newsGnuTLS - News: GnuTLS 3.1.4

Latest News
Atom feed moved posted by nmav, Sat 10 Nov 2012 10:25:15 PM UTC - 0 replies
GnuTLS 3.1.4 posted by nmav, Sat 10 Nov 2012 12:08:00 AM UTC - 0 replies
GnuTLS 3.0.26 posted by nmav, Thu 08 Nov 2012 11:15:07 PM UTC - 0 replies
GnuTLS 2.12.21 posted by nmav, Thu 08 Nov 2012 10:58:49 PM UTC - 0 replies
GnuTLS 3.1.3 posted by nmav, Fri 12 Oct 2012 05:24:47 PM UTC - 0 replies
[Submit News]
[65 news in archive]

GnuTLS 3.1.4

Item posted by Nikos Mavrogiannopoulos <nmav> on Sat 10 Nov 2012 12:08:00 AM UTC.

I've just released gnutls 3.1.4. This release includes initial support for the DTLS-SRTP protocol contributed by martin Storsjo updates on the new DANE library, and several simplifications on the existing API.

Version 3.1.4 (released 2012-11-10)

  • libgnutls: gnutls_certificate_verify_peers2() will set flags depending on the available revocation data validity.
  • libgnutls: Added gnutls_certificate_verification_status_print(), a function to print the verification status code in human readable text.
  • libgnutls: Added priority string %VERIFY_DISABLE_CRL_CHECKS.
  • libgnutls: Simplified certificate verification by adding gnutls_certificate_verify_peers3().
  • libgnutls: Added support for extension to establish keys for SRTP. Contributed by Martin Storsjo.
  • libgnutls: The X.509 verification functions check the key usage bits and pathlen constraints and on failure output GNUTLS_CERT_SIGNER_CONSTRAINTS_FAILURE.
  • libgnutls: gnutls_x509_crl_verify() includes the time checks.
  • libgnutls: Added verification flag GNUTLS_VERIFY_DO_NOT_ALLOW_UNSORTED_CHAIN and made GNUTLS_VERIFY_ALLOW_UNSORTED_CHAIN the default.
  • libgnutls: Always tolerate key usage violation errors from the side of the peer, but also notify via an audit message.
  • gnutls-cli: Added --local-dns option.
  • danetool: Corrected bug that prevented loading PEM files.
  • danetool: Added --check option to allow querying and verifying a site's DANE data.
  • libgnutls-dane: Added pkg-config file for the library.
  • API and ABI modifications:

gnutls_session_get_id2: Added
gnutls_sign_is_secure: Added
gnutls_certificate_verify_peers3: Added
gnutls_ocsp_status_request_is_checked: Added
gnutls_certificate_verification_status_print: Added
gnutls_srtp_set_profile: Added
gnutls_srtp_set_profile_direct: Added
gnutls_srtp_get_selected_profile: Added
gnutls_srtp_get_profile_name: Added
gnutls_srtp_get_profile_id: Added
gnutls_srtp_get_keys: Added
gnutls_srtp_get_mki: Added
gnutls_srtp_set_mki: Added
gnutls_srtp_profile_t: Added
dane_cert_type_name: Added
dane_match_type_name: Added
dane_cert_usage_name: Added
dane_verification_status_print: Added

Getting the Software

GnuTLS may be downloaded from one of the GNU mirror sites or directly
From <>. The list of GNU mirrors can be
found at <> and a list of GnuTLS mirrors
can be found at <>.

Here are the XZ compressed sources:

Here are the LZIP compressed sources:

Here are OpenPGP detached signatures signed using key 0x96865171:

Note that it has been signed with my openpgp key:
pub 3104R/96865171 2008-05-04 [expires: 2028-04-29]
uid Nikos Mavrogiannopoulos <nmav <at>>
uid Nikos Mavrogiannopoulos <n.mavrogiannopoulos <at>>
sub 2048R/9013B842 2008-05-04 [expires: 2018-05-02]
sub 2048R/1404A91D 2008-05-04 [expires: 2018-05-02]



No messages in GnuTLS 3.1.4


Back to the top

Powered by Savane 3.1-cleanup