crypto-policies-scripts-20211115-1.git1b1c04c.fc36

Date	Author	Change
2021-11-15	Alexander Sosedkin <asosedkin at redhat dot com> - 20211115-1.git1b1c04c	- OSPP: relax -ECDSA-SHA2-512, -FFDHE-* - fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)
2021-09-17	Alexander Sosedkin <asosedkin at redhat dot com> - 20210917-1.gitc9d86d1	- openssl: fix disabling ChaCha20 - fix minor things found by pylint 2.11
2021-08-19	Alexander Sosedkin <asosedkin at redhat dot com> - 20210819-1.gitd0fdcfb	- gnutls: revert hard-disabling DTLS 0.9 - update-crypto-policies: fix --check's sorting when walking the directories - update-crypto-policies: always regenerate the policy to --check against - fix minor things found by new pylint
2021-07-21	Fedora Release Engineering <releng at fedoraproject dot org> - 20210621-2.gita0e819e	- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
2021-06-21	Alexander Sosedkin <asosedkin at redhat dot com> - 20210621-1.gita0e819e	- bump LEGACY key size requirements from 1023 to 1024 - add javasystem backend - *ssh: condition ecdh-sha2-nistp384 on SECP384R1 - set %verify(not mode) for backend sometimes-symlinks-sometimes-not
2021-06-15	Alexander Sosedkin <asosedkin at redhat dot com> - 20210615-1.giteed6c85	- implement scoped policies, e.g., cipher@SSH = ... - implement algorithm globbing, e.g., cipher@SSH = -*-CBC - deprecate derived properties: tls_cipher, ssh_cipher, ssh_group, ike_protocol, sha1_in_dnssec - deprecate unscoped form of protocol property - openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS - openssh: use PubkeyAcceptedAlgorithms instead of PubkeyAcceptedKeyTypes - libssh: respect ssh_certs - restrict FIPS:OSPP further - improve Python 3.10 compatibility - update documentation - expand upstream test coverage
2021-02-13	Alexander Sosedkin <asosedkin at redhat dot com> - 20210213-1.git5c710c0	- exclude RC4 from LEGACY - introduce rc4_md5_in_krb5 to narrow AD_SUPPORT's impact - an assortment of small fixes
2021-01-27	Alexander Sosedkin <asosedkin at redhat dot com> - 20210127-2.gitb21c811	- fix comparison in %post lua scriptlet
2021-01-27	Alexander Sosedkin <asosedkin at redhat dot com> - 20210127-1.gitb21c811	- don't create /etc/crypto-policies/back-ends/.config in %post
2021-01-26	Fedora Release Engineering <releng at fedoraproject dot org> - 20210118-2.gitb21c811	- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild

usr/
- bin/
  - fips-finish-install
  - fips-mode-setup
  - update-crypto-policies
- share/
  - crypto-policies/
    - python/
      - __pycache__/
        
        build-crypto-policies.cpython-310.opt-1.pyc
        
        build-crypto-policies.cpython-310.pyc
        
        update-crypto-policies.cpython-310.opt-1.pyc
        
        update-crypto-policies.cpython-310.pyc
      - build-crypto-policies.py
      - cryptopolicies/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-310.opt-1.pyc
        
        __init__.cpython-310.pyc
        
        alg_lists.cpython-310.opt-1.pyc
        
        alg_lists.cpython-310.pyc
        
        cryptopolicies.cpython-310.opt-1.pyc
        
        cryptopolicies.cpython-310.pyc
        
        alg_lists.py
        
        cryptopolicies.py
        
        validation/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-310.opt-1.pyc
        
        __init__.cpython-310.pyc
        
        alg_lists.cpython-310.opt-1.pyc
        
        alg_lists.cpython-310.pyc
        
        general.cpython-310.opt-1.pyc
        
        general.cpython-310.pyc
        
        rules.cpython-310.opt-1.pyc
        
        rules.cpython-310.pyc
        
        scope.cpython-310.opt-1.pyc
        
        scope.cpython-310.pyc
        
        alg_lists.py
        
        general.py
        
        rules.py
        
        scope.py
      - policygenerators/
        
        __init__.py
        
        __pycache__/
        
        __init__.cpython-310.opt-1.pyc
        
        __init__.cpython-310.pyc
        
        bind.cpython-310.opt-1.pyc
        
        bind.cpython-310.pyc
        
        configgenerator.cpython-310.opt-1.pyc
        
        configgenerator.cpython-310.pyc
        
        gnutls.cpython-310.opt-1.pyc
        
        gnutls.cpython-310.pyc
        
        java.cpython-310.opt-1.pyc
        
        java.cpython-310.pyc
        
        krb5.cpython-310.opt-1.pyc
        
        krb5.cpython-310.pyc
        
        libreswan.cpython-310.opt-1.pyc
        
        libreswan.cpython-310.pyc
        
        libssh.cpython-310.opt-1.pyc
        
        libssh.cpython-310.pyc
        
        nss.cpython-310.opt-1.pyc
        
        nss.cpython-310.pyc
        
        openssh.cpython-310.opt-1.pyc
        
        openssh.cpython-310.pyc
        
        openssl.cpython-310.opt-1.pyc
        
        openssl.cpython-310.pyc
        
        bind.py
        
        configgenerator.py
        
        gnutls.py
        
        java.py
        
        krb5.py
        
        libreswan.py
        
        libssh.py
        
        nss.py
        
        openssh.py
        
        openssl.py
      - update-crypto-policies.py
  - man/
    - man8/
      - fips-finish-install.8.gz
      - fips-mode-setup.8.gz
      - update-crypto-policies.8.gz

crypto-policies-scripts-20211115-1.git1b1c04c.fc36 in Fedora Rawhide

Changelog

Dependencies

Provides

Files