Can I use nginx and GnuTLS together?

Question

I read that nginx works with OpenSSL. But since GnuTLS is the only software that provides TLS 1.2 support, it would be useful to combine that.

So, how can I compile nginx with GnuTLS on Ubuntu? =)

Answer 1

It's not possible to use GnuTLS with nginx. The source files containing ssl in their names. From the nginx 1.0.4 source:

./src/mail/ngx_mail_ssl_module.h
./src/mail/ngx_mail_ssl_module.c
./src/http/modules/ngx_http_ssl_module.h
./src/http/modules/ngx_http_ssl_module.c
./src/event/ngx_event_openssl.h
./src/event/ngx_event_openssl.c
./auto/lib/openssl

Neither has GnuTLS been mentioned in the source (grep -Hrni gnutls . or even grep -Hrni gnu .). According to Compatibility with the OpenSSL Library, GnuTLS cannot fully replace OpenSSL.

Unless you really need it, use the current version of nginx+openssl. Work has been done for OpenSSL 1.0.1 (not released yet) to support TLS 1.2. See Changes between 1.0.0e and 1.0.1 [xx XXX xxxx].

Answer 2

UPDATE: OpenSSL 1.0.1 beta adds TLS 1.1 and 1.2 support.