rpms/bind - bind - AlmaLinux OS Foundation Git Server

rpms/bind

Fork 1

Commit Graph

Author	SHA1	Message	Date
Petr Menšík	814547323e	Update patches after rebase	2020-03-27 12:30:39 +01:00
Petr Menšík	6f27f8e4a7	Complete explicit disabling of RSAMD5 in FIPS mode (#1709553 ) Previous fix included just part inside named. However, checking part would check algorithm support also in check library. The code is almost the same. Permit already disabled algoritms also in libbind9. Use the same change as RHEL.	2019-11-26 19:37:29 +01:00
Petr Menšík	dab22dd2c2	Permit explicit disabling of RSAMD5 in FIPS mode (#1709553 ) When MD5 is disabled in library, it behaved like RSAMD5 were unknown. But security-policy disables it explicitly. It failed to even start in FIPS mode, because such algorithm were unknown. Fix disabled algorithm to return disabled result code. Accept such algorithm only when disabling it. Signed-off-by: Petr Menšík <pemensik@redhat.com>	2019-08-08 14:19:59 +02:00

Author

SHA1

Message

Date

Petr Menšík

814547323e

Update patches after rebase

2020-03-27 12:30:39 +01:00

Petr Menšík

6f27f8e4a7

Complete explicit disabling of RSAMD5 in FIPS mode (#1709553 )

Previous fix included just part inside named. However, checking part
would check algorithm support also in check library. The code is almost
the same. Permit already disabled algoritms also in libbind9.

Use the same change as RHEL.

2019-11-26 19:37:29 +01:00

Petr Menšík

dab22dd2c2

Permit explicit disabling of RSAMD5 in FIPS mode (#1709553 )

When MD5 is disabled in library, it behaved like RSAMD5 were unknown.
But security-policy disables it explicitly. It failed to even start in
FIPS mode, because such algorithm were unknown. Fix disabled algorithm
to return disabled result code. Accept such algorithm only when
disabling it.

Signed-off-by: Petr Menšík <pemensik@redhat.com>

2019-08-08 14:19:59 +02:00

3 Commits