Systemwide crypto policies
97f868f515
- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones - FIPS: enforce EMS in FIPS mode - NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode - nss: implement EMS enforcement in FIPS mode (disabled in ELN) - openssl: implement EMS enforcement in FIPS mode - gnutls: implement EMS enforcement in FIPS mode (disabled in ELN) - docs: replace `FIPS 140-2` with just `FIPS 140` Resolves: bz2225222 Resolves: bz2222734 Resolves: bz2216257 |
||
|---|---|---|
| .gitignore | ||
| crypto-policies.spec | ||
| gating.yaml | ||
| sources | ||