Re: F37 Proposal: Strong crypto settings: phase 3, forewarning 1/2 (System-Wide Change proposal)

2022-05-23 Thread Ian Pilcher
On 5/23/22 08:49, Ian Pilcher wrote: Just FYI, I managed to bang out a proof of concept of a "wrapper" that runs a program with a different crypto policy.  I've successfully used it to connect to a TLSv1-only HTTP server with both Firefox and curl on a Fedora 36 system running the

Re: F37 Proposal: Strong crypto settings: phase 3, forewarning 1/2 (System-Wide Change proposal)

2022-05-23 Thread Ian Pilcher
ot;wrapper" that runs a program with a different crypto policy. I've successfully used it to connect to a TLSv1-only HTTP server with both Firefox and curl on a Fedora 36 system running the DEFAULT crypto policy. https://bugzilla.redhat.com/show_b

Re: update-crypto-policies & Apache

2021-02-02 Thread Mr Brian Domenick
to enable Perfect Forwarding Secrecy (PFS) in Apache. I started by setting the options I wanted in Apache only to find that the SSL options for Ciphers are ignored in the Apache configuration and instead are pulled from /etc/crypto-policies/back-ends directory. I was able to disallow any TLS prot

update-crypto-policies & Apache

2021-02-02 Thread Jeffrey Ross via users
System is Fedora 33 I'm attempting to enable Perfect Forwarding Secrecy (PFS) in Apache. I started by setting the options I wanted in Apache only to find that the SSL options for Ciphers are ignored in the Apache configuration and instead are pulled from /etc/crypto-policies/back

Re: FYI: f33 crypto change ramifications

2020-11-03 Thread Kevin Becker
On Tue, 2020-11-03 at 10:31 -0500, Tom Horsley wrote: > The default crypto policy changed once again in fedora 33, > which I didn't notice till I started trying to use rsync to > update my web pages on hostgator (which, by default, uses rsa > keys). > > Kept asking for my

FYI: f33 crypto change ramifications

2020-11-03 Thread Tom Horsley
I don't recall seeing this mentioned here, and since I just spent all morning discovering it, I thought I'd let people know. The default crypto policy changed once again in fedora 33, which I didn't notice till I started trying to use rsync to update my web pages on hostgator (wh

Re: Is there a crypto policy or not?

2017-11-27 Thread Rick Stevens
page for update-crypto-policies(8). > > But there is no CRYPTO_POLICY environment variable setting > in /etc/sysconfig/sshd or in supposed system wide file > /etc/crypto-policies/back-ends/openssh-server.config I see > referenced in the sshd.service definition. It's sorta complex

Re: Is there a crypto policy or not?

2017-11-27 Thread Rex Dieter
Tom Horsley wrote: > The /etc/ssh/sshd_config file on my fedora 27 partition says: > > # To opt out, uncomment a line with redefinition of CRYPTO_POLICY= > # variable in /etc/sysconfig/sshd to overwrite the policy. > # For more information, see manual page for update-cr

Is there a crypto policy or not?

2017-11-27 Thread Tom Horsley
The /etc/ssh/sshd_config file on my fedora 27 partition says: # To opt out, uncomment a line with redefinition of CRYPTO_POLICY= # variable in /etc/sysconfig/sshd to overwrite the policy. # For more information, see manual page for update-crypto-policies(8). But there is no CRYPTO_POLICY

Re: Fwd: SHA-1 crypto hash retirement fraught with problems

2015-07-15 Thread Patrick O'Callaghan
On Tue, 2015-07-14 at 16:33 -0600, jd1008 wrote: > > > Forwarded Message > > http://www.theregister.co.uk/2015/04/30/sha_2_migration_headaches/ This report is nearly 3 months old and says nothing about Fedora, or even Linux. poc -- users mailing list users@lists.fedoraprojec

Fwd: SHA-1 crypto hash retirement fraught with problems

2015-07-14 Thread jd1008
Forwarded Message http://www.theregister.co.uk/2015/04/30/sha_2_migration_headaches/ -- users mailing list users@lists.fedoraproject.org To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Fedora Code of Conduct: http://fedo

WIFI Padlock crypto

2011-06-20 Thread JD
Does anyone on this list have a wifi card with built-in VIA PadLock Hardware Security? I am looking to see if there are performance differences when the enc/dec is done on the wifi card vs done by the kernel modules (geode_aes, aes_i586, aes_generic). -- users mailing list users@lists.fedorapro

Re: crypto

2010-12-18 Thread agraham
On 12/19/2010 12:56 AM, Patrick Dupre wrote: > Hello, > > I have a disk on a computer with I usd to mount with crypto_LUKS. > I am trying to mount it on another PC, and I get: > mount: unknown filesystem type 'crypto_LUKS' > > How can I either remove the crytpo temporally or mount it on the other >

crypto

2010-12-18 Thread Patrick Dupre
Hello, I have a disk on a computer with I usd to mount with crypto_LUKS. I am trying to mount it on another PC, and I get: mount: unknown filesystem type 'crypto_LUKS' How can I either remove the crytpo temporally or mount it on the other PC (after I will have the option to give the passphrase).