rpms/crypto-policies
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update from upstream (AD-SUPPORT, rh-allow-sha1-signatures, ...):

Browse Source 
- openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
- update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
- fips-mode-setup: catch more inconsistencies, clarify --check

Resolves: bz2055796
Resolves: bz2056676
This commit is contained in:
Alexander Sosedkin 2022-02-23 13:35:32 +01:00
parent e69bea495b
commit 8fed911d53
2 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
crypto-policies.spec
View File

@ -1,5 +1,5 @@
%global git_date 20220203
%global git_commit f03e75eb11e7583cd8b68c49d6d0e2aa87d28e54
%global git_date 20220223
%global git_commit 5203b41aba45a7596774bff439f6428deda778b8
%{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
%global _python_bytecompile_extra 0
@ -29,7 +29,7 @@ BuildRequires: python3-devel >= 3.6
BuildRequires: python3-pytest
BuildRequires: make
Conflicts: openssl < 1.1.1h
Conflicts: openssl < 1:3.0.1-10
Conflicts: nss < 3.44.0
Conflicts: libreswan < 3.28
Conflicts: openssh < 8.5p1
@ -186,7 +186,12 @@ end
%{_mandir}/man8/fips-finish-install.8*
%changelog
* Tue Feb 03 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
* Wed Feb 23 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
- openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
- update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
- fips-mode-setup: catch more inconsistencies, clarify --check
* Thu Feb 03 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
- gnutls: enable SHAKE, needed for Ed448
- fips-mode-setup: improve handling FIPS plus subpolicies
- FIPS: disable SHA-1 HMAC

2
sources
View File

@ -1 +1 @@
SHA512 (crypto-policies-gitf03e75e.tar.gz) = 72c68d7f1941f45c251cc1aae47e45be2e3d23e1067cf98d87c6a14d15dbcce22c7970ad05a4fb298361ccf7d6d904f286191d7ac39be847bee8237b088c62cd
SHA512 (crypto-policies-git5203b41.tar.gz) = bc9a88e2a953c4ea6261a3b3fddf887bce1a3e8cf79d4e8ca8136cfc54e047fabf4f28c7a98fd553ddd26908ccbf607640ea59187c1d24b1a23f5798edf1d99e