News for hackers. Stuff that matters.
Re:Urgent Upcoming OpenSSL release patches critical vulnerab... by woodruffw on Saturday October 29, 2022 @01:05AM (#33381148)
Is GnuTLS widely used? People bring it up, but I've never actually seen it in a codebase (and I deal with a lot of x509 + PKCS code). I've seen more wolfSSL and mbedTLS than GnuTLS.
Re:Urgent Upcoming OpenSSL release patches critical vulnerab... by SSLy on Saturday October 29, 2022 @01:38AM (#33381298)
widely? depends on your viewpoint, but there are quite few consumers (look at the right column) https://archlinux.org/packages/core/x86_64/gnutls/
Re:Urgent Upcoming OpenSSL release patches critical vulnerab... by shandor on Saturday October 29, 2022 @02:31AM (#33381545)
How is wolfSSL/SSH? I have come across them a couple of times, but not having anyone/anything ”famous” behind them when compared to GNUtls or mbedtls always made me somewhat wary.
Re:Urgent Upcoming OpenSSL release patches critical vulnerab... by saghm on Saturday October 29, 2022 @02:37AM (#33381594)
From looking at my currently installed packages, there are quite a few that depend on gnutls: ffmpeg, gnupg, libcups, vlc, and wget look like the ones that would be most well known. It's possible that they only use it as an option, but normally I'd expect it to only be an optional dependency if that were the case. I haven't looked at any of their codebases though, so no idea what they use it for!
Re:Urgent Upcoming OpenSSL release patches critical vulnerab... by Conan_Kudo on Saturday October 29, 2022 @04:54AM (#33382257)
One lesser known common user of GnuTLS is GNOME. Pretty much the entire GNOME ecosystem uses it.
Re:Urgent Upcoming OpenSSL release patches critical vulnerab... by mmwelt on Saturday October 29, 2022 @06:00AM (#33382580)
One probably important project that uses it is OpenConnect, as the VPN servers would probably be listening on a port reachable on the open internet.