From dfc160dca675632fc5180b9c670452805b488ff1 Mon Sep 17 00:00:00 2001 From: Alexander Sosedkin Date: Wed, 8 Jul 2026 16:44:31 +0200 Subject: [PATCH] Update from upstream (NO-SHA1 -> NO-HMAC-SHA1, java fix) - NO-SHA1: drop this subpolicy since it's not doing much - NO-HMAC-SHA1: introduce a new subpolicy - java: fix MD5withECDSA concatenating with RIPEMD160withRSA Resolves: RHEL-150100 --- crypto-policies.spec | 11 ++++++++--- sources | 2 +- 2 files changed, 9 insertions(+), 4 deletions(-) diff --git a/crypto-policies.spec b/crypto-policies.spec index b664617..3fefbb7 100644 --- a/crypto-policies.spec +++ b/crypto-policies.spec @@ -1,5 +1,5 @@ -%global git_date 20260525 -%global git_commit f5f537031b86ab9efaecd5289b0a0d4104891986 +%global git_date 20260708 +%global git_commit 988eb15551df93af37f03599aeb1c3b837aa1a81 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})} %global _python_bytecompile_extra 0 @@ -208,8 +208,8 @@ exit 0 %{_datarootdir}/crypto-policies/policies/modules/AD-SUPPORT-LEGACY.pmod %{_datarootdir}/crypto-policies/policies/modules/ECDHE-ONLY.pmod %{_datarootdir}/crypto-policies/policies/modules/NO-ENFORCE-EMS.pmod +%{_datarootdir}/crypto-policies/policies/modules/NO-HMAC-SHA1.pmod %{_datarootdir}/crypto-policies/policies/modules/NO-PQ.pmod -%{_datarootdir}/crypto-policies/policies/modules/NO-SHA1.pmod %{_datarootdir}/crypto-policies/policies/modules/OSPP.pmod %{_datarootdir}/crypto-policies/policies/modules/TEST-PQ.pmod @@ -225,6 +225,11 @@ exit 0 %{_datarootdir}/crypto-policies/python %changelog +* Wed Jul 08 2026 Alexander Sosedkin - 20260708-1.git988eb15 +- NO-SHA1: drop this subpolicy since it's not doing much +- NO-HMAC-SHA1: introduce a new subpolicy +- java: fix MD5withECDSA concatenating with RIPEMD160withRSA + * Mon May 25 2026 Alexander Sosedkin - 20260525-1.gitf5f5370 - rpm-sequoia: revert force-enabling PQ algorithms - NO-SHA1: revive this subpolicy diff --git a/sources b/sources index 045ca07..98b6464 100644 --- a/sources +++ b/sources @@ -1 +1 @@ -SHA512 (crypto-policies-gitf5f5370.tar.gz) = e5ab45c6c6edc15700dca1c2d898786673c90eb8c3c1c45aa782a36aa6c79113fdf4ac3bb223aa3bfd6c21d3361bb677cd551ca319ceb11be02bb93c15a98af9 +SHA512 (crypto-policies-git988eb15.tar.gz) = bffd2c47f8b1063358cbd966b706b62f61775281ad96e0dcaaa97a1b04c82d9c73f0b24f2761e42f2d38d9acd518bbbf7c412f0372c5a91b06766028448032e2