import crypto-policies-20220203-1.gitf03e75e.el9

This commit is contained in:
CentOS Sources 2022-03-01 07:39:16 -05:00 committed by Stepan Oksanichenko
parent bf03693bbf
commit 2931fbc19e
3 changed files with 14 additions and 4 deletions

View File

@ -1 +1 @@
52473a7552b94cbc3dac07e2668ea27db6c1fc65 SOURCES/crypto-policies-git70de135.tar.gz 4d5e23d4260a9700829d7c684f82893072a85c5e SOURCES/crypto-policies-gitf03e75e.tar.gz

2
.gitignore vendored
View File

@ -1 +1 @@
SOURCES/crypto-policies-git70de135.tar.gz SOURCES/crypto-policies-gitf03e75e.tar.gz

View File

@ -1,5 +1,5 @@
%global git_date 20211115 %global git_date 20220203
%global git_commit 70de13531a7d17db062ac980ef6a7b521782f2fd %global git_commit f03e75eb11e7583cd8b68c49d6d0e2aa87d28e54
%{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
%global _python_bytecompile_extra 0 %global _python_bytecompile_extra 0
@ -186,6 +186,16 @@ end
%{_mandir}/man8/fips-finish-install.8* %{_mandir}/man8/fips-finish-install.8*
%changelog %changelog
* Tue Feb 03 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
- gnutls: enable SHAKE, needed for Ed448
- fips-mode-setup: improve handling FIPS plus subpolicies
- FIPS: disable SHA-1 HMAC
- FIPS: disable CBC ciphers except in Kerberos
* Tue Feb 01 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220201-1.git636a91d
- openssl: revert to SECLEVEL=2 in LEGACY
- openssl: add newlines at the end of the output
* Mon Nov 15 2021 Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135 * Mon Nov 15 2021 Alexander Sosedkin <asosedkin@redhat.com> - 20211115-1.git70de135
- OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
- fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific) - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)