Systemwide crypto policies
410734bda5
- nss: wire KYBER768 to XYBER768D00 - java: start controlling / disable DTLSv1.0 - java: disable anon ciphersuites, tying them to NULL - java: respect more key size restrictions - java: specify jdk.tls.namedGroups system property - java: make hash, mac and sign more orthogonal - fips-mode-setup: add another scary "unsupported" - fips-mode-setup: flashy ticking warning upon use - java: use and include jdk.disabled.namedCurves - ec_min_size: introduce and use in java, default to 256 - java: stop specifying jdk.tls.namedGroups in javasystem - java: drop unused javasystem backend - openssh: make dss no longer enableble, support is dropped - LEGACY: disable sign = *-SHA1 - DEFAULT: disable RSA key exchange - nss: TLS-REQUIRE-EMS in FIPS Resolves: RHEL-36300 Resolves: RHEL-50106 Resolves: RHEL-50464 Related: RHEL-18442 Related: RHEL-28848 Related: RHEL-45618 Related: RHEL-45620 Related: RHEL-5206 |
||
|---|---|---|
| .gitignore | ||
| crypto-policies.spec | ||
| gating.yaml | ||
| sources | ||