pool/crypto-policies
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
16 Commits 1 Branch 0 Tags 256 KiB
Diff 100%
743dc266bd
Go to file
Pedro Monreal Gonzalez 743dc266bd Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 
- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages. The
  required FIPS modules are left to be installed by the user.
  * Rebase crypto-policies-FIPS.patch

- Revert a breaking change that introduces the config option
  rh-allow-sha1-signatures that is unkown to OpenSSL and fails
  on startup. We will consider adding this option to openssl.
  * https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/commit/97fe4494
  * Add crypto-policies-revert-rh-allow-sha1-signatures.patch

  * Skip not needed LibreswanGenerator and SequoiaGenerator:

OBS-URL: https://build.opensuse.org/request/show/1089054
OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=16
2023-05-25 16:40:03 +00:00
_service Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
_servicedata Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
.gitattributes Accepting request 850540 from home:vitezslav_cizek 2020-11-25 11:15:23 +00:00
.gitignore Accepting request 850540 from home:vitezslav_cizek 2020-11-25 11:15:23 +00:00
crypto-policies-FIPS.patch Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00
crypto-policies-no-build-manpages.patch Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
crypto-policies-policygenerators.patch Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
crypto-policies-revert-rh-allow-sha1-signatures.patch Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00
crypto-policies-rpmlintrc Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
crypto-policies-supported.patch Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
crypto-policies.7.gz Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00
crypto-policies.changes Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00
crypto-policies.spec Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00
fedora-crypto-policies-20230420.3d08ae7.tar.gz Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
fips-finish-install.8.gz Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00
fips-mode-setup.8.gz Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00
README.SUSE Accepting request 1086482 from home:pmonrealgonzalez:branches:security:tls 2023-05-14 10:09:24 +00:00
update-crypto-policies.8.gz Accepting request 1089054 from home:pmonrealgonzalez:branches:security:tls 2023-05-25 16:40:03 +00:00

README.SUSE 

Currently, the supported back-end policies are:
  * OpenSSL library
  * GnuTLS library
  * OpenJDK (only for java-1_8_0-openjdk and java-11-openjdk)

The rest of the modules ignore the policy settings for the time being.