diff --git a/.crypto-policies.metadata b/.crypto-policies.metadata index 1115958..bd31c68 100644 --- a/.crypto-policies.metadata +++ b/.crypto-policies.metadata @@ -1 +1 @@ -98110f7b055e4c1511c7b649269228744f11c3d0 SOURCES/crypto-policies-git0ac8b1f.tar.gz +96ee4b140080ebc2b327cd2c6e608a55ecf7daf3 SOURCES/crypto-policies-git51d1222.tar.gz diff --git a/.gitignore b/.gitignore index 763e4ac..278bce4 100644 --- a/.gitignore +++ b/.gitignore @@ -1 +1 @@ -SOURCES/crypto-policies-git0ac8b1f.tar.gz +SOURCES/crypto-policies-git51d1222.tar.gz diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec index f1dc256..22df82c 100644 --- a/SPECS/crypto-policies.spec +++ b/SPECS/crypto-policies.spec @@ -1,5 +1,5 @@ -%global git_date 20200610 -%global git_commit 0ac8b1fbed683e4b9d13c4618318c25a8cead774 +%global git_date 20200713 +%global git_commit 51d12223920a7c1e50c3161bcc351ae380142e97 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %global _python_bytecompile_extra 0 @@ -30,6 +30,7 @@ BuildRequires: python3-devel Conflicts: nss < 3.44.0 Conflicts: libreswan < 3.28 Conflicts: openssh < 8.0p1-5 +Conflicts: gnutls < 3.6.12 # Most users want this, the split is mostly for minimal images Recommends: crypto-policies-scripts @@ -178,6 +179,14 @@ end %{_mandir}/man8/fips-finish-install.8* %changelog +* Mon Jul 13 2020 Tomáš Mráz - 20200713-1.git51d1222 +- OSPP subpolicy: remove AES-CCM +- openssl: handle the AES-CCM removal properly + +* Wed Jul 1 2020 Tomáš Mráz - 20200629-1.git806b5d3 +- disallow X448/ED448 in FIPS policy with gnutls >= 3.6.12 +- add AD-SUPPORT policy module + * Wed Jun 10 2020 Tomáš Mráz - 20200610-1.git0ac8b1f - fallback to FIPS policy instead of the default-config in FIPS mode - java: Document properly how to override the crypto policy