Changelog for crypto-policies-scripts-20241011-1.git5930b9a.fc40.noarch.rpm :

* Fri Oct 11 2024 Alexander Sosedkin - 20241011-1.git5930b9a- nss: rewrite backend for 3.101- nss: be stricter with new purposes- LEGACY: enable 192-bit ciphers for nss pkcs12/smime
* Thu Jul 25 2024 Alexander Sosedkin - 20240725-1.git28d3e2d- TEST-PQ: update to bring more in line with rawhide
* Fri May 10 2024 Alexander Sosedkin - 20240510-1.gitd287a42- TEST-FEDORA41: add a new policy with __openssl_block_sha1_signatures = 1
* Sat Mar 02 2024 Jiri Vanek - 20240201-2.git9f501f3- Rebuilt for java-21-openjdk as system jdk
* Thu Feb 01 2024 Alexander Sosedkin - 20240201-1.git9f501f3- fips-finish-install: make sure ostree is detected in chroot- fips-mode-setup: make sure ostree is detected in chroot- java: disable ChaCha20-Poly1305 where applicable
* Wed Jan 24 2024 Fedora Release Engineering - 20231204-3.git1e3a2e4- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Fri Jan 19 2024 Fedora Release Engineering - 20231204-2.git1e3a2e4- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild
* Mon Dec 04 2023 Alexander Sosedkin - 20231204-1.git1e3a2e4- TEST-PQ: add a subpolicy to test post-quantum algorithms. Do not rely on.
* Mon Nov 13 2023 Clemens Lang - 20231113-1.gitb402e82- fips-mode-setup: Write error messages to stderr- fips-mode-setup: Fix some shellcheck warnings- fips-mode-setup: Fix test for empty /boot- fips-mode-setup: Avoid \'boot=UUID=\' if /boot == /
* Thu Nov 09 2023 Clemens Lang - 20231109-1.gitadb5572- Restore support for scoped ssh_etm directives- Print matches in syntax deprecation warnings
* Tue Nov 07 2023 Clemens Lang - 20231107-1.gitd5877b3- fips-mode-setup: Fix usage with --no-bootcfg
* Tue Nov 07 2023 Clemens Lang - 20231107-1.git8f49dfa- turn ssh_etm into an etmAATTSSH tri-state- fips-mode-setup: increase chroot-friendliness (rhbz#2164847)
* Wed Sep 20 2023 Alexander Sosedkin - 20230920-1.git570ea89- OSPP subpolicy: tighten beyond reason for OSPP 4.3- fips-mode-setup: more thorough --disable, still unsupported
* Tue Jul 25 2023 Alexander Sosedkin - 20230731-1.git5ed06e0- BSI: start a BSI TR 02102 policy- krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones- FIPS: enforce EMS in FIPS mode- NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode- nss: implement EMS enforcement in FIPS mode (not enabled yet)- openssl: implement EMS enforcement in FIPS mode- gnutls: implement EMS enforcement in FIPS mode (not enabled yet)- docs: replace `FIPS 140-2` with just `FIPS 140`
* Wed Jul 19 2023 Fedora Release Engineering - 20230614-2.git5f3458e- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Wed Jun 14 2023 Alexander Sosedkin - 20230614-1.git5f3458e- policies: restore group order to old OpenSSL default order
* Thu Apr 20 2023 Alexander Sosedkin - 20230420-1.git3d08ae7- openssl: specify Groups explicitly- openssl: add support for Brainpool curves
* Wed Mar 01 2023 Alexander Sosedkin - 20230301-1.git2ea6d2a- rpm-sequoia: add separate rpm-sequoia backend- DEFAULT: allow SHA-1 and 1024 bit DSA in RPM (https://pagure.io/fesco/issue/2960)
* Mon Feb 20 2023 Alexander Sosedkin - 20230220-1.git8c7de04- Makefile: support asciidoc 10
* Thu Jan 19 2023 Fedora Release Engineering - 20221215-2.gita4c31a3- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Thu Dec 15 2022 Alexander Sosedkin - 20221215-1.gita4c31a3- bind: expand the list of disableable algorithms
* Thu Nov 10 2022 Alexander Sosedkin - 20221110-1.git87a75f4- sequoia: introduce new backend- migrate license tag to SPDX