Update from upstream (DNSSEC, SNTRUP):

- DEFAULT: drop DNSSEC SHA-1 exception
- openssh: add support for sntrup761x25519-sha512@openssh.com

Resolves: bz2070230
Resolves: bz2070604
This commit is contained in:
Alexander Sosedkin 2022-03-31 14:59:06 +02:00
parent 8fed911d53
commit 9ee1288970
2 changed files with 7 additions and 4 deletions

View File

@ -1,5 +1,5 @@
%global git_date 20220223
%global git_commit 5203b41aba45a7596774bff439f6428deda778b8
%global git_date 20220404
%global git_commit 845c0c1b39acf96086b39a3bd87e079e40895604
%{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
%global _python_bytecompile_extra 0
@ -60,7 +60,6 @@ to enable or disable the system FIPS mode.
%autopatch -p1
%build
export OLD_GNUTLS=1 # FIXME: remove once gnutls-3.7.2-3 is in buildroot
%make_build
%install
@ -186,6 +185,10 @@ end
%{_mandir}/man8/fips-finish-install.8*
%changelog
* Mon Apr 04 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
- DEFAULT: drop DNSSEC SHA-1 exception
- openssh: add support for sntrup761x25519-sha512@openssh.com
* Wed Feb 23 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
- openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
- update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY

View File

@ -1 +1 @@
SHA512 (crypto-policies-git5203b41.tar.gz) = bc9a88e2a953c4ea6261a3b3fddf887bce1a3e8cf79d4e8ca8136cfc54e047fabf4f28c7a98fd553ddd26908ccbf607640ea59187c1d24b1a23f5798edf1d99e
SHA512 (crypto-policies-git845c0c1.tar.gz) = f7ada98f12e3391666fa13de8105f9062807dacd4853fc388ca2dad37214e434f1e6088239de12340ae3329b10db52a3598b9a0542314cfa3a6005cb64fd3bf0