Simon Josefsson simon at
Mon Dec 17 12:27:29 CET 2007

"Alon Bar-Lev" <alon.barlev at> writes:

> We have this also:

See the release notes:

 * Change from GPLv2 to GPLv3 for command-line tools, libgnutls-extra,
 etc.  Notice that liblzo2 2.02 is licensed under GPLv2 only.  Earlier
 versions, such as 2.01 which is included with GnuTLS, is available under
 GPLv2 or later.  If this incompatibility causes problems, we recommend
 you to disable LZO using --without-lzo.  LZO compression is not a
 standard TLS compression algorithm, so the impact should be minimal.

Btw, I just talked with Markus and he were going to release a new
version of liblzo under GPLv2+GPLv3 early next year.

Still, I'm not sure if it makes sense for GnuTLS to enable LZO
compression by default any more.  It is not a standard TLS compression
algorithm.  What do people think?  It would also be interesting to
compare it with LZMA, which has gained some popularity lately:

Btw, liblzo* has rather few reverse dependencies on Debian, so except
for gnutls liblzo isn't that widely used.  Dropping it might save space
on most installation.

I suggest that we disable LZO by default in the next releases unless
someone protests.  It would still be a supported feature though.


More information about the Gnutls-devel mailing list