Commit Graph

3 Commits

Author SHA256 Message Date
b59bbd02a8 Accepting request 1114283 from home:pmonrealgonzalez:branches:security:tls
Update to latest version and update jira tracking number from jsc#PED-4578 to jsc#PED-5041

OBS-URL: https://build.opensuse.org/request/show/1114283
OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=23
2023-09-29 08:48:54 +00:00
c840e031b3 Accepting request 1099072 from home:pmonrealgonzalez:branches:security:tls
- Update to version 20230614.5f3458e:
  * policies: impose old OpenSSL groups order for all back-ends
  * Rebase patches:
    - crypto-policies-revert-rh-allow-sha1-signatures.patch
    - crypto-policies-supported.patch

OBS-URL: https://build.opensuse.org/request/show/1099072
OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=19
2023-07-17 10:01:21 +00:00
743dc266bd Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls
- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch

- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch

  * Skip not needed LibreswanGenerator and SequoiaGenerator:

OBS-URL: https://build.opensuse.org/request/show/1089054
OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=16
2023-05-25 16:40:03 +00:00