From Fedora Project Wiki
No edit summary |
No edit summary |
||
| Line 13: | Line 13: | ||
| || Java || https://bugzilla.redhat.com/show_bug.cgi?id=1249083 || F25 || Completed in F26 | | || Java || https://bugzilla.redhat.com/show_bug.cgi?id=1249083 || F25 || Completed in F26 | ||
|- | |- | ||
|SSH client || openssh || https://bugzilla.redhat.com/show_bug.cgi?id=1225752 || F25 || | |SSH client || openssh || https://bugzilla.redhat.com/show_bug.cgi?id=1225752 || F25 || Completed | ||
|- | |- | ||
|SSH server|| openssh || https://fedoraproject.org/wiki/Changes/OpenSSH_Server_Crypto_Policy || F27 || | |SSH server|| openssh || https://fedoraproject.org/wiki/Changes/OpenSSH_Server_Crypto_Policy || F27 || Completed | ||
|- | |- | ||
|Kerberos || krb5 || https://bugzilla.redhat.com/show_bug.cgi?id=1225792 || F24 || Completed (client side, KDC | |Kerberos || krb5 || https://bugzilla.redhat.com/show_bug.cgi?id=1225792 || F24 || Completed (client side, KDC wontfix) | ||
|- | |- | ||
|DNSSEC || BIND || https://bugzilla.redhat.com/show_bug.cgi?id=1179925 || F23 || Completed | |DNSSEC || BIND || https://bugzilla.redhat.com/show_bug.cgi?id=1179925 || F23 || Completed | ||
|} | |} | ||
Revision as of 10:51, 17 January 2018
The following table helps track the status of System wide crypto policies deployment within Fedora. The current deployment is restricted on SSL/TLS libraries, but the greater idea is to extend them to all applications which involve crypto. If you believe some existing crypto subsystem can benefit of them, contact me or open an issue in [1] for it.
| Functionality | Software involved | Tracker bugs | Planned for | Status |
|---|---|---|---|---|
| SSL/TLS | gnutls | https://bugzilla.redhat.com/show_bug.cgi?id=1179209 | F21 | Full policy support in F21. |
| openssl | https://bugzilla.redhat.com/show_bug.cgi?id=1179209 | F21 | Partial policy support (ciphersuites only) using custom patch in F21.
There is Upstream bug for incorporation. More complete support planned possibly with a downstream-only approach as upstream does not welcome such changes. | |
| NSS | https://bugzilla.redhat.com/show_bug.cgi?id=1157720 | F25 | Full policy support in F25. | |
| Java | https://bugzilla.redhat.com/show_bug.cgi?id=1249083 | F25 | Completed in F26 | |
| SSH client | openssh | https://bugzilla.redhat.com/show_bug.cgi?id=1225752 | F25 | Completed |
| SSH server | openssh | https://fedoraproject.org/wiki/Changes/OpenSSH_Server_Crypto_Policy | F27 | Completed |
| Kerberos | krb5 | https://bugzilla.redhat.com/show_bug.cgi?id=1225792 | F24 | Completed (client side, KDC wontfix) |
| DNSSEC | BIND | https://bugzilla.redhat.com/show_bug.cgi?id=1179925 | F23 | Completed |