Bug 1335930

Summary: Disable CA certificates with 1024-bit or less parameters
Product: Red Hat Enterprise Linux 7 Reporter: Nikos Mavrogiannopoulos <nmavrogi>
Component: ca-certificatesAssignee: Kai Engert (:kaie) (inactive account) <kengert>
Status: CLOSED DUPLICATE QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: unspecified Docs Contact: Mirek Jahoda <mjahoda>
Priority: unspecified    
Version: 7.4CC: bressers, hannsj_uhl, kengert, mgrepl, szidek
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-03-01 11:43:27 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1276310, 1367484, 1386616, 1386848    
Bug Blocks: 1335929, 1377248    

Description Nikos Mavrogiannopoulos 2016-05-13 14:44:38 UTC 
RHEL includes several cryptographic components who's security doesn't remain constant over time. Algorithms such as (cryptographic) hashing and encryption typically have a lifetime after which they are considered either too risky to use or plain insecure. That would mean we need to phase out such algorithms from the default settings, or completely disable if they could cause irreparable issue. 


This bug is about disabling any CA certificates which utilize less than 1024-bit RSA parameters.
Comment 5 Kai Engert (:kaie) (inactive account) 2017-03-01 11:43:27 UTC 
This bug seems equivalent to bug 1367434, marking as duplicate.

*** This bug has been marked as a duplicate of bug 1367434 ***