <application>GnuTLS</application> provides support for TLS 1.1, TLS
49 1.0 and SSL 3.0 protocols, TLS extensions, including server name and max
50 record size. Additionally, the library supports authentication using the
51 SRP protocol, X.509 certificates and OpenPGP keys, along with support for
52 the TLS Pre-Shared-Keys (PSK) extension, the Inner Application (TLS/IA)
53 extension and X.509 and OpenPGP certificate handling.
54 </para>
55
56 &lfs75_checked;
57
58 <bridgehead renderas="sect3">Package Information</bridgehead>
59 <itemizedlist spacing="compact">
60 <listitem>
61 <para>
62 Download (HTTP): <ulink url="&gnutls-download-http;"/>
63 </para>
64 </listitem>
65 <listitem>
66 <para>
67 Download (FTP): <ulink url="&gnutls-download-ftp;"/>
68 </para>
69 </listitem>
70 <listitem>
71 <para>
72 Download MD5 sum: &gnutls-md5sum;
73 </para>
74 </listitem>
75 <listitem>
76 <para>
77 Download size: &gnutls-size;
78 </para>
79 </listitem>
80 <listitem>
81 <para>
82 Estimated disk space required: &gnutls-buildsize;
83 </para>
84 </listitem>
85 <listitem>
86 <para>
87 Estimated build time: &gnutls-time;
88 </para>
89 </listitem>
90 </itemizedlist>
91
92 <bridgehead renderas="sect3">GnuTLS Dependencies</bridgehead>
93
94 <bridgehead renderas="sect4">Required</bridgehead>
95 <para role="required">
96 <xref linkend="nettle"/>
97 </para>
98
99 <bridgehead renderas="sect4">Recommended</bridgehead>
100 <para role="recommended">
101 <xref linkend="cacerts"/> and
102 <xref linkend="libtasn1"/>
103 </para>
104
105 <bridgehead renderas="sect4">Optional</bridgehead>
106 <para role="optional">
107 <xref linkend="gtk-doc"/>,
108 <xref linkend="guile"/>,
109 <xref linkend="libidn"/>,
110 <xref linkend="p11-kit"/>,
111 <xref linkend="unbound"/> (to build the DANE library),
112 <xref linkend="valgrind"/> (used during the test suite),
113 <ulink url="http://ftp.gnu.org/gnu/autogen/">autogen</ulink>, and
114 <ulink url="http://sourceforge.net/projects/trousers/files/trousers/">Trousers</ulink> (Trusted Platform Module support)
115 </para>
116
117 <note><para>
118 Note that if you do not install <xref linkend="libtasn1"/>, an older
119 version shipped in the <application>GnuTLS</application> tarball will be
120 used instead.
121 </para></note>
122
123 <para condition="html" role="usernotes">User Notes:
124 <ulink url="&blfs-wiki;/gnutls"/>
125 </para>
126 </sect2>
127
128 <sect2 role="installation">
129 <title>Installation of GnuTLS</title>
130
131 <para>
132 Install <application>GnuTLS</application> by running the
133 following commands:
134 </para>
135
136<screen><userinput>./configure --prefix=/usr \
137 --with-default-trust-store-file=/etc/ssl/ca-bundle.crt &amp;&amp;
138make</userinput></screen>
139
140 <para>
141 To test the results, issue: <command>make check</command>.
142 </para>
143
144 <para>
145 Now, as the <systemitem class="username">root</systemitem>
146 user:
147 </para>
148
149<screen role="root"><userinput>make install</userinput></screen>
150
151 <para>
152 If you did not pass the <option>--enable-gtk-doc</option> parameter
153 to the <command>configure</command> script, you can install the API documentation
154 to the <filename class="directory">/usr/share/gtk-doc/html/gnutls</filename>
155 directory using the following command as the
156 <systemitem class="username">root</systemitem> user:
157 </para>
158
159<screen role="root"><userinput>make -C doc/reference install-data-local</userinput></screen>
160
161 </sect2>
162
163 <sect2 role="commands">
164 <title>Command Explanations</title>
165
166 <para>
167 <parameter>--with-default-trust-store-file=/etc/ssl/ca-bundle.crt</parameter>:
168 This switch tells <command>configure</command> where to find the
169 CA Certificates.
170 </para>
171
172 <xi:include xmlns:xi="http://www.w3.org/2001/XInclude"
173 href="../../xincludes/gtk-doc-rebuild.xml"/>
174
175 </sect2>
176
177 <sect2 role="content">
178 <title>Contents</title>
179
180 <segmentedlist>
181 <segtitle>Installed Programs</segtitle>
182 <segtitle>Installed Libraries</segtitle>
183 <segtitle>Installed Directories</segtitle>
184
185 <seglistitem>
186 <seg>
187 certtool, crywrap, danetool, gnutls-cli, gnutls-cli-debug,
188 gnutls-serv, ocsptool, p11tool, psktool, and srptool
189 </seg>
190 <seg>
191 libgnutls.so, libgnutls-dane.so,
192 libgnutls-openssl.so, libgnutlsxx.so, and
193 /usr/lib/guile/2.0/guile-gnutls-v-2.so
194 </seg>
195 <seg>
196 /usr/include/gnutls,
197 /usr/share/gtk-doc/html/gnutls, and
198 /usr/share/guile/site/gnutls
199 </seg>
200 </seglistitem>
201 </segmentedlist>
202
203 <variablelist>
204 <bridgehead renderas="sect3">Short Descriptions</bridgehead>
205 <?dbfo list-presentation="list"?>
206 <?dbhtml list-presentation="table"?>
207
208 <varlistentry id="certtool">
209 <term><command>certtool</command></term>
210 <listitem>
211 <para>
212 is used to generate X.509 certificates, certificate requests,
213 and private keys.
