The GNU Transport Layer Security Library

Edit Package gnutls

The GnuTLS project aims to develop a library that provides a secure
layer over a reliable transport layer. Currently the GnuTLS library
implements the proposed standards of the IETF's TLS working group.

Refresh
Refresh
Source Files
Filename Size Changed
baselibs.conf 0000000223 223 Bytes
gnutls-3.5.11-skip-trust-store-tests.patch 0000001002 1002 Bytes
gnutls-3.8.0.tar.xz 0006378480 6.08 MB
gnutls-3.8.0.tar.xz.sig 0000000684 684 Bytes
gnutls-FIPS-140-3-references.patch 0000065113 63.6 KB
gnutls-FIPS-PCT-DH.patch 0000001746 1.71 KB
gnutls-FIPS-PCT-ECDH.patch 0000005260 5.14 KB
gnutls-FIPS-TLS_KDF_selftest.patch 0000001151 1.12 KB
gnutls-FIPS-jitterentropy.patch 0000007528 7.35 KB
gnutls-disable-flaky-test-dtls-resume.patch 0000000450 450 Bytes
gnutls.changes 0000204526 200 KB
gnutls.keyring 0000026256 25.6 KB
gnutls.rpmlintrc 0000000065 65 Bytes
gnutls.spec 0000012752 12.5 KB
Latest Revision
Marco Strigl's avatar Marco Strigl (mstrigl) committed (revision 2)
- Temporarily disable GNULIB's year2038 support for 64bit time_t
  by using the --disable-year2038 flag. This omits support for
  timestamps past the year 2038:
  * Fixes the public API on 32-bit architectures avoiding to
    change the size of time_t as it cannot be changed without
    breaking the ABI compatibility.
  * Upstream issue: https://gitlab.com/gnutls/gnutls/-/issues/1466

- Update to 3.8.0: [bsc#1205763, bsc#1209627]
  * libgnutls: Fix a Bleichenbacher oracle in the TLS RSA key
    exchange. Reported by Hubert Kario (#1050). Fix developed by
    Alexander Sosedkin. [GNUTLS-SA-2020-07-14, CVSS: medium]
    [CVE-2023-0361]
  * libgnutls: C++ library is now header only. All definitions
    from gnutlsxx.c have been moved into gnutlsxx.h. Users of the
    C++ interface have two options:
    1. include gnutlsxx.h in their application and link against
       the C library. (default)
    2. include gnutlsxx.h in their application, compile with
       GNUTLS_GNUTLSXX_NO_HEADERONLY macro defined and link
       against the C++ library.
  * libgnutls: GNUTLS_NO_STATUS_REQUEST flag and %NO_STATUS_REQUEST
    priority modifier have been added to allow disabling of the
    status_request TLS extension in the client side.
  * libgnutls: TLS heartbeat is disabled by default.
    The heartbeat extension in TLS (RFC 6520) is not widely used
    given other implementations dropped support for it. To enable
    back support for it, supply --enable-heartbeat-support to
    configure script.
  * libgnutls: SRP authentication is now disabled by default.
Comments 0
openSUSE Build Service is sponsored by