rpms/crypto-policies
7
0
Fork 0
Code Issues Pull Requests Releases Activity

import CS crypto-policies-20250804-1.git2c74f3d.el9

Browse Source
This commit is contained in:
eabdullin 2025-09-15 11:51:56 +00:00
parent 59b6f0516b
commit 063370d2dd
3 changed files with 18 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.crypto-policies.metadata
View File

@ -1 +1 @@
e70c3ef19a6ca81cf346633e45d22d9778e355fa SOURCES/crypto-policies-git5269e22.tar.gz
cc381187af7f2a7c344b11f164ff798df6225729 SOURCES/crypto-policies-git2c74f3d.tar.gz

2
.gitignore vendored
View File

@ -1 +1 @@
SOURCES/crypto-policies-git5269e22.tar.gz
SOURCES/crypto-policies-git2c74f3d.tar.gz

18
SPECS/crypto-policies.spec
View File

@ -1,5 +1,5 @@
%global git_date 20250128
%global git_commit 5269e22306379d643e69160ba5144855305762ac
%global git_date 20250804
%global git_commit 2c74f3d90c8c8b28df9996a44b4da76fbdb3e026
%{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
%global _python_bytecompile_extra 0
@ -160,6 +160,7 @@ end
%ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/libreswan.config
%ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/libssh.config
%ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/openssl_fips.config
%ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/rpm-sequoia.config
# %verify(not mode) comes from the fact
# these turn into symlinks and back to regular files at will, see bz1898986
@ -191,6 +192,19 @@ end
%{_mandir}/man8/fips-finish-install.8*
%changelog
* Mon Aug 04 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250804-1.git2c74f3d
- nss: enable ML-KEM and ML-DSA
* Mon Jul 21 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250721-1.git162e4cb
- rpm-sequoia: add back-end
- openssl: send one PQ and one classic key_share; prioritize PQ groups
- policies: alias X25519-MLKEM768 to MLKEM768-X25519
- nss: enable ED25519
* Mon Jun 02 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250602-1.gita839241
- openssl: fix mistakes in integrity-only cipher definitions
- PQ: add a subpolicy with some post-quantum algorithms
* Tue Jan 28 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250128-1.git5269e22
- openssl: stricter enabling of Ciphersuites
- openssl: make use of -CBC and -AESGCM keywords