# security/gnutls - The NetBSD Packages Collection

Transport Layer Security library

    GnuTLS is a portable ANSI C based library which implements the TLS 1.0 and SSL
    3.0 protocols. The library does not include any patented algorithms and is
    available under the GNU Lesser GPL license.

    Important features of the GnuTLS library include:
    - Thread safety
    - Support for both TLS 1.0 and SSL 3.0 protocols
    - Support for both X.509 and OpenPGP certificates
    - Support for basic parsing and verification of certificates
    - Support for SRP for TLS authentication
    - Support for TLS Extension mechanism
    - Support for TLS Compression Methods

    Additionally GnuTLS provides an emulation API for the widely used OpenSSL
    library, to ease integration with existing applications.

- Source version: `gnutls-3.8.13nb1`
- Maintainer: pkgsrc-users AT NetBSD.org
- Website: https://www.gnutls.org/
- License: gnu-gpl-v3
- Package history: cvs, hg, git

## Build dependencies

devel/libtool-base pkgtools/mktools shells/bash devel/gmake textproc/gsed lang/perl5 devel/pkgconf pkgtools/cwrappers

## Runtime dependencies

security/mozilla-rootcerts devel/gmp devel/gmp devel/gmp security/libtasn1 security/libtasn1 textproc/libunistring security/nettle security/nettle security/p11-kit security/p11-kit security/p11-kit devel/gmp security/libtasn1 textproc/libunistring security/nettle security/p11-kit

## Binary packages

OS | Architecture | Version
--- | --- | ---
NetBSD 10.0 | aarch64 | gnutls-3.8.13.tgz
NetBSD 10.0 | aarch64 | gnutls-3.8.11nb1.tgz
NetBSD 10.0 | aarch64eb | gnutls-3.8.10.tgz
NetBSD 10.0 | alpha | gnutls-3.8.10.tgz
NetBSD 10.0 | earmv6hf | gnutls-3.8.13.tgz
NetBSD 10.0 | earmv6hf | gnutls-3.8.11nb1.tgz
NetBSD 10.0 | earmv7hf | gnutls-3.8.13.tgz
NetBSD 10.0 | earmv7hf | gnutls-3.8.11nb1.tgz
NetBSD 10.0 | i386 | gnutls-3.8.13.tgz
NetBSD 10.0 | i386 | gnutls-3.8.11nb1.tgz
NetBSD 10.0 | powerpc | gnutls-3.8.10.tgz
NetBSD 10.0 | powerpc | gnutls-3.8.11nb1.tgz
NetBSD 10.0 | powerpc | gnutls-3.8.12.tgz
NetBSD 10.0 | powerpc | gnutls-3.8.13.tgz
NetBSD 10.0 | sparc64 | gnutls-3.8.7.1.tgz
NetBSD 10.0 | sparc64 | gnutls-3.8.12.tgz
NetBSD 10.0 | x86_64 | gnutls-3.8.13.tgz
NetBSD 10.0 | x86_64 | gnutls-3.8.11nb1.tgz
NetBSD 11.0 | aarch64 | gnutls-3.8.13.tgz
NetBSD 11.0 | aarch64 | gnutls-3.8.11nb1.tgz
NetBSD 11.0 | aarch64eb | gnutls-3.8.12.tgz
NetBSD 11.0 | aarch64eb | gnutls-3.8.13.tgz
NetBSD 11.0 | aarch64eb | gnutls-3.8.13nb1.tgz
NetBSD 11.0 | alpha | gnutls-3.8.13nb1.tgz
NetBSD 11.0 | earmv4 | gnutls-3.8.13nb1.tgz
NetBSD 11.0 | earmv6hf | gnutls-3.8.13.tgz
NetBSD 11.0 | earmv6hf | gnutls-3.8.11nb1.tgz
NetBSD 11.0 | earmv7hf | gnutls-3.8.11nb1.tgz
NetBSD 11.0 | earmv7hf | gnutls-3.8.13.tgz
NetBSD 11.0 | i386 | gnutls-3.8.13.tgz
NetBSD 11.0 | i386 | gnutls-3.8.11nb1.tgz
NetBSD 11.0 | m68k | gnutls-3.8.13.tgz
NetBSD 11.0 | m68k | gnutls-3.8.13nb1.tgz
NetBSD 11.0 | mips64eb | gnutls-3.8.11nb1.tgz
NetBSD 11.0 | powerpc | gnutls-3.8.12.tgz
NetBSD 11.0 | powerpc | gnutls-3.8.13.tgz
NetBSD 11.0 | riscv64 | gnutls-3.8.11nb1.tgz
NetBSD 11.0 | riscv64 | gnutls-3.8.12.tgz
NetBSD 11.0 | riscv64 | gnutls-3.8.13nb1.tgz
NetBSD 11.0 | sparc64 | gnutls-3.8.13nb1.tgz
NetBSD 11.0 | x86_64 | gnutls-3.8.13.tgz
NetBSD 11.0 | x86_64 | gnutls-3.8.11nb1.tgz
NetBSD 9.0 | aarch64 | gnutls-3.8.13.tgz
NetBSD 9.0 | aarch64 | gnutls-3.8.11nb1.tgz
NetBSD 9.0 | earmv6hf | gnutls-3.8.13.tgz
NetBSD 9.0 | earmv6hf | gnutls-3.8.11nb1.tgz
NetBSD 9.0 | earmv7hf | gnutls-3.8.13.tgz
NetBSD 9.0 | earmv7hf | gnutls-3.8.11nb1.tgz
NetBSD 9.0 | i386 | gnutls-3.8.13.tgz
NetBSD 9.0 | powerpc | gnutls-3.8.10.tgz
NetBSD 9.0 | x86_64 | gnutls-3.8.13.tgz

Binary packages can be installed with the high-level tool pkgin (which can be installed with pkg_add) or pkg_add(1) (installed by default). The NetBSD packages collection is also designed to permit easy installation from source.

## Available build options

brotli
  Enable support for Google's Brotli compression.
dane
  Enable DANE support.
pkcs11
  Use certificate-on-a-stick (or card) support.
zstd
  Enable Zstandard (de)compression support.

## Known vulnerabilities

(no vulnerabilities known)

The pkg_admin audit command locates any installed package which has been mentioned in security advisories as having vulnerabilities.

Please note the vulnerabilities database might not be fully accurate, and not every bug is exploitable with every configuration.

Problem reports, updates or suggestions for this package should be reported with send-pr.