crypto-policies-scripts-20210917.c9d86d1-150400.3.8.1<>,p̉gC@?@d+ 8 _( >_88 8 d8 D8 |8 8888   (89T:F0G08H18I28X2Y2\28]38^7 b9c:ed:e:f:l:u; 8v; w> 8x>8y?z??@7@@@D@T@X@\@b@Ccrypto-policies-scripts20210917.c9d86d1150400.3.8.1Tool to switch between crypto policiesThis package provides a tool update-crypto-policies, which applies the policies provided by the crypto-policies package. These can be either the pre-built policies from the base package or custom policies defined in simple policy definition files. The package also provides a tool fips-mode-setup, which can be used to enable or disable the system FIPS mode.gLGPL-2.1-or-laterhttps://www.suse.com/Productivity/Networking/Securityhttps://gitlab.com/redhat-crypto/fedora-crypto-policieslinuxnoarch2%WS,[<@IBIT sS !S^)#r+37Zrp:AA큤A큤A큤A큤A큤A큤A큤큤g`>` l` l` l__#pmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comdimstar@opensuse.orgpmonreal@suse.compmonreal@suse.compmonreal@suse.comdimstar@opensuse.orgpmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.compmonreal@suse.comvcizek@suse.com- Make the supported versions change in the update-crypto-policies(8) man page persistent [bsc#1209998]. * Add patch crypto-policies-supported.patch * Rebase patches: - crypto-policies-asciidoc.patch - crypto-policies-no-build-manpages.patch- FIPS: Adapt the fips-mode-setup script to use the pbl command from the perl-Bootloader package to replace grubby. Add a note for transactional systems. Ship the man 8 pages for fips-mode-setup and fips-finish-install [jsc#PED-5041]. * Rebase crypto-policies-FIPS.patch- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup and fips-finish-install commands, add also the man pages. * Adapt the fips-mode-setup script for SLE [jsc#PED-5041] * Rebase crypto-policies-FIPS.patch * Simplify the man pages creation: - Rebase crypto-policies-no-build-manpages.patch - Add crypto-policies-asciidoc.patch- Update the update-crypto-policies(8) man pages and README.SUSE to mention the supported back-end policies. [bsc#1209998]- Remove the scripts and documentation regarding fips-finish-install and test-fips-setup * Add crypto-policies-FIPS.patch- Update to version 20210917.c9d86d1: * openssl: fix disabling ChaCha20 * pacify pylint 2.11: use format strings * pacify pylint 2.11: specify explicit encoding * fix minor things found by new pylint * update-crypto-policies: --check against regenerated * update-crypto-policies: fix --check's walking order * policygenerators/gnutls: revert disabling DTLS0.9... * policygenerators/java: add javasystem backend * LEGACY: bump 1023 key size to 1024 * cryptopolicies: fix 'and' in deprecation warnings * *ssh: condition ecdh-sha2-nistp384 on SECP384R1 * nss: hopefully the last fix for nss sigalgs check * cryptopolicies: Python 3.10 compatibility * nss: postponing check + testing at least something * Rename 'policy modules' to 'subpolicies' * validation.rules: fix a missing word in error * cryptopolicies: raise errors right after warnings * update-crypto-policies: capitalize warnings * cryptopolicies: syntax-precheck scope errors * .gitlab-ci.yml, Makefile: enable codespell * all: fix several typos * docs: don't leave zero TLS/DTLS protocols on * openssl: separate TLS/DTLS MinProtocol/MaxProtocol * alg_lists: order protocols new-to-old for consistency * alg_lists: max_{d,}tls_version * update-crypto-policies: fix pregenerated + local.d * openssh: allow validation with pre-8.5 * .gitlab-ci.yml: run commit-range against upstream * openssh: Use the new name for PubkeyAcceptedKeyTypes * sha1_in_dnssec: deprecate * .gitlab-ci.yml: test commit ranges * FIPS:OSPP: sign = -*-SHA2-224 * scoped policies: documentation update * scoped policies: use new features to the fullest... * scoped policies: rewrite + minimal policy changes * scoped policies: rewrite preparations * nss: postponing the version check again, to 3.64 - Remove patches fixed upstream: crypto-policies-typos.patch - Rebase: crypto-policies-test_supported_modules_only.patch - Merge crypto-policies-asciidoc.patch into crypto-policies-no-build-manpages.patch- Update to version 20210225.05203d2: * Disable DTLS0.9 protocol in the DEFAULT policy. * policies/FIPS: insignificant reformatting * policygenerators/libssh: respect ssh_certs * policies/modules/OSPP: tighten to follow RHEL 8 * crypto-policies(7): drop not-reenableable comment * follow up on disabling RC4- Remove not needed scripts: fips-finish-install fips-mode-setup- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938] * The minimum DTLS protocol version in the DEFAULT and FUTURE policies is DTLS1.2. * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e- Update to version 20210213.5c710c0: [bsc#1180938] * setup_directories(): perform safer creation of directories * save_config(): avoid re-opening output file for each iteration * save_config(): break after first match to avoid unnecessary stat() calls * CryptoPolicy.parse(): actually stop parsing line on syntax error * ProfileConfig.parse_string(): correctly extended subpolicies * Exclude RC4 from LEGACY * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT * code style: fix 'not in' membership testing * pylintrc: tighten up a bit * formatting: avoid long lines * formatting: use f-strings instead of format() * formatting: reformat all python code with autopep8 * nss: postponing the version check again, to 3.61 * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"- Use tar_scm service, not obs_scm: With crypto-policies entering Ring0 (distro bootstrap) we want to be sure to keep the buildtime deps as low as possible. - Add python3-base BuildRequires: previously, OBS' tar service pulled this in for us.- Add a BuildIgnore for crypto-policies- Use gzip instead of xz in obscpio and sources- Do not build the manpages to avoid build cycles - Add crypto-policies-no-build-manpages.patch- Convert to use a proper git source _service: + To update, one just needs to update the commit/revision in the _service file and run `osc service dr`. + The version of the package is defined by the commit date of the revision, followed by the abbreviated git hash (The same revision used before results thus in a downgrade to 20210118, but as this is a alltime new package, this is acceptable.