crypto-policies-scripts-20231204-1.git1e3a2e4.fc39

Date	Author	Change
2023-12-04	Alexander Sosedkin <asosedkin at redhat dot com> - 20231204-1.git1e3a2e4	- TEST-PQ: add a subpolicy to test post-quantum algorithms. Do not rely on.
2023-11-13	Clemens Lang <cllang at redhat dot com> - 20231113-1.gitb402e82	- fips-mode-setup: Write error messages to stderr - fips-mode-setup: Fix some shellcheck warnings - fips-mode-setup: Fix test for empty /boot - fips-mode-setup: Avoid 'boot=UUID=' if /boot == /
2023-11-09	Clemens Lang <cllang at redhat dot com> - 20231109-1.gitadb5572	- Restore support for scoped ssh_etm directives - Print matches in syntax deprecation warnings
2023-11-07	Clemens Lang <cllang at redhat dot com> - 20231107-1.gitd5877b3	- fips-mode-setup: Fix usage with --no-bootcfg
2023-11-07	Clemens Lang <cllang at redhat dot com> - 20231107-1.git8f49dfa	- turn ssh_etm into an etm@SSH tri-state - fips-mode-setup: increase chroot-friendliness (rhbz#2164847)
2023-09-20	Alexander Sosedkin <asosedkin at redhat dot com> - 20230920-1.git570ea89	- OSPP subpolicy: tighten beyond reason for OSPP 4.3 - fips-mode-setup: more thorough --disable, still unsupported
2023-07-25	Alexander Sosedkin <asosedkin at redhat dot com> - 20230731-1.git5ed06e0	- BSI: start a BSI TR 02102 policy - krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones - FIPS: enforce EMS in FIPS mode - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode - nss: implement EMS enforcement in FIPS mode (not enabled yet) - openssl: implement EMS enforcement in FIPS mode - gnutls: implement EMS enforcement in FIPS mode (not enabled yet) - docs: replace `FIPS 140-2` with just `FIPS 140`
2023-07-19	Fedora Release Engineering <releng at fedoraproject dot org> - 20230614-2.git5f3458e	- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
2023-06-14	Alexander Sosedkin <asosedkin at redhat dot com> - 20230614-1.git5f3458e	- policies: restore group order to old OpenSSL default order
2023-04-20	Alexander Sosedkin <asosedkin at redhat dot com> - 20230420-1.git3d08ae7	- openssl: specify Groups explicitly - openssl: add support for Brainpool curves

usr/
- bin/
  - fips-finish-install
  - fips-mode-setup
  - update-crypto-policies
- share/
  - crypto-policies/
    - python/
      - __pycache__/
        
        build-crypto-policies.cpython-312.opt-1.pyc
        
        build-crypto-policies.cpython-312.pyc
        
        update-crypto-policies.cpython-312.opt-1.pyc
        
        update-crypto-policies.cpython-312.pyc
      - build-crypto-policies.py
      - cryptopolicies/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-312.opt-1.pyc
        
        __init__.cpython-312.pyc
        
        alg_lists.cpython-312.opt-1.pyc
        
        alg_lists.cpython-312.pyc
        
        cryptopolicies.cpython-312.opt-1.pyc
        
        cryptopolicies.cpython-312.pyc
        
        alg_lists.py
        
        cryptopolicies.py
        
        validation/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-312.opt-1.pyc
        
        __init__.cpython-312.pyc
        
        alg_lists.cpython-312.opt-1.pyc
        
        alg_lists.cpython-312.pyc
        
        general.cpython-312.opt-1.pyc
        
        general.cpython-312.pyc
        
        rules.cpython-312.opt-1.pyc
        
        rules.cpython-312.pyc
        
        scope.cpython-312.opt-1.pyc
        
        scope.cpython-312.pyc
        
        alg_lists.py
        
        general.py
        
        rules.py
        
        scope.py
      - policygenerators/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-312.opt-1.pyc
        
        __init__.cpython-312.pyc
        
        bind.cpython-312.opt-1.pyc
        
        bind.cpython-312.pyc
        
        configgenerator.cpython-312.opt-1.pyc
        
        configgenerator.cpython-312.pyc
        
        gnutls.cpython-312.opt-1.pyc
        
        gnutls.cpython-312.pyc
        
        java.cpython-312.opt-1.pyc
        
        java.cpython-312.pyc
        
        krb5.cpython-312.opt-1.pyc
        
        krb5.cpython-312.pyc
        
        libreswan.cpython-312.opt-1.pyc
        
        libreswan.cpython-312.pyc
        
        libssh.cpython-312.opt-1.pyc
        
        libssh.cpython-312.pyc
        
        nss.cpython-312.opt-1.pyc
        
        nss.cpython-312.pyc
        
        openssh.cpython-312.opt-1.pyc
        
        openssh.cpython-312.pyc
        
        openssl.cpython-312.opt-1.pyc
        
        openssl.cpython-312.pyc
        
        sequoia.cpython-312.opt-1.pyc
        
        sequoia.cpython-312.pyc
        
        bind.py
        
        configgenerator.py
        
        gnutls.py
        
        java.py
        
        krb5.py
        
        libreswan.py
        
        libssh.py
        
        nss.py
        
        openssh.py
        
        openssl.py
        
        sequoia.py
      - update-crypto-policies.py
  - man/
    - man8/
      - fips-finish-install.8.gz
      - fips-mode-setup.8.gz
      - update-crypto-policies.8.gz

crypto-policies-scripts-20231204-1.git1e3a2e4.fc39 in Fedora 39

Changelog

Dependencies

Provides

Files