Skip to content

Commit

Permalink
use legacy crypto policy on el9
Browse files Browse the repository at this point in the history
recent openssl dropped support for sha1 algo but COPR and several
other packaging systems are still signing RPMS with sha1.
In order to be able to install RPMs switching from default crypto policy
to legacy one untill RPMS with newer sha signature will be provided.

Signed-off-by: Sandro Bonazzola <sbonazzo@redhat.com>
  • Loading branch information
sandrobonazzola committed Mar 8, 2022
1 parent 51d1e88 commit 0abd647
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions data/distro-defs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -52,6 +52,9 @@ c9s:
crb: --metalink=https://mirrors.centos.org/metalink?repo=centos-crb-$stream&arch=$basearch
needed_repos:
- |
dnf install -y crypto-policies-scripts crypto-policies
# until https://pagure.io/copr/copr/issue/2106 is fixed
update-crypto-policies --set LEGACY
rpm --import https://download.copr.fedorainfracloud.org/results/ovirt/ovirt-master-snapshot/pubkey.gpg
dnf --repofrompath=ovirt-master-snapshot,https://download.copr.fedorainfracloud.org/results/ovirt/ovirt-master-snapshot/centos-stream-9-x86_64/ install -y ovirt-release-master
dnf config-manager --set-enabled crb || true
Expand Down

0 comments on commit 0abd647

Please sign in to comment.