newsGnuTLS - News: gnutls 3.1.1

Latest News
Atom feed moved posted by nmav, Sat 10 Nov 2012 10:25:15 PM UTC - 0 replies
GnuTLS 3.1.4 posted by nmav, Sat 10 Nov 2012 12:08:00 AM UTC - 0 replies
GnuTLS 3.0.26 posted by nmav, Thu 08 Nov 2012 11:15:07 PM UTC - 0 replies
GnuTLS 2.12.21 posted by nmav, Thu 08 Nov 2012 10:58:49 PM UTC - 0 replies
GnuTLS 3.1.3 posted by nmav, Fri 12 Oct 2012 05:24:47 PM UTC - 0 replies
[Submit News]
[65 news in archive]

gnutls 3.1.1

Item posted by Nikos Mavrogiannopoulos <nmav> on Sun 02 Sep 2012 06:51:18 PM UTC.

I've just released gnutls 3.1.1. This release includes optimizations the elliptic curve subsystem and fixes several bugs in current stable branch.

  • Version 3.1.1 (released 2012-09-02)
    • gnutls-serv: Listens on IPv6. Patch by Bernhard R. Link.
    • certtool: Changes in password handling of certtool.

Ask password when required and only if the '--password' option is not given. If the '--password' option is given during key generation then assume the PKCS #8 file format, instead of ignoring the password.

    • tpmtool: No longer asks for key password in registered keys.
    • libgnutls: Elliptic curve code was optimized by Ilya Tumaykin.

wmNAF is now used for point multiplication and other optimizations. (the major part of the work was done during Google Summer of Code).

    • libgnutls: The default pull_timeout_function only uses select

instead of a combination of select() and recv() to prevent issues
when used in stream sockets in some systems.

    • libgnutls: Be tolerant in ECDSA signature violations (e.g. using SHA256 with a SECP384 curve instead of SHA-384), to interoperate with openssl.
    • libgnutls: Fixed DSA and ECDSA signature generation in smart

cards. Thanks to Andreas Schwier from for providing me with ECDSA capable smart cards.

    • API and ABI modifications:

gnutls_sign_algorithm_get: Added
gnutls_sign_get_hash_algorithm: Added
gnutls_sign_get_pk_algorithm: Added

Getting the Software

GnuTLS may be downloaded from one of the GNU mirror sites or directly From <>. The list of GNU mirrors can be found at <> and a list of GnuTLS mirrors can be found at <>.

Here are the XZ compressed sources:

Here are the LZIP compressed sources:

Here are OpenPGP detached signatures signed using key 0x96865171:

Note that it has been signed with my openpgp key:
pub 3104R/96865171 2008-05-04 [expires: 2028-04-29]
uid Nikos Mavrogiannopoulos <nmav <at>>
uid Nikos Mavrogiannopoulos <n.mavrogiannopoulos <at>>
sub 2048R/9013B842 2008-05-04 [expires: 2018-05-02]
sub 2048R/1404A91D 2008-05-04 [expires: 2018-05-02]


No messages in gnutls 3.1.1


Back to the top

Powered by Savane 3.4