Dirk Nehring <[EMAIL PROTECTED]> writes:

> On Thu, Sep 06, 2007 at 07:12:19PM +0200, Simon Josefsson wrote:
>> Hi!  This update gnutls to v2.0.0 and generally clean up the freewrt
>> build situation for gnutls.  Highlights:
>>
>> * New packages 'libgnutlsxx' for C++ library.
>> * New packages 'libgnutls-extra' for extra library (not
>>   needed by most programs).
>> * Fixed dependencies
>> * Enable zlib + lzo compression support
>> * No need for freewrt patches
>> * Add srptool and psktool to gnutls-utils
>> * Enable SRP and anonymous ciphers (usually a good idea)
>>
>> Btw, compiled for x86 I get the following package sizes:
>>
>> GnuTLS:
>>   zlib 33kb
>>   libtasn1 26kb
>>   libgpg-error 5kb
>>   libgcrypt 140kb
>>   libgnutls 156kb
>> => total 360kb
>>
>> For comparison, OpenSSL is 596kb.
>
> Hi Simon,
>
> great to hear about the progress. I am very interested in saving memory,
> since most of our routers have only 4 MB. Have you ever tested this
> configuration with OpenVPN?

Hi, and thanks for your interest.  After a quick look, it seems OpenVPN
doesn't support GnuTLS.  So you'll have to spend some resources porting
OpenVPN to GnuTLS before this would be feasible.

> Can I manage a small CA with it?

Yes, the 'certtool' command line tool can generate private keys, sign
certificates and parse certificate requests.

/Simon
_______________________________________________
freewrt-developers mailing list
[email protected]
https://www.freewrt.org/lists/listinfo/freewrt-developers

Reply via email to