Hide Forgot
This is a tracking bug for Change: Java/OpenJDK enforces the system-wide crypto policy For more details, see: https://fedoraproject.org//wiki/Changes/JavaCryptoPolicies As it is now, the System-wide crypto policy in F24 is only enforced by the OpenSSL and GnuTLS TLS libraries. To harmonize crypto across all applications in Fedora, including the Java ones, OpenJDK is enhanced to respect the settings of the system-wide crypto policy as well.
This bug appears to have been reported against 'rawhide' during the Fedora 25 development cycle. Changing version to '25'.
On 2016-July-26, we have reached Fedora 25 Change Checkpoint: Completion deadline (testable). At this point, all accepted changes should be substantially complete, and testable. Additionally, if a change is to be enabled by default, it must be enabled at Change Completion deadline as well. Change tracking bug should be set to the MODIFIED state to indicate it achieved completeness. Incomplete and non testable Changes will be reported to FESCo on 2016-July-29 meeting.
Hi Andrew, is that already complete in F25? The policy is already modified to generate /etc/crypto-policies/back-ends/java.config
No, not yet :-( My time these last few months has been taken up by RHEL 7.3 and the security updates to OpenJDK.
Based on the FESCo decision deferring this Change to F26: https://fedorahosted.org/fesco/ticket/1606#comment:3
This bug appears to have been reported against 'rawhide' during the Fedora 26 development cycle. Changing version to '26'.
On 2017-Feb-28, we have reached the Fedora 26 Change Checkpoint: Completion deadline (testable). At this point, all accepted changes should be substantially complete, and testable. Additionally, if a change is to be enabled by default, it must be enabled at Change Completion deadline as well. Change tracking bug should be set to the MODIFIED state to indicate it achieved completeness. Incomplete and non testable Changes will be reported to FESCo for 2017-Mar-03 meeting.
On 2017-May-16 we reached the "Change Checkpoint: 100% Code Complete Deadline" milestone for Fedora 26 release. At this point all the Changes not at least in "ON_QA" state should be brought to FESCo for review. Please update the state of this bug to "ON_QA" if it is already 100% completed. Please let me know in case you have any trouble with the implementation and the Change needs any help or review. Thanks, Jan
This Change is going to be reviewed on a FESCo meeting: https://pagure.io/fesco/issue/1710
Sorry I lost the emails. The change is already completed and included in Fedora 26.