GnuTLS 2.3.0

Simon Josefsson simon at
Tue Jan 8 10:49:50 CET 2008

The GnuTLS 2.3.x branch is NOT what you want for your stable system.  It
is intended for developers and experienced users.

News in this release:

* Version 2.3.0 (released 2008-01-08)

** LZO compression is now disabled by default.
The reason is that LZO compression is not standardized in TLS.  If you
wish to experiment with it, you will have to supply --with-lzo when
invoking ./configure.  The internal copy of minilzo is no longer
included with GnuTLS, so you will need to install liblzo or liblzo2 on
your system to have --with-lzo to be effective.

** More than one server name field is now sent to the server properly.
Thanks to mark.phillips at

** Fixes the post_client_hello_function(). The extensions are now parsed
in a callback friendly way.

** Fix for certificate selection in servers with certificate callbacks.

** Updated translations.

** Update gnulib files.

** API and ABI modifications:
No changes since last version.

The goals for the 2.3.x branch are tracked at:

More ideas are welcome, just create a new ticket.

Here are the compressed sources:

Improving GnuTLS is costly, but you can help!  We are looking for
organizations that find GnuTLS useful and wish to contribute back.
You can contribute by reporting bugs, improve the software, or donate
money or equipment.

Commercial support contracts for GnuTLS are available, and they help
finance continued maintenance.  Simon Josefsson Datakonsult, a
Stockholm based privately held company, is currently funding GnuTLS
maintenance.  We are always looking for interesting development
projects.  See for more details.


More information about the Gnutls-devel mailing list