From 3fee04d1e17e0926b7486e84efc7f06ce1aaf9bf Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Tue, 5 Apr 2022 07:11:34 -0400 Subject: [PATCH] import crypto-policies-20220223-1.git5203b41.el9 --- .crypto-policies.metadata | 2 +- .gitignore | 2 +- SPECS/crypto-policies.spec | 13 +++++++++---- 3 files changed, 11 insertions(+), 6 deletions(-) diff --git a/.crypto-policies.metadata b/.crypto-policies.metadata index 1a3d4d0..06104fd 100644 --- a/.crypto-policies.metadata +++ b/.crypto-policies.metadata @@ -1 +1 @@ -4d5e23d4260a9700829d7c684f82893072a85c5e SOURCES/crypto-policies-gitf03e75e.tar.gz +de1d69d0e29453cfbed156815ddc24052f3e7887 SOURCES/crypto-policies-git5203b41.tar.gz diff --git a/.gitignore b/.gitignore index 02ea571..01e18c8 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/crypto-policies-gitf03e75e.tar.gz +SOURCES/crypto-policies-git5203b41.tar.gz diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec index f4ac4fe..c53477c 100644 --- a/SPECS/crypto-policies.spec +++ b/SPECS/crypto-policies.spec @@ -1,5 +1,5 @@ -%global git_date 20220203 -%global git_commit f03e75eb11e7583cd8b68c49d6d0e2aa87d28e54 +%global git_date 20220223 +%global git_commit 5203b41aba45a7596774bff439f6428deda778b8 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %global _python_bytecompile_extra 0 @@ -29,7 +29,7 @@ BuildRequires: python3-devel >= 3.6 BuildRequires: python3-pytest BuildRequires: make -Conflicts: openssl < 1.1.1h +Conflicts: openssl < 1:3.0.1-10 Conflicts: nss < 3.44.0 Conflicts: libreswan < 3.28 Conflicts: openssh < 8.5p1 @@ -186,7 +186,12 @@ end %{_mandir}/man8/fips-finish-install.8* %changelog -* Tue Feb 03 2022 Alexander Sosedkin - 20220203-1.gitf03e75e +* Wed Feb 23 2022 Alexander Sosedkin - 20220223-1.git5203b41 +- openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY +- update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY +- fips-mode-setup: catch more inconsistencies, clarify --check + +* Thu Feb 03 2022 Alexander Sosedkin - 20220203-1.gitf03e75e - gnutls: enable SHAKE, needed for Ed448 - fips-mode-setup: improve handling FIPS plus subpolicies - FIPS: disable SHA-1 HMAC