Bug 1670398 - krb5 crypto modernization
Summary: krb5 crypto modernization
Status: MODIFIED
Alias: None
Product: Fedora
Classification: Fedora
Component: Changes Tracking
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Robbie Harwood
QA Contact:
URL:
Whiteboard:
Keywords:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-01-29 13:33 UTC by Ben Cotton
Modified: 2019-03-08 16:42 UTC (History)
2 users (show)

(edit)
Clone Of:
(edit)
Last Closed:


Attachments (Terms of Use)

Description Ben Cotton 2019-01-29 13:33:12 UTC
This is a tracking bug for Change: krb5 crypto modernization
For more details, see: https://fedoraproject.org/wiki/Changes/krb5_crypto_modernization

krb5 will be removing support for DES, 3DES, crc-32, and MD4 entirely; they will not be allowed in session keys or long-term keys.  Additionally, RC4 and MD5 will be marked deprecated and dangerous.

Comment 1 Ben Cotton 2019-02-19 20:30:24 UTC
According to the Fedora 30 schedule[1], today is the deadline for changes to be in a testable state. If your change is ready to be tested, please set the status to MODIFIED. If you know your change will not be ready for Fedora 30, you can set the version to rawhide and notify bcotton@fedoraproject.org. For more information about this milestone, see the Changes Policy[2].

[1] https://fedoraproject.org/wiki/Releases/30/Schedule
[2] https://fedoraproject.org/wiki/Changes/Policy#Change_Checkpoint:_Completion_deadline

Comment 2 Robbie Harwood 2019-02-19 21:39:55 UTC
It's testable, but the tests will just show it's not done :)  I give it even odds of making the deadline - and if it doesn't, we'll back it off to fc31.

Comment 3 Ben Cotton 2019-03-05 21:50:03 UTC
We have reached the Code Complete (100%) milestone in the Fedora 30 development cycle. At this point, all Changes should be fully code complete and ready for testing during the beta freeze. If your Change has reached this milestone, please set the status to ON_QA. If it has not, this Change will be submitted to FESCo to evaluate the contigency plan and decide if the Change will continue in the Fedora 30 cycle.

Comment 4 Robbie Harwood 2019-03-06 19:05:11 UTC
I'm not done.  Drop it from this release and I'll try for it again in a future one.  Thanks!

Comment 5 Ben Cotton 2019-03-08 16:42:18 UTC
Bumped it to F31. If you think it will be later than that, I'll just pull it entirely and you can resubmit when you're ready.


Note You need to log in before you can comment on or make changes to this bug.