Update from upstream (re-wire mlkem768x25519-sha256, ...)

- alg_lists: mark MLKEM768 kex experimental
- openssh, libssh: refactor kx maps to use tuples
- openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
- update-crypto-policies: skip warning on --set=FIPS if bootc
- update-crypto-policies: don't output FIPS warning in fips mode

Resolves: RHEL-48590
Resolves: RHEL-67398
This commit is contained in:
Alexander Sosedkin 2024-11-26 18:11:11 +01:00
parent 67e22dbc37
commit 498a7e7a54
2 changed files with 11 additions and 4 deletions

View File

@ -1,12 +1,12 @@
%global git_date 20241106 %global git_date 20241126
%global git_commit 707341621f4d484685aa51cc71d2f73e9e7141ff %global git_commit d63f008ff42b5e2a6c5d904bd1715250ff630c2c
%{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
%global _python_bytecompile_extra 0 %global _python_bytecompile_extra 0
Name: crypto-policies Name: crypto-policies
Version: %{git_date} Version: %{git_date}
Release: 2.git%{git_commit_hash}%{?dist} Release: 1.git%{git_commit_hash}%{?dist}
Summary: System-wide crypto policies Summary: System-wide crypto policies
License: LGPL-2.1-or-later License: LGPL-2.1-or-later
@ -252,6 +252,13 @@ exit 0
%changelog %changelog
* Tue Nov 26 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241126-1.gitd63f008
- alg_lists: mark MLKEM768 kex experimental
- openssh, libssh: refactor kx maps to use tuples
- openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
- update-crypto-policies: skip warning on --set=FIPS if bootc
- update-crypto-policies: don't output FIPS warning in fips mode
* Wed Nov 06 2024 Clemens Lang <cllang@redhat.com> - 20241106-2.git7073416 * Wed Nov 06 2024 Clemens Lang <cllang@redhat.com> - 20241106-2.git7073416
- fips-mode-setup: Remove - fips-mode-setup: Remove
Resolves: RHEL-65652 Resolves: RHEL-65652

View File

@ -1 +1 @@
SHA512 (crypto-policies-git7073416.tar.gz) = 32f8f34d98ea5cdb921edc5746cbfd6944d532f5e53a837df8903ffe8b2baec01865de6275fa21b35a20382f939221aa9cbeec5fe3c1a61aff411172a60f5481 SHA512 (crypto-policies-gitd63f008.tar.gz) = cbf1aa3fe064c5b87da2f30f948fc89f4d2eecb3b1d258f3d03ccf83242f4a071ccb0dfe017bdcaec35e3b8df2190f6b098deeef32f61beb82932bd188705abf