crypto-policies-20210213-1.git5c710c0.fc34

Date	Author	Change
2021-02-13	Alexander Sosedkin <asosedkin at redhat dot com> - 20210213-1.git5c710c0	- exclude RC4 from LEGACY - introduce rc4_md5_in_krb5 to narrow AD_SUPPORT's impact - an assortment of small fixes
2021-01-27	Alexander Sosedkin <asosedkin at redhat dot com> - 20210127-2.gitb21c811	- fix comparison in %post lua scriptlet
2021-01-27	Alexander Sosedkin <asosedkin at redhat dot com> - 20210127-1.gitb21c811	- don't create /etc/crypto-policies/back-ends/.config in %post
2021-01-26	Fedora Release Engineering <releng at fedoraproject dot org> - 20210118-2.gitb21c811	- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
2021-01-18	Alexander Sosedkin <asosedkin at redhat dot com> - 20210118-1.gitb21c811	- output sigalgs required by nss >=3.59 (or 3.60 in Fedora case) - bump Python requirement to 3.6
2020-12-15	Alexander Sosedkin <asosedkin at redhat dot com> - 20201215-1.giteb57e00	- Kerberos 5: Fix policy generator to account for macs
2020-12-08	Alexander Sosedkin <asosedkin at redhat dot com> - 20201208-1.git70def9f	- add AES-192 support (non-TLS scenarios) - add documentation of the --check option
2020-09-23	Tomáš Mráz <tmraz at redhat dot com> - 20200918-1.git85dccc5	- add RSA-PSK algorithm support - add GOST algorithms support for openssl - add GOST-ONLY policy and fix GOST subpolicy - update-crypto-policies: added --check parameter to perform comparison of actual configuration files with the policy
2020-08-13	Tomáš Mráz <tmraz at redhat dot com> - 20200813-1.git66d4068	- libreswan: enable X25519 group - libreswan: properly disable FFDH in ECDHE-ONLY subpolicy - libreswan: add generation of authby parameter based on sign property - libssh: Add diffie-hellman-group14-sha256
2020-07-27	Fedora Release Engineering <releng at fedoraproject dot org> - 20200702-2.gitc40cede	- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

etc/
- crypto-policies/
  - back-ends/
    - bind.config
    - gnutls.config
    - java.config
    - krb5.config
    - libreswan.config
    - libssh.config
    - nss.config
    - openssh.config
    - opensshserver.config
    - openssl.config
    - opensslcnf.config
  - config
  - local.d/
  - policies/
    - modules/
  - state/
    - CURRENT.pol
    - current
usr/
- share/
  - crypto-policies/
    - DEFAULT/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - opensslcnf.txt
    - EMPTY/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - opensslcnf.txt
    - FIPS/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - opensslcnf.txt
    - FUTURE/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - opensslcnf.txt
    - LEGACY/
      - bind.txt
      - gnutls.txt
      - java.txt
      - krb5.txt
      - libreswan.txt
      - libssh.txt
      - nss.txt
      - openssh.txt
      - opensshserver.txt
      - openssl.txt
      - opensslcnf.txt
    - back-ends/
      - DEFAULT/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        opensslcnf.config
      - FIPS/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        opensslcnf.config
      - FUTURE/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        opensslcnf.config
      - LEGACY/
        
        bind.config
        
        gnutls.config
        
        java.config
        
        krb5.config
        
        libreswan.config
        
        libssh.config
        
        nss.config
        
        openssh.config
        
        opensshserver.config
        
        openssl.config
        
        opensslcnf.config
    - default-config
    - policies/
      - DEFAULT.pol
      - EMPTY.pol
      - FIPS.pol
      - FUTURE.pol
      - GOST-ONLY.pol
      - LEGACY.pol
      - NEXT.pol
      - modules/
        
        AD-SUPPORT.pmod
        
        ECDHE-ONLY.pmod
        
        FEDORA32.pmod
        
        GOST.pmod
        
        NO-CAMELLIA.pmod
        
        NO-SHA1.pmod
        
        OSPP.pmod
        
        SHA1.pmod
    - reload-cmds.sh
  - licenses/
    - crypto-policies/
      - COPYING.LESSER
  - man/
    - man7/
      - crypto-policies.7.gz

crypto-policies-20210213-1.git5c710c0.fc34 in Fedora 34

Changelog

Provides

Files