crypto-policies-20240725-2.git9555558.fc41 in Fedora Rawhide

↵ Return to the main page of crypto-policies
View build
Search for updates

Package Info
🠗 Changelog
🠗 Dependencies
🠗 Provides
🠗 Files

Changelog

Date	Author	Change
2024-07-25	Alexander Sosedkin <asosedkin at redhat dot com> - 20240725-1.git9555558	- gnutls: wire X25519-KYBER768 to GROUP-X25519-KYBER768 - openssh: make dss no longer enableble, support is dropped
2024-07-17	Fedora Release Engineering <releng at fedoraproject dot org> - 20240717-2.git154fd4e	- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
2024-07-17	Alexander Sosedkin <asosedkin at redhat dot com> - 20240717-1.git154fd4e	- Changes/OpenSSLDistrustSHA1SigVer: implement, see below - DEFAULT: switch to rh-allow-sha1-signatures = no... - TEST-FEDORA41: reset to DEFAULT - FEDORA40: introduce with the previous contents of DEFAULT - nss: wire XYBER768D00 to X25519-KYBER768, not KYBER768 - TEST-PQ: disable KYBER768
2024-07-16	Alexander Sosedkin <asosedkin at redhat dot com> - 20240715-2.gitf8b6a29	- fix running pre scriptlet in first transaction ever, pre-coreutils
2024-07-15	Alexander Sosedkin <asosedkin at redhat dot com> - 20240715-1.gitf8b6a29	- BSI: Update BSI policy for new 2024 minimum recommendations - java: use and include jdk.disabled.namedCurves - ec_min_size: introduce and use in java, default to 256 - java: stop specifying jdk.tls.namedGroups in javasystem - java: drop unused javasystem backend
2024-06-28	Alexander Sosedkin <asosedkin at redhat dot com> - 20240628-1.gitddd11d3	- nss: wire KYBER768 to XYBER768D00 - java: start controlling / disable DTLSv1.0 - java: disable anon ciphersuites, tying them to NULL - java: respect more key size restrictions - java: specify jdk.tls.namedGroups system property - java: make hash, mac and sign more orthogonal - fips-mode-setup: add another scary "unsupported" - fips-mode-setup: flashy ticking warning upon use - BSI: switch to 3072 minimum RSA key size
2024-05-21	Alexander Sosedkin <asosedkin at redhat dot com> - 20240521-1.gitf71d135	- nss: unconditionally include p11-kit-proxy - TEST-PQ: update algorithm list, mark all PQ algorithms experimental
2024-05-15	Alexander Sosedkin <asosedkin at redhat dot com> - 20240515-1.gita24a14b	- gnutls: use tls-session-hash option, enforcing EMS in FIPS mode - gnutls: DTLS 0.9 is controllable again - gnutls: remove extraneous newline - openssh: remove support for old names of RequiredRSASize
2024-03-20	Alexander Sosedkin <asosedkin at redhat dot com> - 20240320-1.git58e3d95	- modules/FEDORA32, FEDORA38, TEST-FEDORA39: drop - openssl: mark liboqsprovider groups optional with ? - TEST-PQ: add more group and sign values, marked experimental - TEST-FEDORA41: add a new policy with __openssl_block_sha1_signatures = 1 - TEST-PQ: also enable sntrup761x25519-sha512@openssh.com
2024-03-04	Alexander Sosedkin <asosedkin at redhat dot com> - 20240304-1.git0375239	- packaging: remove perl build-dependency, it's not needed anymore - packaging: stop linting at check-time, relying on upstream CI instead - packaging: drop stale workarounds - libreswan: do not use up pfs= / ikev2= keywords for default behaviour

Dependencies

bash

Provides

config(crypto-policies)
crypto-policies

Files

etc/
- crypto-policies/
  - back-ends/
    - bind.config
    - gnutls.config
    - java.config
    - krb5.config
    - libreswan.config
    - libssh.config
    - nss.config
    - openssh.config
    - opensshserver.config
    - openssl.config
    - openssl_fips.config
    - opensslcnf.config
    - rpm-sequoia.config
    - sequoia.config
  - config
  - local.d/
  - policies/
    - modules/
  - state/
    - CURRENT.pol
    - current
usr/
- share/
  - crypto-policies/
    - DEFAULT/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - openssl_fips.txt
      - opensslcnf.txt
      - rpm-sequoia.txt
      - sequoia.txt
    - EMPTY/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - openssl_fips.txt
      - opensslcnf.txt
      - rpm-sequoia.txt
      - sequoia.txt
    - FIPS/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - openssl_fips.txt
      - opensslcnf.txt
      - rpm-sequoia.txt
      - sequoia.txt
    - FUTURE/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - openssl_fips.txt
      - opensslcnf.txt
      - rpm-sequoia.txt
      - sequoia.txt
    - LEGACY/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - openssl_fips.txt
      - opensslcnf.txt
      - rpm-sequoia.txt
      - sequoia.txt
    - back-ends/
      - DEFAULT/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        openssl_fips.config
        
        opensslcnf.config
        
        rpm-sequoia.config
        
        sequoia.config
      - FIPS/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        openssl_fips.config
        
        opensslcnf.config
        
        rpm-sequoia.config
        
        sequoia.config
      - FUTURE/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        openssl_fips.config
        
        opensslcnf.config
        
        rpm-sequoia.config
        
        sequoia.config
      - LEGACY/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        openssl_fips.config
        
        opensslcnf.config
        
        rpm-sequoia.config
        
        sequoia.config
    - default-config
    - policies/
      - BSI.pol
      - DEFAULT.pol
      - EMPTY.pol
      - FEDORA40.pol
      - FIPS.pol
      - FUTURE.pol
      - GOST-ONLY.pol
      - LEGACY.pol
      - NEXT.pol
      - TEST-FEDORA41.pol
      - modules/
        
        AD-SUPPORT.pmod
        
        ECDHE-ONLY.pmod
        
        GOST.pmod
        
        NO-CAMELLIA.pmod
        
        NO-ENFORCE-EMS.pmod
        
        NO-SHA1.pmod
        
        OSPP.pmod
        
        SHA1.pmod
        
        TEST-PQ.pmod
    - reload-cmds.sh
  - licenses/
    - crypto-policies/
      - COPYING.LESSER
  - man/
    - man7/
      - crypto-policies.7.gz

Sources on Pagure