rpms/crypto-policies
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update for RHEL-8.9 (krb5 macs, krb5 reordering...)

Browse Source 
- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
- krb5: fix policy generator to account for macs
- docs: replace `FIPS 140-2` with just `FIPS 140`

Resolves: bz2219912
Resolves: bz2225215
This commit is contained in:
Alexander Sosedkin 2023-08-01 17:26:33 +02:00
parent 8867ae4169
commit 1c698dc49e
2 changed files with 8 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
crypto-policies.spec
View File

@ -1,5 +1,5 @@
%global git_date 20221215 %global git_date 20230731
%global git_commit ece0092078a87593c01b127cdb2368877ce11d01 %global git_commit 3177e06c203c082d479760337c7cad65a4dcc81e
%{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
%global _python_bytecompile_extra 0 %global _python_bytecompile_extra 0
@ -188,6 +188,11 @@ end
%{_mandir}/man8/fips-finish-install.8* %{_mandir}/man8/fips-finish-install.8*
%changelog %changelog
* Tue Jul 31 2023 Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git3177e06
- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
- krb5: fix policy generator to account for macs
- docs: replace `FIPS 140-2` with just `FIPS 140`
* Thu Dec 15 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20221215-1.gitece0092 * Thu Dec 15 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20221215-1.gitece0092
- bind: expand the list of disableable algorithms - bind: expand the list of disableable algorithms
- tests/java: fix java.security.disableSystemPropertiesFile=true - tests/java: fix java.security.disableSystemPropertiesFile=true

2
sources
View File

@ -1 +1 @@
SHA512 (crypto-policies-gitece0092.tar.gz) = 389f13272628dc49689eba85bca5d256c66e5c72a0a6d127fc1f257d2fad21f7ea7dc9374d6a6d1e47a24cffa330d48e33bd51c345fa91b8abaf222810ca9a45 SHA512 (crypto-policies-git3177e06.tar.gz) = 1efa0366a5719c8bac3d1bc0178a03938f715f8e2faf1eb14b699a1fec2d4dfeb1b2b60af0d12337c60ffc74c1e2610bf76162ceae8dde14ac4dc074b23adc39