214 </para>
215 <indexterm zone="gnutls certtool">
216 <primary sortas="b-certtool">certtool</primary>
217 </indexterm>
218 </listitem>
219 </varlistentry>
220
221 <varlistentry id="crywrap">
222 <term><command>crywrap</command></term>
223 <listitem>
224 <para>
225 is a simple wrapper that waits for TLS/SSL connections,
226 and proxies them to an unencrypted location. Only installed if
227 <xref linkend="libidn"/> is present.
228 </para>
229 <indexterm zone="gnutls crywrap">
230 <primary sortas="b-crywrap">crywrap</primary>
231 </indexterm>
232 </listitem>
233 </varlistentry>
234
235 <varlistentry id="danetool">
236 <term><command>danetool</command></term>
237 <listitem>
238 <para>
239 is a tool used to generate and check DNS resource records
240 for the DANE protocol.
241 </para>
242 <indexterm zone="gnutls danetool">
243 <primary sortas="b-danetool">danetool</primary>
244 </indexterm>
245 </listitem>
246 </varlistentry>
247
248 <varlistentry id="gnutls-cli">
249 <term><command>gnutls-cli</command></term>
250 <listitem>
251 <para>
252 is a simple client program to set up a TLS connection to some
253 other computer.
254 </para>
255 <indexterm zone="gnutls gnutls-cli">
256 <primary sortas="b-gnutls-cli">gnutls-cli</primary>
257 </indexterm>
258 </listitem>
259 </varlistentry>
260
261 <varlistentry id="gnutls-cli-debug">
262 <term><command>gnutls-cli-debug</command></term>
263 <listitem>
264 <para>
265 is a simple client program to set up a TLS connection to some
266 other computer and produces very verbose progress results.
267 </para>
268 <indexterm zone="gnutls gnutls-cli-debug">
269 <primary sortas="b-gnutls-cli-debug">gnutls-cli-debug</primary>
270 </indexterm>
271 </listitem>
272 </varlistentry>
273
274 <varlistentry id="gnutls-serv">
275 <term><command>gnutls-serv</command></term>
276 <listitem>
277 <para>
278 is a simple server program that listens to incoming TLS
279 connections.
280 </para>
281 <indexterm zone="gnutls gnutls-serv">
282 <primary sortas="b-gnutls-serv">gnutls-serv</primary>
283 </indexterm>
284 </listitem>
285 </varlistentry>
286
287 <varlistentry id="ocsptool">
288 <term><command>ocsptool</command></term>
289 <listitem>
290 <para>
291 is a program that can parse and print information about OCSP
292 requests/responses, generate requests and verify responses.
293 </para>
294 <indexterm zone="gnutls ocsptool">
295 <primary sortas="b-ocsptool">ocsptool</primary>
296 </indexterm>
297 </listitem>
298 </varlistentry>
299
300 <varlistentry id="p11tool">
301 <term><command>p11tool</command></term>
302 <listitem>
303 <para>
304 is a program that allows handling data from PKCS #11 smart cards
305 and security modules.
306 </para>
307 <indexterm zone="gnutls p11tool">
308 <primary sortas="b-p11tool">p11tool</primary>
309 </indexterm>
310 </listitem>
311 </varlistentry>
312
313 <varlistentry id="psktool">
314 <term><command>psktool</command></term>
315 <listitem>
316 <para>
317 is a simple program that generates random keys for use with TLS-PSK.
318 </para>
319 <indexterm zone="gnutls psktool">
320 <primary sortas="b-psktool">psktool</primary>
321 </indexterm>
322 </listitem>
323 </varlistentry>
324
325 <varlistentry id="srptool">
326 <term><command>srptool</command></term>
327 <listitem>
328 <para>
329 is a simple program that emulates the programs in the Stanford
330 SRP (Secure Remote Password) libraries using GnuTLS.
331 </para>
332 <indexterm zone="gnutls srptool">
333 <primary sortas="b-srptool">srptool</primary>
334 </indexterm>
335 </listitem>
336 </varlistentry>
337
338 <varlistentry id="libgnutls">
339 <term><filename class="libraryfile">libgnutls.so</filename></term>
340 <listitem>
341 <para>
342 contains the core API functions and X.509 certificate API functions.
343 </para>
344 <indexterm zone="gnutls libgnutls">
345 <primary sortas="c-libgnutls">libgnutls.so</primary>
346 </indexterm>
347 </listitem>
348 </varlistentry>
349
350 </variablelist>
351
352 </sect2>
353
354</sect1>
Note: See TracBrowser for help on using the repository browser.