This issue also exists in RHEL 9 and Fedora 37. The lack of this feature currently prevents me from using the system-wide crypto-policies. However, I think that a system-wide crypto-policy is great and strongly needed and therefore would be very happy, if this could get resolved. How could one potentially help with that?
(replied in upstream discussion in order to keep the discussion in one place: https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/issues/40)
*** Bug 2138540 has been marked as a duplicate of this bug. ***
Converting to Fedora bug, because I do want to address this request one day, but I don't have a clear way forward, and whatever the solution will be, it's unlikely to be ported to even RHEL-9 at this point, let alone 8. For them, opting out of crypto-policies is the supported solution.
FEDORA-2023-01ef62eefb has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2023-01ef62eefb
Awesome that it finally made it! Thank you very much! Is there any chance that this will also make it into Fedora 39?
It will, but there is a small usability bug in this build, which we want to fix first before backporting it to F39.
FEDORA-2023-9b4f4d2817 has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2023-9b4f4d2817
FEDORA-2023-9b4f4d2817 has been pushed to the Fedora 40 stable repository. If problem still persists, please make note of it in this bug report.
FEDORA-2023-c221a7efca has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2023-c221a7efca
Ok, thank you for your work on backporting it. This bug has already been closed as "ERRATA", but there is no update in the update or even updates-testing repos of Fedora Linux 39 yet. I see that there seem to be some issues with the proposed backport. Can one help with fixing this?
I will fix those, but only when all the issues found during QA are fixed. Please remain patient. This bug is correctly closed, because it is fixed in rawhide.
FEDORA-2023-1e08f24c96 has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2023-1e08f24c96
FEDORA-2023-1e08f24c96 has been pushed to the Fedora 39 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-1e08f24c96` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-1e08f24c96 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2023-1e08f24c96 has been pushed to the Fedora 39 stable repository. If problem still persists, please make note of it in this bug report.
Thank you! works perfectly!