Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Utilize system-wide crypto-policies #523

Closed
gdha opened this issue Jan 6, 2015 · 2 comments
Closed

Utilize system-wide crypto-policies #523

gdha opened this issue Jan 6, 2015 · 2 comments

Comments

@gdha
Copy link
Member

gdha commented Jan 6, 2015

Received a RH bugzilla request: https://bugzilla.redhat.com/show_bug.cgi?id=1179239
Please convert to use the system's crypto policy for SSL and TLS:
https://fedoraproject.org/wiki/Packaging:CryptoPolicies

If this program is compiled against gnutls, change the default priority string to be "@System" or to use gnutls_set_default_priority().

If this program is compiled against openssl, and there is no default cipher list specified, you don't need to modify it. Otherwise replace the default cipher list with "PROFILE=SYSTEM".

In both cases please verify that the application uses the system's crypto policies.

If the package is already using the system-wide crypto policies, or it does not use SSL or TLS, no action is required, the bug can simply be closed.

@gdha gdha self-assigned this Jan 6, 2015
@gdha gdha added this to the Rear v1.17 milestone Jan 6, 2015
@gdha
Copy link
Member Author

gdha commented Jan 6, 2015

Probably has to do with prep/NETFS/default/09_check_encrypted_backup.sh and /etc/crypto-policies/config file (which is not yet included by default in rear image) on Fedora 21.

gdha added a commit that referenced this issue Jan 23, 2015
…default/09_check_encrypted_backup.sh)

- required for https://bugzilla.redhat.com/show_bug.cgi?id=1179239
- see all details in issue #523
@gdha
Copy link
Member Author

gdha commented Feb 16, 2015

added to the release notes so we can close this issue

@gdha gdha closed this as completed Feb 16, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant