BSI: start a BSI TR 02102 policy
krb5: sort enctypes mac-first, cipher-second, prioritize SHA-2 ones
FIPS: enforce EMS in FIPS mode
NO-ENFORCE-EMS: add subpolicy to undo the EMS enforcement in FIPS mode
nss: implement EMS enforcement in FIPS mode (not enabled yet)
openssl: implement EMS enforcement in FIPS mode
gnutls: implement EMS enforcement in FIPS mode (not enabled yet)
docs: replace `FIPS 140-2` with just `FIPS 140`

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

policies: restore group order to old OpenSSL default order

openssl: specify Groups explicitly
openssl: add support for Brainpool curves

rpm-sequoia: add separate rpm-sequoia backend
DEFAULT: allow SHA-1 and 1024 bit DSA in RPM (https://pagure.io/fesco/issue/2960)

Makefile: support asciidoc 10

Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild

bind: expand the list of disableable algorithms

sequoia: introduce new backend
migrate license tag to SPDX

openssh: force RequiredRSASize option name

revert premature Fedora 38 Rawhide SHA-1 "jump scare" until

disable SHA-1 further for a Fedora 38 Rawhide "jump scare"
off Fedora 38,
crypto-policies --set FEDORA38` for the former, obsolete DEFAULT.
openssh: control HostbasedAcceptedAlgorithms
host.

openssh: add RSAMinSize option following min_rsa_size

tests/java: fix java.security.disableSystemPropertiesFile=true
docs: add customization recommendation

Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild

Rebuilt for Drop i686 JDKs