- Update to git version 20210127 * Bump Python requirement to 3.6 * Output sigalgs required by nss >=3.59 * Do not require bind during build * Break build cycles with openssl and gnutls- Update to git version 20210118 * Output sigalgs required by nss >=3.59 * Bump Python requirement to 3.6 * Kerberos 5: Fix policy generator to account for macs * Add AES-192 support (non-TLS scenarios) * Add documentation of the --check option- Fix the man pages generation - Add crypto-policies-asciidoc.patch- Test only supported modules - Add crypto-policies-test_supported_modules_only.patch- Add crypto-policies-typos.patch to fix some typos- Initial packaging, git version 20200918 (jsc#SLE-15832)h01-ch4c 1732012578  !"#$%&'()*+,-./01234567820210917.c9d86d1-150400.3.8.1  fips-finish-installfips-mode-setupupdate-crypto-policiespython__pycache__build-crypto-policies.cpython-36.pycupdate-crypto-policies.cpython-36.pycbuild-crypto-policies.pycryptopolicies__init__.py__pycache____init__.cpython-36.pycalg_lists.cpython-36.pyccryptopolicies.cpython-36.pycalg_lists.pycryptopolicies.pyvalidation__init__.py__pycache____init__.cpython-36.pycalg_lists.cpython-36.pycgeneral.cpython-36.pycrules.cpython-36.pycscope.cpython-36.pycalg_lists.pygeneral.pyrules.pyscope.pypolicygenerators__init__.py__pycache____init__.cpython-36.pycbind.cpython-36.pycconfiggenerator.cpython-36.pycgnutls.cpython-36.pycjava.cpython-36.pyckrb5.cpython-36.pyclibreswan.cpython-36.pyclibssh.cpython-36.pycnss.cpython-36.pycopenssh.cpython-36.pycopenssl.cpython-36.pycbind.pyconfiggenerator.pygnutls.pyjava.pykrb5.pylibreswan.pylibssh.pynss.pyopenssh.pyopenssl.pyupdate-crypto-policies.pyfips-finish-install.8.gzfips-mode-setup.8.gzupdate-crypto-policies.8.gz/usr/bin//usr/share/crypto-policies//usr/share/crypto-policies/python//usr/share/crypto-policies/python/__pycache__//usr/share/crypto-policies/python/cryptopolicies//usr/share/crypto-policies/python/cryptopolicies/__pycache__//usr/share/crypto-policies/python/cryptopolicies/validation//usr/share/crypto-policies/python/cryptopolicies/validation/__pycache__//usr/share/crypto-policies/python/policygenerators//usr/share/crypto-policies/python/policygenerators/__pycache__//usr/share/man/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36476/SUSE_SLE-15-SP4_Update/195f4c3480d26389a4fa7f7dea5c4ed0-crypto-policies.SUSE_SLE-15-SP4_Updatedrpmxz5noarch-suse-linuxBourne-Again shell script, ASCII text executablea /usr/bin/sh script, ASCII text executabledirectorypython 3.6 byte-compiledPython script, UTF-8 Unicode text executablePython script, ASCII text executabletroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)RRRRRgh7YC/usr/bin/update-crypto-policies --no-check >/dev/null 2>/dev/null || :/bin/shperl-Bootloaderutf-8428e80292e8d47036d49c13937414ae4060ea5a960049b2680ab5e504248f322?7zXZ !t/P+z]"k%*6l"3ג_ib}k5+ =Vs~d tؑo@e-Cڟpe3Y8֕1dqYzT`-ȊTF(;3K՟Qz1ɯxAktv|j׎b7s tGJ<("kzl[nl& x$ٵg۪.1n6 :GT\4:gIvoVYd h'~cŗnf2f؍Am}Y:RLC?q/#! 