.crypto-policies.metadata

@@ -1 +1 @@
-d9eb22b50432da7a60db16fde7ac127078933ed1 SOURCES/crypto-policies-gitae470d6.tar.gz
+731e23be60f0b6183f8d37978c36a07377ebc47a SOURCES/crypto-policies-git3177e06.tar.gz

.gitignore

@@ -1 +1 @@
-SOURCES/crypto-policies-gitae470d6.tar.gz
+SOURCES/crypto-policies-git3177e06.tar.gz

SPECS/crypto-policies.spec

@@ -1,5 +1,5 @@
-%global git_date 20211116
-%global git_commit ae470d6c5ee633d77c3ae9bcebf748fb3dad9507
+%global git_date 20230731
+%global git_commit 3177e06c203c082d479760337c7cad65a4dcc81e
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -121,10 +121,12 @@ if not posix.access("%{_sysconfdir}/crypto-policies/config") then
     end
     local policypath = "%{_datarootdir}/crypto-policies/"..policy
     for fn in posix.files(policypath) do
-        local backend = fn:gsub(".*/", ""):gsub("%%..*", "")
-        local cfgfn = "%{_sysconfdir}/crypto-policies/back-ends/"..backend..".config"
-        posix.unlink(cfgfn)
-        posix.symlink(policypath.."/"..fn, cfgfn)
+        if fn ~= "." and fn ~= ".." then
+            local backend = fn:gsub(".*/", ""):gsub("%%..*", "")
+            local cfgfn = "%{_sysconfdir}/crypto-policies/back-ends/"..backend..".config"
+            posix.unlink(cfgfn)
+            posix.symlink(policypath.."/"..fn, cfgfn)
+        end
     end
 end
 
@@ -186,6 +188,16 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Tue Jul 31 2023 Alexander Sosedkin <asosedkin@redhat.com> - 20230731-1.git3177e06
+- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
+- krb5: fix policy generator to account for macs
+- docs: replace `FIPS 140-2` with just `FIPS 140`
+
+* Thu Dec 15 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20221215-1.gitece0092
+- bind: expand the list of disableable algorithms
+- tests/java: fix java.security.disableSystemPropertiesFile=true
+- stop accidentally creating /etc/crypto-policies/back-ends/.config symlink
+
 * Tue Nov 16 2021 Alexander Sosedkin <asosedkin@redhat.com> - 20211116-1.gitae470d6
 - OSPP: relax -ECDSA-SHA2-512, -FFDHE-*
 - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)