rpm/crypto-policies
SHA256
1
0
Fork 0
forked from pool/crypto-policies
Code Pull Requests Activity
220a4c63a6
crypto-policies/crypto-policies.changes

120 lines
4.9 KiB
Plaintext
Raw Normal View History

Accepting request 875107 from home:pmonrealgonzalez:branches:security:tls To be evaluated in Staging:O OBS-URL: https://build.opensuse.org/request/show/875107 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=12
2021-02-25 13:26:13 +01:00
-------------------------------------------------------------------
Thu Feb 25 12:05:39 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Update to version 20210225.05203d2:
* Disable DTLS0.9 protocol in the DEFAULT policy.
* policies/FIPS: insignificant reformatting
* policygenerators/libssh: respect ssh_certs
* policies/modules/OSPP: tighten to follow RHEL 8
* crypto-policies(7): drop not-reenableable comment
* follow up on disabling RC4
-------------------------------------------------------------------
Thu Feb 25 11:59:44 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Remove not needed scripts: fips-finish-install fips-mode-setup
-------------------------------------------------------------------
Wed Feb 24 16:22:08 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
* The minimum DTLS protocol version in the DEFAULT and FUTURE
policies is DTLS1.2.
* Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e
Accepting request 870817 from home:dimstar:Factory - Use tar_scm service, not obs_scm: With crypto-policies entering Ring0 (distro bootstrap) we want to be sure to keep the buildtime deps as low as possible. - Add python3-base BuildRequires: previously, OBS' tar service pulled this in for us. - Add a BuildIgnore for crypto-policies OBS-URL: https://build.opensuse.org/request/show/870817 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=10
2021-02-10 12:03:59 +01:00
-------------------------------------------------------------------
Accepting request 873431 from home:pmonrealgonzalez:branches:security:tls - Update to version 20210213.5c710c0: [bsc#1180938] * setup_directories(): perform safer creation of directories * save_config(): avoid re-opening output file for each iteration * save_config(): break after first match to avoid unnecessary stat() calls * CryptoPolicy.parse(): actually stop parsing line on syntax error * ProfileConfig.parse_string(): correctly extended subpolicies * Exclude RC4 from LEGACY * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT * code style: fix 'not in' membership testing * pylintrc: tighten up a bit * formatting: avoid long lines * formatting: use f-strings instead of format() * formatting: reformat all python code with autopep8 * nss: postponing the version check again, to 3.61 * Revert "Unfortunately we have to keep ignoring the openssh check for sk-" OBS-URL: https://build.opensuse.org/request/show/873431 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=11
2021-02-18 16:02:02 +01:00
Wed Feb 17 12:36:05 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Update to version 20210213.5c710c0: [bsc#1180938]
* setup_directories(): perform safer creation of directories
* save_config(): avoid re-opening output file for each iteration
* save_config(): break after first match to avoid unnecessary stat() calls
* CryptoPolicy.parse(): actually stop parsing line on syntax error
* ProfileConfig.parse_string(): correctly extended subpolicies
* Exclude RC4 from LEGACY
* Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
* code style: fix 'not in' membership testing
* pylintrc: tighten up a bit
* formatting: avoid long lines
* formatting: use f-strings instead of format()
* formatting: reformat all python code with autopep8
* nss: postponing the version check again, to 3.61
* Revert "Unfortunately we have to keep ignoring the openssh check for sk-"
-------------------------------------------------------------------
Accepting request 870817 from home:dimstar:Factory - Use tar_scm service, not obs_scm: With crypto-policies entering Ring0 (distro bootstrap) we want to be sure to keep the buildtime deps as low as possible. - Add python3-base BuildRequires: previously, OBS' tar service pulled this in for us. - Add a BuildIgnore for crypto-policies OBS-URL: https://build.opensuse.org/request/show/870817 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=10
2021-02-10 12:03:59 +01:00
Tue Feb 9 10:50:47 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
- Use tar_scm service, not obs_scm: With crypto-policies entering
Ring0 (distro bootstrap) we want to be sure to keep the buildtime
deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
pulled this in for us.
