معرفی شرکت ها

crypto-policies-scripts-20220223-1.git5203b41.el9_0.1.noarch.rpm

Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر
Card image cap
تبلیغات ما

مشتریان به طور فزاینده ای آنلاین هستند. تبلیغات می تواند به آنها کمک کند تا کسب و کار شما را پیدا کنند.

مشاهده بیشتر

توضیحات

Tool to switch between crypto policies
ویژگی مقدار
سیستم عامل Linux
توزیع AlmaLinux 9
مخزن AlmaLinux BaseOS noarch
نام بسته crypto-policies-scripts
نام فایل بسته crypto-policies-scripts-20220223-1.git5203b41.el9_0.1.noarch.rpm
نسخه بسته 20220223
انتشار بسته 1.git5203b41.el9_0.1
معماری بسته noarch
نگهدارنده -
تاریخ ساخت Wed 18 May 2022 04
هاست سازنده almalinux-p9.osuosl.org
نوع بسته .rpm
آدرس صفحه اصلی https://gitlab.com/redhat-crypto/fedora-crypto-policies
مجوز LGPLv2+
حجم دانلود 81K
حجم نصب 223.042K
This package provides a tool update-crypto-policies, which applies the policies provided by the crypto-policies package. These can be either the pre-built policies from the base package or custom policies defined in simple policy definition files. The package also provides a tool fips-mode-setup, which can be used to enable or disable the system FIPS mode.


نیازمندی

مقدار نام
- /bin/sh
- /usr/bin/bash
- /usr/bin/python3
- /usr/bin/sh
= 20220223-1.git5203b41.el9_0.1 crypto-policies


ارائه دهنده

مقدار نام
= 20220223-1.git5203b41.el9_0.1 crypto-policies-scripts
= 20220223-1.git5203b41.el9_0.1 fips-mode-setup


نحوه نصب


نصب پکیج rpm crypto-policies-scripts:

    dnf install crypto-policies-scripts-20220223-1.git5203b41.el9_0.1.noarch.rpm


فایل ها

مسیرها
/usr/bin/fips-finish-install
/usr/bin/fips-mode-setup
/usr/bin/update-crypto-policies
/usr/share/crypto-policies/python
/usr/share/crypto-policies/python/__pycache__
/usr/share/crypto-policies/python/__pycache__/build-crypto-policies.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/__pycache__/build-crypto-policies.cpython-39.pyc
/usr/share/crypto-policies/python/__pycache__/update-crypto-policies.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/__pycache__/update-crypto-policies.cpython-39.pyc
/usr/share/crypto-policies/python/build-crypto-policies.py
/usr/share/crypto-policies/python/cryptopolicies
/usr/share/crypto-policies/python/cryptopolicies/__init__.py
/usr/share/crypto-policies/python/cryptopolicies/__pycache__
/usr/share/crypto-policies/python/cryptopolicies/__pycache__/__init__.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/__pycache__/__init__.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/__pycache__/alg_lists.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/__pycache__/alg_lists.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/__pycache__/cryptopolicies.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/__pycache__/cryptopolicies.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/alg_lists.py
/usr/share/crypto-policies/python/cryptopolicies/cryptopolicies.py
/usr/share/crypto-policies/python/cryptopolicies/validation
/usr/share/crypto-policies/python/cryptopolicies/validation/__init__.py
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/__init__.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/__init__.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/alg_lists.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/alg_lists.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/general.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/general.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/rules.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/rules.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/scope.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__/scope.cpython-39.pyc
/usr/share/crypto-policies/python/cryptopolicies/validation/alg_lists.py
/usr/share/crypto-policies/python/cryptopolicies/validation/general.py
/usr/share/crypto-policies/python/cryptopolicies/validation/rules.py
/usr/share/crypto-policies/python/cryptopolicies/validation/scope.py
/usr/share/crypto-policies/python/policygenerators
/usr/share/crypto-policies/python/policygenerators/__init__.py
/usr/share/crypto-policies/python/policygenerators/__pycache__
/usr/share/crypto-policies/python/policygenerators/__pycache__/__init__.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/__init__.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/bind.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/bind.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/configgenerator.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/configgenerator.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/gnutls.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/gnutls.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/java.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/java.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/krb5.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/krb5.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/libreswan.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/libreswan.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/libssh.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/libssh.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/nss.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/nss.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/openssh.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/openssh.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/openssl.cpython-39.opt-1.pyc
/usr/share/crypto-policies/python/policygenerators/__pycache__/openssl.cpython-39.pyc
/usr/share/crypto-policies/python/policygenerators/bind.py
/usr/share/crypto-policies/python/policygenerators/configgenerator.py
/usr/share/crypto-policies/python/policygenerators/gnutls.py
/usr/share/crypto-policies/python/policygenerators/java.py
/usr/share/crypto-policies/python/policygenerators/krb5.py
/usr/share/crypto-policies/python/policygenerators/libreswan.py
/usr/share/crypto-policies/python/policygenerators/libssh.py
/usr/share/crypto-policies/python/policygenerators/nss.py
/usr/share/crypto-policies/python/policygenerators/openssh.py
/usr/share/crypto-policies/python/policygenerators/openssl.py
/usr/share/crypto-policies/python/update-crypto-policies.py
/usr/share/man/man8/fips-finish-install.8.gz
/usr/share/man/man8/fips-mode-setup.8.gz
/usr/share/man/man8/update-crypto-policies.8.gz


