Skip to content

report system config file location in gnutls-cli

Description of the feature:

The default location of the system configuration file is a compile-time choice specified in the Makefile. There is no command reporting this information to the user, though.

The gnutls_get_system_config_file() function returns the active value (which might be overridden by the GNUTLS_SYSTEM_PRIORITY_FILE environment variable), but there is no CLI command that reports that information.

Suggestions:

  1. add the compiled-in directory location to:
$ gnutls-cli --list-config
libgnutls-soname: libgnutls.so.30
libnettle-soname: libnettle.so.8
libhogweed-soname: libhogweed.so.6
libgmp-soname: libgmp.so.10
hardware-features: padlock pkcs11
tls-features: ssl2-compat srtp alpn ocsp srp psk dhe ecdhe auth-anon heartbeat
default-system-config-file: /path/to/gnutls.config
## Applications that this feature may be relevant to:
gnutls-cli

That can be done by adding one line to this array:

static const struct gnutls_library_config_st _gnutls_library_config[] = {
#ifdef FIPS_MODULE_NAME
        { "fips-module-name", FIPS_MODULE_NAME },
#endif
#ifdef FIPS_MODULE_VERSION
        { "fips-module-version", FIPS_MODULE_VERSION },
#endif
        { "libgnutls-soname", GNUTLS_LIBRARY_SONAME },
        { "libnettle-soname", NETTLE_LIBRARY_SONAME },
        { "libhogweed-soname", HOGWEED_LIBRARY_SONAME },
        { "libgmp-soname", GMP_LIBRARY_SONAME },
        { "hardware-features", HW_FEATURES },
        { "tls-features", TLS_FEATURES },
        { "default-system-config", SYSTEM_PRIORITY_FILE },
        { NULL, NULL }
};
  1. Add a command reporting the active value (i.e., the results of gnutls_get_system_config_file(), maybe:
$ gnutls --list-config-file
GNUTLS_SYSTEM_PRIORITY_FILE: "/path/to/gnutls.config"

Is this feature implemented in other libraries (and which)

A similar command in OpenSSL is

$ openssl version -d
OPENSSLDIR: "/etc/pki/tls"