crypto-policies-scripts-20240828-1.git5f66e81.fc42

Date	Author	Change
2024-08-28	Alexander Sosedkin <asosedkin at redhat dot com> - 20240828-1.git5f66e81	- fips-mode-setup: small Argon2 detection fix
2024-08-26	Alexander Sosedkin <asosedkin at redhat dot com> - 20240826-1.gite824389	- SHA1: add __openssl_block_sha1_signatures = 0
2024-08-22	Alexander Sosedkin <asosedkin at redhat dot com> - 20240822-1.git64c9381	- fips-mode-setup: block if LUKS devices using Argon2 are detected
2024-08-07	Alexander Sosedkin <asosedkin at redhat dot com> - 20240807-1.git5795660	- fips-crypto-policy-overlay: a unit to automount FIPS policy when fips=1 - fips-setup-helper: add a libexec helper for anaconda - fips-mode-setup: force --no-bootcfg when UKI is detected
2024-08-02	Alexander Sosedkin <asosedkin at redhat dot com> - 20240802-1.git2e5e430	- nss: rewrite backend for nss 3.101
2024-07-25	Alexander Sosedkin <asosedkin at redhat dot com> - 20240725-1.git9555558	- gnutls: wire X25519-KYBER768 to GROUP-X25519-KYBER768 - openssh: make dss no longer enableble, support is dropped
2024-07-17	Fedora Release Engineering <releng at fedoraproject dot org> - 20240717-2.git154fd4e	- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
2024-07-17	Alexander Sosedkin <asosedkin at redhat dot com> - 20240717-1.git154fd4e	- Changes/OpenSSLDistrustSHA1SigVer: implement, see below - DEFAULT: switch to rh-allow-sha1-signatures = no... - TEST-FEDORA41: reset to DEFAULT - FEDORA40: introduce with the previous contents of DEFAULT - nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768 - TEST-PQ: disable KYBER768
2024-07-16	Alexander Sosedkin <asosedkin at redhat dot com> - 20240715-2.gitf8b6a29	- fix running pre scriptlet in first transaction ever, pre-coreutils
2024-07-15	Alexander Sosedkin <asosedkin at redhat dot com> - 20240715-1.gitf8b6a29	- BSI: Update BSI policy for new 2024 minimum recommendations - java: use and include jdk.disabled.namedCurves - ec_min_size: introduce and use in java, default to 256 - java: stop specifying jdk.tls.namedGroups in javasystem - java: drop unused javasystem backend

usr/
- bin/
  - fips-finish-install
  - fips-mode-setup
  - update-crypto-policies
- share/
  - crypto-policies/
    - python/
      - __pycache__/
        
        build-crypto-policies.cpython-313.opt-1.pyc
        
        build-crypto-policies.cpython-313.pyc
        
        update-crypto-policies.cpython-313.opt-1.pyc
        
        update-crypto-policies.cpython-313.pyc
      - build-crypto-policies.py
      - cryptopolicies/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-313.opt-1.pyc
        
        __init__.cpython-313.pyc
        
        alg_lists.cpython-313.opt-1.pyc
        
        alg_lists.cpython-313.pyc
        
        cryptopolicies.cpython-313.opt-1.pyc
        
        cryptopolicies.cpython-313.pyc
        
        alg_lists.py
        
        cryptopolicies.py
        
        validation/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-313.opt-1.pyc
        
        __init__.cpython-313.pyc
        
        alg_lists.cpython-313.opt-1.pyc
        
        alg_lists.cpython-313.pyc
        
        general.cpython-313.opt-1.pyc
        
        general.cpython-313.pyc
        
        rules.cpython-313.opt-1.pyc
        
        rules.cpython-313.pyc
        
        scope.cpython-313.opt-1.pyc
        
        scope.cpython-313.pyc
        
        alg_lists.py
        
        general.py
        
        rules.py
        
        scope.py
      - policygenerators/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-313.opt-1.pyc
        
        __init__.cpython-313.pyc
        
        bind.cpython-313.opt-1.pyc
        
        bind.cpython-313.pyc
        
        configgenerator.cpython-313.opt-1.pyc
        
        configgenerator.cpython-313.pyc
        
        gnutls.cpython-313.opt-1.pyc
        
        gnutls.cpython-313.pyc
        
        java.cpython-313.opt-1.pyc
        
        java.cpython-313.pyc
        
        krb5.cpython-313.opt-1.pyc
        
        krb5.cpython-313.pyc
        
        libreswan.cpython-313.opt-1.pyc
        
        libreswan.cpython-313.pyc
        
        libssh.cpython-313.opt-1.pyc
        
        libssh.cpython-313.pyc
        
        nss.cpython-313.opt-1.pyc
        
        nss.cpython-313.pyc
        
        openssh.cpython-313.opt-1.pyc
        
        openssh.cpython-313.pyc
        
        openssl.cpython-313.opt-1.pyc
        
        openssl.cpython-313.pyc
        
        sequoia.cpython-313.opt-1.pyc
        
        sequoia.cpython-313.pyc
        
        bind.py
        
        configgenerator.py
        
        gnutls.py
        
        java.py
        
        krb5.py
        
        libreswan.py
        
        libssh.py
        
        nss.py
        
        openssh.py
        
        openssl.py
        
        sequoia.py
      - update-crypto-policies.py
  - man/
    - man8/
      - fips-finish-install.8.gz
      - fips-mode-setup.8.gz
      - update-crypto-policies.8.gz

crypto-policies-scripts-20240828-1.git5f66e81.fc42 in Fedora Rawhide

Changelog

Dependencies

Provides

Files