Update from upstream (ostree, java chacha20)

.crypto-policies.metadata

@@ -0,0 +1 @@
+61d1e62750bb43415038892681dd29637832ee4d crypto-policies-git283706d.tar.gz

crypto-policies.spec

@@ -1,5 +1,5 @@
-%global git_date 20231113
-%global git_commit e9247c2b86669a983824300002a0f8fc9e8ce333
+%global git_date 20240202
+%global git_commit 283706dbc258f4ac0b19b3291bc18f9b691b222f
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -36,7 +36,9 @@ URL:            https://gitlab.com/redhat-crypto/fedora-crypto-policies
 # For RHEL-9 we use the upstream branch rhel9.
 Source0:        https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/archive/%{git_commit_hash}/%{name}-git%{git_commit_hash}.tar.gz
 
+%if 0%{?rhel} >= 10
 ExclusiveArch: %{java_arches} noarch
+%endif
 BuildArch: noarch
 BuildRequires: asciidoc
 BuildRequires: libxslt
@@ -239,6 +241,12 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Fri Feb 02 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20240202-1.git283706d
+- fips-finish-install: make sure ostree is detected in chroot
+- fips-mode-setup: make sure ostree is detected in chroot
+- fips-finish-install: Create/remove /etc/system-fips on ostree systems
+- java: disable ChaCha20-Poly1305 where applicable
+
 * Mon Nov 13 2023 Clemens Lang <cllang@redhat.com> - 20231113-1.gite9247c2
 - fips-mode-setup: Fix test for empty /boot (RHEL-11350)
 - fips-mode-setup: Avoid 'boot=UUID=' if /boot == / (RHEL-11350)

sources

@@ -1 +1 @@
-SHA512 (crypto-policies-gite9247c2.tar.gz) = 0d3468861a7d4bce144ac700fec22ab0eab90c07056c86113a1786158dd65bb16eb5e80a16112deb566d7f0a5409a50a908b0aa8e4ebf609129c43a0dd725dfb
+SHA512 (crypto-policies-git283706d.tar.gz) = 7d25f1549e7c3dfbd47512f1c7f22baf6ed2a24b328d80150b5ed4adfcc6dcdd97e5a777429fa9d2aa82bdef554a147dccbd8e5247cd05bf4ac18eeaaabdcb20