GnuTLS 1.4.0

[Simon Josefsson]

I am happy to announce GnuTLS 1.4.0, the first stable release of what
used to be the 1.3.x development branch.  We recommend everyone to
upgrade to this version.

GnuTLS is a modern C library that implement the standard network
security protocol Transport Layer Security (TLS), for use by network
applications.

Noteworthy improvements over the 1.2.x branch:

** Support for TLS Inner application (TLS/IA).  This is per
   draft-funk-tls-inner-application-extension-01, and is compatible
   with the recent -02 version too.  The TLS/IA API is still
   experimental.

** Support for TLS Pre-Shared Key (TLS-PSK) ciphersuites have been added.

** New APIs to access the TLS Pseudo-Random-Function (PRF) and the
   client and server random fields in a session.  This is primarily
   intended for when GnuTLS is used as a component in other
   authentication protocols, such as the EAP mechanism PEAP and TTLS.

** The session resumption data are now system independent.

** GnuTLS is now easier to port to Windows through mingw32.

** Error messages are now translated using GNU Gettext.

** Documentation improvements, including more discussion of the GnuTLS
   internals.

** New function to set a X.509 private key and certificate pairs,
   and/or CRLs, from an PKCS#12 file.

** Build improvements on many platforms, including 64-bit fixes.

...and the general set of cleanups and improvements.

Improving GnuTLS is costly, but you can help!  We are looking for
organizations that find GnuTLS useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, or donate
money or equipment.

Commercial support contracts for GnuTLS are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a
Stockholm based privately held company, is currently funding GnuTLS
maintenance.  We are always looking for interesting development
projects.  See http://josefsson.org/ for more details.

If you need help to use GnuTLS, or want to help others, you are
invited to join our help-gnutls mailing list, see:
<http://lists.gnu.org/mailman/listinfo/help-gnutls>.

The project page of the library is available at:
  http://www.gnutls.org/
  http://www.gnu.org/software/gnutls/
  http://josefsson.org/gnutls/ (updated fastest)

Here are the compressed sources (3.2MB):
  http://josefsson.org/gnutls/releases/gnutls-1.4.0.tar.bz2
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.4.0.tar.bz2

Here are GPG detached signatures signed using key 0xB565716F:
  http://josefsson.org/gnutls/releases/gnutls-1.4.0.tar.bz2.sig
  ftp://ftp.gnutls.org/pub/gnutls/gnutls-1.4.0.tar.bz2.sig

The software is cryptographically signed by the author using an
OpenPGP key identified by the following information:

pub   1280R/B565716F 2002-05-05 [expires: 2006-08-14]
      Key fingerprint = 0424 D4EE 81A0 E3D1 19C6  F835 EDA2 1E94 B565 716F
uid                  Simon Josefsson <address@hidden>
uid                  Simon Josefsson <address@hidden>
sub   1280R/4D5D40AE 2002-05-05 [expires: 2006-08-14]
sub   1024R/09CC4670 2006-03-18 [expires: 2007-04-22]
sub   1024R/AABB1F7B 2006-03-18 [expires: 2007-04-22]
sub   1024R/A14C401A 2006-03-18 [expires: 2007-04-22]

The key is available from:
  http://josefsson.org/key.txt
  dns:b565716f.josefsson.org?TYPE=CERT

Here are the SHA-1 and SHA-224 checksums:

71c2df8072796592bb20910f3554923b4178b352  gnutls-1.4.0.tar.bz2
bcad99905bd6d3865282518f6d8293ebfba4f288  gnutls-1.4.0.tar.bz2.sig

8d1e4e94730f864ecfc0b71b87ee30a9b7bf5bedae894a7afe4e7549  gnutls-1.4.0.tar.bz2
5a0d767465a45fe24ba662b85d5d4c9b163629ecef46aa6393b9ab2f  
gnutls-1.4.0.tar.bz2.sig

Enjoy,
Nikos and Simon

pgp1rSYh4446t.pgp
Description: PGP signature