[ol10_baseos_latest] crypto-policies-20250214-1.gitfd9b9b9.el10_0.1.noarch

Name:	crypto-policies
Version:	20250214
Release:	1.gitfd9b9b9.el10_0.1
Architecture:	noarch
Group:	Unspecified
Size:	112308
License:	LGPL-2.1-or-later
RPM:	crypto-policies-20250214-1.gitfd9b9b9.el10_0.1.noarch.rpm
Source RPM:	crypto-policies-20250214-1.gitfd9b9b9.el10_0.1.src.rpm
Build Date:	Thu Aug 07 2025
Build Host:	build-ol10-x86_64.oracle.com
Vendor:	Oracle America
URL:	https://gitlab.com/redhat-crypto/fedora-crypto-policies
Summary:	System-wide crypto policies
Description:	This package provides pre-built configuration files with cryptographic policies for various cryptographic back-ends, such as SSL/TLS libraries.

Changelog (Show File list) (Show related packages)

Wed Aug 06 2025 Darren Archibald <darren.archibald@oracle.com> - 20250214-1.gitfd9b9b9.el10_0.1
```
- AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9
```
Fri Feb 14 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250214-1.gitfd9b9b9
```
- openssl: use both names for P384-MLKEM1024
```

Tue Jan 28 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250128-1.git22421d3

- openssl: stricter enabling of Ciphersuites
- openssl: make use of -CBC and -AESGCM keywords

Thu Nov 28 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241128-1.git0dd441c
```
- openssl: add TLS 1.3 Brainpool identifiers
```

Tue Nov 26 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241126-1.gitd63f008

- alg_lists: mark MLKEM768 kex experimental
- openssh, libssh: refactor kx maps to use tuples
- openssh: map mlkem768x25519-sha256 to KEM-ECDH & MLKEM768-X25519 & SHA2-256
- update-crypto-policies: skip warning on --set=FIPS if bootc
- update-crypto-policies: don't output FIPS warning in fips mode

Wed Nov 06 2024 Clemens Lang <cllang@redhat.com> - 20241106-2.git7073416
```
- fips-mode-setup: Remove
  Resolves: RHEL-65652
```

Wed Nov 06 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241106-1.git1bdaba3

- gnutls: add GROUP-X25519-MLKEM768 and GROUP-SECP256R1-MLKEM768
- nss: add mlkem768x25519 and mlkem768secp256r1

Tue Nov 05 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241105-1.git978ac26
```
- gnutls: `allow-rsa-pkcs1-encrypt = false` everywhere but in LEGACY
```
Mon Nov 04 2024 Alexander Sosedkin <asosedkin@redhat.com> - 20241104-1.git6a67b8c
```
- openssl: use both names for SecP256r1MLKEM768 / X25519MLKEM768
```
Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 20241021-2.gitd5393d5
```
- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018
```