From 53df3beb6a8a6d611bc397d0b37d35fc4f874e78 Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Tue, 27 Sep 2022 10:09:29 -0400 Subject: [PATCH] import crypto-policies-20220815-1.git0fbe86f.el9 --- .crypto-policies.metadata | 2 +- .gitignore | 2 +- SPECS/crypto-policies.spec | 17 +++++++++++++---- 3 files changed, 15 insertions(+), 6 deletions(-) diff --git a/.crypto-policies.metadata b/.crypto-policies.metadata index 06104fd..96e878d 100644 --- a/.crypto-policies.metadata +++ b/.crypto-policies.metadata @@ -1 +1 @@ -de1d69d0e29453cfbed156815ddc24052f3e7887 SOURCES/crypto-policies-git5203b41.tar.gz +0890ea06566ded55ed48890da1a2fbb2128268b7 SOURCES/crypto-policies-git0fbe86f.tar.gz diff --git a/.gitignore b/.gitignore index 01e18c8..3e67c57 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/crypto-policies-git5203b41.tar.gz +SOURCES/crypto-policies-git0fbe86f.tar.gz diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec index c53477c..d2e47e9 100644 --- a/SPECS/crypto-policies.spec +++ b/SPECS/crypto-policies.spec @@ -1,5 +1,5 @@ -%global git_date 20220223 -%global git_commit 5203b41aba45a7596774bff439f6428deda778b8 +%global git_date 20220815 +%global git_commit 0fbe86f88d51fb210d536908b10450eb7467e1d6 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %global _python_bytecompile_extra 0 @@ -32,7 +32,7 @@ BuildRequires: make Conflicts: openssl < 1:3.0.1-10 Conflicts: nss < 3.44.0 Conflicts: libreswan < 3.28 -Conflicts: openssh < 8.5p1 +Conflicts: openssh < 8.7p1-10 Conflicts: gnutls < 3.7.2-3 %description @@ -60,7 +60,6 @@ to enable or disable the system FIPS mode. %autopatch -p1 %build -export OLD_GNUTLS=1 # FIXME: remove once gnutls-3.7.2-3 is in buildroot %make_build %install @@ -186,6 +185,16 @@ end %{_mandir}/man8/fips-finish-install.8* %changelog +* Mon Aug 15 2022 Alexander Sosedkin - 20220815-1.git0fbe86f +- openssh: add RSAMinSize option following min_rsa_size + +* Wed Apr 27 2022 Alexander Sosedkin - 20220427-1.gitb2323a1 +- bind: control ED25519/ED448 + +* Mon Apr 04 2022 Alexander Sosedkin - 20220404-1.git845c0c1 +- DEFAULT: drop DNSSEC SHA-1 exception +- openssh: add support for sntrup761x25519-sha512@openssh.com + * Wed Feb 23 2022 Alexander Sosedkin - 20220223-1.git5203b41 - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY