From 28f2dc4358cbaf2e4472ce74e093dfcf2c37b448 Mon Sep 17 00:00:00 2001
From: CentOS Sources <bugs@centos.org>
Date: Sep 27 2022 14:09:29 +0000
Subject: import crypto-policies-20220815-1.git0fbe86f.el9


---

diff --git a/.crypto-policies.metadata b/.crypto-policies.metadata
index 06104fd..96e878d 100644
--- a/.crypto-policies.metadata
+++ b/.crypto-policies.metadata
@@ -1 +1 @@
-de1d69d0e29453cfbed156815ddc24052f3e7887 SOURCES/crypto-policies-git5203b41.tar.gz
+0890ea06566ded55ed48890da1a2fbb2128268b7 SOURCES/crypto-policies-git0fbe86f.tar.gz
diff --git a/.gitignore b/.gitignore
index 01e18c8..3e67c57 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/crypto-policies-git5203b41.tar.gz
+SOURCES/crypto-policies-git0fbe86f.tar.gz
diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec
index c53477c..d2e47e9 100644
--- a/SPECS/crypto-policies.spec
+++ b/SPECS/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20220223
-%global git_commit 5203b41aba45a7596774bff439f6428deda778b8
+%global git_date 20220815
+%global git_commit 0fbe86f88d51fb210d536908b10450eb7467e1d6
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -32,7 +32,7 @@ BuildRequires: make
 Conflicts: openssl < 1:3.0.1-10
 Conflicts: nss < 3.44.0
 Conflicts: libreswan < 3.28
-Conflicts: openssh < 8.5p1
+Conflicts: openssh < 8.7p1-10
 Conflicts: gnutls < 3.7.2-3
 
 %description
@@ -60,7 +60,6 @@ to enable or disable the system FIPS mode.
 %autopatch -p1
 
 %build
-export OLD_GNUTLS=1  # FIXME: remove once gnutls-3.7.2-3 is in buildroot
 %make_build
 
 %install
@@ -186,6 +185,16 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Mon Aug 15 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220815-1.git0fbe86f
+- openssh: add RSAMinSize option following min_rsa_size
+
+* Wed Apr 27 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220427-1.gitb2323a1
+- bind: control ED25519/ED448
+
+* Mon Apr 04 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220404-1.git845c0c1
+- DEFAULT: drop DNSSEC SHA-1 exception
+- openssh: add support for sntrup761x25519-sha512@openssh.com
+
 * Wed Feb 23 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
 - openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
 - update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY