From 063370d2dd630e9d5fd30f1c8e931de3bca6e600 Mon Sep 17 00:00:00 2001 From: eabdullin Date: Mon, 15 Sep 2025 11:51:56 +0000 Subject: [PATCH] import CS crypto-policies-20250804-1.git2c74f3d.el9 --- .crypto-policies.metadata | 2 +- .gitignore | 2 +- SPECS/crypto-policies.spec | 18 ++++++++++++++++-- 3 files changed, 18 insertions(+), 4 deletions(-) diff --git a/.crypto-policies.metadata b/.crypto-policies.metadata index f25aa4f..1273594 100644 --- a/.crypto-policies.metadata +++ b/.crypto-policies.metadata @@ -1 +1 @@ -e70c3ef19a6ca81cf346633e45d22d9778e355fa SOURCES/crypto-policies-git5269e22.tar.gz +cc381187af7f2a7c344b11f164ff798df6225729 SOURCES/crypto-policies-git2c74f3d.tar.gz diff --git a/.gitignore b/.gitignore index 03dda66..84e07f0 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/crypto-policies-git5269e22.tar.gz +SOURCES/crypto-policies-git2c74f3d.tar.gz diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec index e9d2a9f..259727a 100644 --- a/SPECS/crypto-policies.spec +++ b/SPECS/crypto-policies.spec @@ -1,5 +1,5 @@ -%global git_date 20250128 -%global git_commit 5269e22306379d643e69160ba5144855305762ac +%global git_date 20250804 +%global git_commit 2c74f3d90c8c8b28df9996a44b4da76fbdb3e026 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %global _python_bytecompile_extra 0 @@ -160,6 +160,7 @@ end %ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/libreswan.config %ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/libssh.config %ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/openssl_fips.config +%ghost %config(missingok,noreplace) %verify(not mode) %{_sysconfdir}/crypto-policies/back-ends/rpm-sequoia.config # %verify(not mode) comes from the fact # these turn into symlinks and back to regular files at will, see bz1898986 @@ -191,6 +192,19 @@ end %{_mandir}/man8/fips-finish-install.8* %changelog +* Mon Aug 04 2025 Alexander Sosedkin - 20250804-1.git2c74f3d +- nss: enable ML-KEM and ML-DSA + +* Mon Jul 21 2025 Alexander Sosedkin - 20250721-1.git162e4cb +- rpm-sequoia: add back-end +- openssl: send one PQ and one classic key_share; prioritize PQ groups +- policies: alias X25519-MLKEM768 to MLKEM768-X25519 +- nss: enable ED25519 + +* Mon Jun 02 2025 Alexander Sosedkin - 20250602-1.gita839241 +- openssl: fix mistakes in integrity-only cipher definitions +- PQ: add a subpolicy with some post-quantum algorithms + * Tue Jan 28 2025 Alexander Sosedkin - 20250128-1.git5269e22 - openssl: stricter enabling of Ciphersuites - openssl: make use of -CBC and -AESGCM keywords