گزارش تغییرات

تاریخ آخرین تغییر جزئیات
2022-04-04

DEFAULT: drop DNSSEC SHA-1 exception

2022-02-23

openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
fips-mode-setup: catch more inconsistencies, clarify --check

2022-02-03

gnutls: enable SHAKE, needed for Ed448
fips-mode-setup: improve handling FIPS plus subpolicies
FIPS: disable SHA-1 HMAC
FIPS: disable CBC ciphers except in Kerberos

2022-02-01

openssl: revert to SECLEVEL=2 in LEGACY
openssl: add newlines at the end of the output

2021-11-15

fips-mode-setup, fips-finish-install: call zipl more often (s390x-specific)

2021-09-22

openssl: fix disabling ChaCha20
update for pylint 2.11

2021-09-14

gnutls: reorder ECDSA-SECPMMMR1-SHANNN together with ECDSA-SHANNN
fix several issues with update-crypto-policies --check

2021-08-09

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

2021-07-07

gnutls: explicitly enable ECDSA-SECPNNNR1-SHANNN
packaging: adapt to the RHEL-9 %check-time testing tools availability

2021-06-28

implement scoped policies, e.g., cipher@SSH = ...
deprecate derived properties:
deprecate unscoped form of protocol property
openssl: set MinProtocol / MaxProtocol separately for TLS and DTLS
openssh: use PubkeyAcceptedAlgorithms instead of PubkeyAcceptedKeyTypes
libssh: respect ssh_certs
restrict FIPS:OSPP further
improve Python 3.10 compatibility
update documentation
expand upstream test coverage
FUTURE: disable CBC ciphers for all backends but krb5
openssl: LEGACY must have SECLEVEL=1, enabling SHA1
disable DHE-DSS in LEGACY
bump LEGACY key size requirements from 1023 to 1024
add javasystem backend
set %verify(not mode) for backend sometimes-symlinks-sometimes-not
gnutls: use allowlisting

2021-06-22

Rebuilt for RHEL 9 BETA for openssl 3.0

2021-04-15

Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

2021-02-18

require 2048 bit params in LEGACY
require TLSv1.2/DTLSv1.2 in all policies
disable DSA
disable 3DES in LEGACY
drop FFDHE-1024 from LEGACY
drop (sub)policies we're not going to offer in RHEL-9

2021-02-13

exclude RC4 from LEGACY
introduce rc4_md5_in_krb5 to narrow AD_SUPPORT's impact
an assortment of small fixes

2021-01-27

fix comparison in %post lua scriptlet

2021-01-27

don't create /etc/crypto-policies/back-ends/.config in %post