Proposal for a new extension: gnuTLS
| From: | Raik Niemann | Date: | Tue, 30 Aug 2011 08:27:36 +0000 |
| Subject: | Proposal for a new extension: gnuTLS | ||
| Groups: | php.pecl.dev | ||
| Request: | Send a blank email to pecl-dev+get-8493@lists.php.net to get a copy of this message | ||
Hello everyone,
I want to propose a new PECL extension wrapping the gnuTLS library. This
library offers mainly the same functionality as the openSSL library, but
in my opinion the PKI functionality is much better. In addition to this,
more features are implemented for encrypted streams.
What I implemented so far:
- Generation/Parsing/Exporting private keys (RSA/DSA/DH)
(Elliptic curves are supported, but cannot be generated)
- Generation/Parsing/Exporting PKCS#10 certificate signing requests
(CRQs)
- Signing/Parsing/Exporting X.509 certificates
- Creating/Parsing/Exporting X.509 certificate revocation lists (CRLs)
- Creating/Parsing/Exporting PKCS#12 container
All key features are described on this page:
https://team.iisys.de/redmine/projects/iisys-php5-gnutls/wiki
The source code can be viewed here:
https://team.iisys.de/redmine/projects/iisys-php5-gnutls/repository
and can be compiled in the latest PHP 5.3 and 5.4 branches.
I started the function documentation, but this is still not complete. In
the next couple of days I can finish the documentation for the PHP manual.
The documentation can be viewed here:
https://team.iisys.de/php5-gnutls-doc/
What is missing:
- Support for the stream API
- some documentation
- some test cases for phpt
Regards,
Raik Niemann