- Add a BuildIgnore for crypto-policies OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=9
2021-02-08 12:47:47 +01:00
-------------------------------------------------------------------
Mon Feb 8 11:45:38 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
Accepting request 870817 from home:dimstar:Factory - Use tar_scm service, not obs_scm: With crypto-policies entering Ring0 (distro bootstrap) we want to be sure to keep the buildtime deps as low as possible. - Add python3-base BuildRequires: previously, OBS' tar service pulled this in for us. - Add a BuildIgnore for crypto-policies OBS-URL: https://build.opensuse.org/request/show/870817 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=10
2021-02-10 12:03:59 +01:00
- Add a BuildIgnore for crypto-policies
- Add a BuildIgnore for crypto-policies OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=9
2021-02-08 12:47:47 +01:00
Accepting request 868718 from home:dimstar:Factory Let's use a real _service file. NOTE: the version is a small downgrade, but that's because I use %cd (aka commit date) as version identifier. in the _service file I used the same commit date, so in fact this is the same source. - Convert to use a proper git source _service: + To update, one just needs to update the commit/revision in the _service file and run `osc service dr`. + The version of the package is defined by the commit date of the revision, followed by the abbreviated git hash (The same revision used before results thus in a downgrade to 20210118, but as this is a alltime new package, this is acceptable. OBS-URL: https://build.opensuse.org/request/show/868718 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=7
2021-02-02 18:53:21 +01:00
-------------------------------------------------------------------
Accepting request 870258 from home:pmonrealgonzalez:branches:security:tls - Use gzip instead of xz in obscpio and sources - Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch OBS-URL: https://build.opensuse.org/request/show/870258 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=8
2021-02-08 12:33:22 +01:00
Mon Feb 8 11:22:31 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Use gzip instead of xz in obscpio and sources
-------------------------------------------------------------------
Fri Feb 5 10:57:46 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch
-------------------------------------------------------------------
Accepting request 868718 from home:dimstar:Factory Let's use a real _service file. NOTE: the version is a small downgrade, but that's because I use %cd (aka commit date) as version identifier. in the _service file I used the same commit date, so in fact this is the same source. - Convert to use a proper git source _service: + To update, one just needs to update the commit/revision in the _service file and run `osc service dr`. + The version of the package is defined by the commit date of the revision, followed by the abbreviated git hash (The same revision used before results thus in a downgrade to 20210118, but as this is a alltime new package, this is acceptable. OBS-URL: https://build.opensuse.org/request/show/868718 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=7
2021-02-02 18:53:21 +01:00
Tue Feb 2 17:38:27 UTC 2021 - Dominique Leuenberger <dimstar@opensuse.org>
- Convert to use a proper git source _service:
+ To update, one just needs to update the commit/revision in the
_service file and run `osc service dr`.
+ The version of the package is defined by the commit date of the
revision, followed by the abbreviated git hash (The same
revision used before results thus in a downgrade to 20210118,
but as this is a alltime new package, this is acceptable.
- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=3
2021-02-02 13:43:48 +01:00
-------------------------------------------------------------------
Tue Feb 2 12:33:19 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Update to git version 20210127
* Bump Python requirement to 3.6
* Output sigalgs required by nss >=3.59
* Do not require bind during build
* Break build cycles with openssl and gnutls
Accepting request 865444 from home:pmonrealgonzalez:branches:security:tls - Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option - Fix the man pages generation - Add crypto-policies-asciidoc.patch - Test only supported modules - Add crypto-policies-test_supported_modules_only.patch - Add crypto-policies-typos.patch to fix some typos OBS-URL: https://build.opensuse.org/request/show/865444 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=2
2021-01-21 15:53:23 +01:00
-------------------------------------------------------------------
Thu Jan 21 14:44:07 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Update to git version 20210118
* Output sigalgs required by nss >=3.59
* Bump Python requirement to 3.6
* Kerberos 5: Fix policy generator to account for macs
* Add AES-192 support (non-TLS scenarios)
* Add documentation of the --check option
-------------------------------------------------------------------
Thu Jan 21 14:42:13 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Fix the man pages generation
- Add crypto-policies-asciidoc.patch
-------------------------------------------------------------------
Thu Jan 21 09:56:42 UTC 2021 - Pedro Monreal <pmonreal@suse.com>
- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch
-------------------------------------------------------------------
Tue Dec 22 10:50:36 UTC 2020 - Pedro Monreal <pmonreal@suse.com>
- Add crypto-policies-typos.patch to fix some typos
Accepting request 850540 from home:vitezslav_cizek System crypto policies from Fedora. https://jira.suse.com/browse/SLE-15832 https://fedoraproject.org/wiki/Changes/CryptoPolicy OBS-URL: https://build.opensuse.org/request/show/850540 OBS-URL: https://build.opensuse.org/package/show/security:tls/crypto-policies?expand=0&rev=1
2020-11-25 12:15:23 +01:00
-------------------------------------------------------------------
Thu Nov 12 08:20:19 UTC 2020 - Vítězslav Čížek <vcizek@suse.com>
- Initial packaging, git version 20200918 (jsc#SLE-15832)
Copy Permalink