5WM3da1S_4uG:gU~Mn/Zaxw~}yp\Q>$3V%#r - FI-:s|.Uo:J!rnAYniQRf)* 䙋Z`[o!v:a00mpX|hzG#"xMXFgV*X/<}>ݏm-Wl 6XQ1쬋.1t4U@0(Ϳ.uq'?,j4;; cHrG0əEʈPFo|-D;~6U]F̱Iaڧⅽs]sj.'7;PBZ|h^:QicνʕߩMJRb@&>N{ODܒw2kLre'P[̯6n,m  L waD\e7ݬ(hޙ>w7; ?R(HQuTDDת*5"m tSƴ }N!c!aZ4م=wc:rrf?yUF-wBq}M`cꤜU8#yS -nRLXy`ンC;1ĘqzN7aCPț(Fh*+ q̷﬑mr]>?3s˛V +7ol]!sqJlYgmv=wӭCR% ^4P۰414\^D̒O.9#/ ,sVo[ecZZ*lHiئ1զ@ݢcRS;!3R4/j<=xKdّɪ /Vɹ"(u}w>[Nyu $"m6];g7CJNtZ}HVh|XLl}<;~МaG%9 '9$jD:TuW辔U',/}J>蓚~CFqtFAp`6{ Cƚ+!N$=˞%e⸵Zɜ f$r22W!3k.#wۗ c|˻;k-V4ЩwkЦgFi SGջx~eg'GX55u!DžaGim(fJl$gIc .=u>/pvC}-z{y r[+O\WmA6 r(J*Q^:[%@hϣ_O0W柀IdVAՍRx]%~i 6~O> >39<"m^ s?!1Kfq+{@1! zQE9ek,60f9IS`ꁓT$*p5{@,g\-HrOc1c XJmrWޝԧoMs}ɼ >?u9- :`W!b&!UrpejzJ,A 1xQbxgO܎_Z'Z}6cedQ ŀe.w k|Ie"L"{W$&mhk5KX>:6ܲ(UDI>N%bY7l+z.<lوr%k[Z{K>˄ @K7ɸ^}gY" :,c)S]%沖xOks!RAiC…ӫIu%N5h𹡲l4/tCT&Zf1}T[zO"E. A^}*ax\!_AV%D)}O+d,Z#ɟvusr 7R=y+v-ՉB[*!cM‡cVڇrnL4t\ҝb6f8[@IjXx64w%MIAao瑿%FVogXU*sA"Btߓ6NR`iYrbQkTyPJv4 0*ˈ%+a0|1Eۉ̝|y.lDOpk9$"{<hC2BaZr,*{>eVcOk钃4Qbم KjD@5 @LLոŵrcNv8rq~L6!`y?G]CޮWkbNᗳ>A,>p]:4˃+D#Y?/3D܍L+NwryH%HX 6|KynSl>yyWQ\L/~ma`Mq-I@-kLd8B.iqG=۴2Nς0~"NlHY|>&iY*va 3`6%.{{ qٽTAe|bNL0M  NRzK;PGsjk ±IC{ 3XP|5%d2x{gO]fP+m| U'YsP!u;kJ-؛ {@5I`Zl߹woM0ߑzl_+{B岊nCVu2W@ եd(5E4#^M$ԙ2`ǰZV>TP7ՎST ryx8(biuGd\|ֲƵ[3JxOYa 6=XQN:)0ȹ@oz_q5 }l6Y<%pw=»68>ǘmKy2 jgCߘSI˳+$uN 8A? 6YǍ豋o z칗(Jƒ!1Ҏ(.Y*uݶT,tvzYdzyh]#K.zNcu]޹d@?鸱/MȎ%M's7ю?[N6 qs휚sGZI![H^(oRpA0kW.HSO qŭ3KIQf'8b̄ۀIn G i$e̤rT/L\:xl22%ЭY5m!NJHV}G'0:%eQ`ϴ$dӂhDS[/ѐ#QPulx> Y#yy{Li/8݆ L\ڶL#f:m-_/ k6 E.pLy@b] 0 '(DjI w)v72p2frMǐWU)ʟJpA6m+PCLAzo/vL&ƃABx>q8&SMܡ[JiP¸֧Cz̻J?S621@dre>}g|1}z{@,)tp@\ @ؒ42.l;އ4Mpk?tz(Uů]Źe@wC^ y>srDf R5%0{"V+PCBs.u!b&4JD`\"J}WV.A98!%ّB2Kx{?5 ~@^˗pkd \eսhI@}f_'OͲP!!Mr3\/۔`@-?(e tXʇer#V4Y neAQԺmg+]s2ۋ}:DGN |W0I#!&S7gIK,p6yLgJl'~ &e$5 c2Ww9u"{-x/ ]mKrd  ?ڴ@1QQ!{Hjf-ȓRū撜[]늍{2|Dɔa CyFFL:TvߛcSvSGk65~ޚ{ڱ-T^5]i[]^ IYPF Lofs/]nKDY)T`mt3?@2 <`j3 ( Db|6m9AIddY 2GxCW.(l K[Vp_s,do6C]vJ8,5#k}WnOO~J%oUFyޓfނ a^Lg$TW[灱*kM˘ճ?ĆY.[!T,w3ڈMQD$w[$fGD~?T4Z0<{<:+ (h}bk+H@EŤ'-i4ŭ[*h&UYt7>M0BwEdW) >ڨlEGCkZCz _e3ߦRd~XBlԼ%MI` Do!-q ^^Fr,YzE78͛0(P@A<ĉ ɵãF3Ä̉m&3v35[ fO=FIP^PZkFyv{Q=Dqgt->un[{ov!tLItkH܆-"\ ,1wj?dok.=X2kD*z>uS6"zi8#r߄#Mll3r5OR4mG138_ķ)ɢV:m׉"q!kł' ;UGpZk:yB/Ң~~KH!U^.?>q9-7#67[M?A,;42x_7>^ҧ-xyC.S c&_1>rg`9pމ 2+>E=r@"ǹim җ@u)7kQg2j>#b)d+0|!ʰ!֟E>9-*L İydmh@j 5^k s"= 0T Bogl : e7)D{ c Y5C*:A=@?{D5Q}>\EƁH_v G|UQ3bY^뿄~/o'!"qiBr 8bi؈!zn^p*uw66Lc810F>) 4`!XkCċ}42t;^wtv(1Ԉ tR#R3',k 瞈sTq2\Ĭ (n>||҅~ K+0;RA< g o)(>C;{hז'Db }9!2.Aj [qȴ,s驅6oDA *jL<^DvHVd\䗲[+AqPhV!qa=$Jtxe o<MK 8:@T6=F`ٟc܊_I>?d3pas~9 ,*PjAߏk5N8n t+]T=\/b<ґWz[rTYugOkDx !Q3uA֑>]os'OtśEbD7`E?u=$?3J/IKK騮 1_= 5ȵ D!r>aT7AL4X~%kxw2x4 e}ɀeI w%jN&؀(oq?tҽšR?d`K.Z@9Љfq%GsI@HX? c.sDIu077zNRdWj2xB.9 Kxz.eϩsB:ܞπX\%7n#6Eye E︎b\ݖ(ǰ`'r^"vl-@8RwĚ9lBܟ|5-K`"ɪeerlZ3,- AÙ)+km:&՟@yjE8NsSxJ[:Vt1ɟƆmO{\4!{73T'WS6E]Bw HT a6ʾ`J9j U]""ңHڏ;G@GIfō؟@O /<~xC2j @wwS<%q@ަHǸuOY\*+E|ɋ+~+X0sD2ez d3Z3GƩxX2S4}|Qkw>"NI`-u@X5~Ea_D490d"v9+!R6)5v~W)sb4iw}Y8$р#T4y[$  :}UB9vq(EÚL/ƑW[n:N[s{|]~35k,|06iPC8}FYs*{i"CVr/⾌ae.ˁqmm ՃIp!%*,h ^G @J/Ujs٨;_uUd{.:3ѳr +]EfO]g~ ߊ2)''!Jg-~M\NԳ! ;BKQܓ)&*Rv70^?3 #>bvk@xkW^i E^ŀr 02 ;²&Eojx֘+ JJu;!kAb= bczA@k 7N{VNx4hOR+( (P  ia:% =J?;pnuOi &7Ƣ;vOzAkt/"mfÎ$5fwO`9O>MLZ CJ[PSL^>bRD-TG۝501Ep~M8W3l YZ