Migrate applications to use the global crypto settings in EL8+ first and only set the local crypto policies if required.

Description

The supported built-in apps can be found by delving into /etc/crypto-policies and /usr/share/crypto-policies/<POLICY_NAME>.

The whole system doesn't seem quite fully baked in EL8 and, if Fedora is anything to go by, will be seeing some relatively drastic overhauls at some point.

At a quick glance, the following seemto be supported:

  • bind

  • gnutls

  • java

  • krb5

  • libreswan

  • libssh

  • nss

  • openssh

  • opensshserver

  • openssl

  • opensslcnf

Acceptance Criteria

None

Labels

None

Epic Link

Story Points

None

Sprint

Priority

Medium
Configure