GnuTLS is a project that aims to develop a library which provides a secure layer, over a reliable transport layer.
Currently this library implements the proposed standards by the IETF's TLS working group.
Here are some key features of "GnuTLS":
· Support for TLS 1.1, TLS 1.0 and SSL 3.0 protocols. (Since SSL 2.0 is insecure it is not supported.)
· Support for TLS extensions, including server name and max record size.
· Support for authentication using the SRP protocol.
· Support for authentication using both X.509 certificates and OpenPGP keys.
· Support for TLS Pre-Shared-Keys (PSK) and Inner Application (TLS/IA) extensions
· Support for X.509 and OpenPGP certificate handling.
· Supports all the strong encryption algorithms.
· Supports compression.
· Runs on most Unix platforms.
· GPL compatible license, unlike OpenSSL.
What's New in This Release: [ read full changelog ]
· This is a bugfix release that backports features from the new stable branch.
· The PKCS #11 back-end was replaced by p11-kit.
· There are compatibility fixes with libgcrypt 1.5.0, better handling of incomplete writes with writev(), strict verification of the order of certificate lists, and fixes in certificate request generation.