newsGnuTLS - News: GnuTLS 3.0.24

 
 
Latest News
Atom feed moved posted by nmav, Sat 10 Nov 2012 10:25:15 PM UTC - 0 replies
GnuTLS 3.1.4 posted by nmav, Sat 10 Nov 2012 12:08:00 AM UTC - 0 replies
GnuTLS 3.0.26 posted by nmav, Thu 08 Nov 2012 11:15:07 PM UTC - 0 replies
GnuTLS 2.12.21 posted by nmav, Thu 08 Nov 2012 10:58:49 PM UTC - 0 replies
GnuTLS 3.1.3 posted by nmav, Fri 12 Oct 2012 05:24:47 PM UTC - 0 replies
[Submit News]
[65 news in archive]

GnuTLS 3.0.24

Item posted by Nikos Mavrogiannopoulos <nmav> on Wed 26 Sep 2012 06:47:05 PM UTC.

Hello,
I've just released gnutls 3.0.24. This is a bug-fix release on the old stable branch.

  • Version 3.0.24 (released 2012-09-26)
    • libgnutls: The %COMPAT keyword, if specified, will tolerate

key usage violation errors (they are far too common to ignore).

    • libgnutls: Corrected bug in OpenPGP subpacket encoding.
    • libgnutls: Added X.509 certificate verification flag

GNUTLS_VERIFY_ALLOW_UNSORTED_CHAIN. This flag allows the verification of unsorted certificate chains and is enabled by default for TLS certificate verification (if gnutls_certificate_set_verify_flags() does not override it).

    • libgnutls: Correctly restore gnutls_record_recv() in DTLS mode

if interrupted during the retrasmition of handshake data.

    • libgnutls: Added GNUTLS_STATELESS_COMPRESSION flag to gnutls_init(), which provides a tool to counter compression-related attacks where parts of the data are controlled by the attacker and are placed in separate records (use with care - do not use compression if not sure).
    • libgnutls: Depends on libtasn1 2.14 or later.
    • API and ABI modifications:

No changes since last version.

Getting the Software
====================

GnuTLS may be downloaded from one of the GNU mirror sites or directly
From <ftp://ftp.gnu.org/gnu/gnutls/>. The list of GNU mirrors can be
found at <http://www.gnu.org/prep/ftp.html> and a list of GnuTLS mirrors
can be found at <http://www.gnu.org/software/gnutls/download.html>.

Here are the XZ compressed sources:

ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.xz
http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.xz
ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.24.tar.xz

Here are the LZIP compressed sources:

ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.lz
http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.lz
ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.24.tar.lz

Here are OpenPGP detached signatures signed using key 0x96865171:

ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.xz.sig
http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.xz.sig
ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.24.tar.xz.sig

ftp://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.lz.sig
http://ftp.gnu.org/gnu/gnutls/gnutls-3.0.24.tar.lz.sig
ftp://ftp.gnutls.org/pub/gnutls/gnutls-3.0.24.tar.lz.sig

Note that it has been signed with my openpgp key:
pub 3104R/96865171 2008-05-04 [expires: 2028-04-29]
uid Nikos Mavrogiannopoulos <nmav <at> gnutls.org>
uid Nikos Mavrogiannopoulos <n.mavrogiannopoulos <at>
gmail.com>
sub 2048R/9013B842 2008-05-04 [expires: 2018-05-02]
sub 2048R/1404A91D 2008-05-04 [expires: 2018-05-02]

regards,
Nikos

Comments:

No messages in GnuTLS 3.0.24

 

Back to the top


Powered by Savane 3.1-cleanup