File crypto-policies-openssl-fix-integrity-only-cipher-definitions.patch of Package crypto-policies
From 56b301d43dd86b5d9082f8297984a5a7ec8fe2de Mon Sep 17 00:00:00 2001
From: Alexander Sosedkin <asosedkin@redhat.com>
Date: Fri, 25 Apr 2025 13:05:05 +0200
Subject: [PATCH] openssl: fix mistakes in integrity-only cipher definitions
---
python/policygenerators/openssl.py | 6 +++---
1 file changed, 3 insertions(+), 3 deletions(-)
diff --git a/python/policygenerators/openssl.py b/python/policygenerators/openssl.py
index 4a5c615..b2a29c8 100644
--- a/python/policygenerators/openssl.py
+++ b/python/policygenerators/openssl.py
@@ -116,13 +116,13 @@ class OpenSSLGenerator(ConfigGenerator):
'TLS_SHA256_SHA256': {
'cipher': {'NULL'},
'hash': {'SHA2-256'},
- 'mac': {'SHA2-256'},
+ 'mac': {'HMAC-SHA2-256'},
'protocol': {'TLS1.3', 'DTLS1.3'},
},
- 'TLS_SHA256_SHA384': {
+ 'TLS_SHA384_SHA384': {
'cipher': {'NULL'},
'hash': {'SHA2-384'},
- 'mac': {'SHA2-384'},
+ 'mac': {'HMAC-SHA2-384'},
'protocol': {'TLS1.3', 'DTLS1.3'},
},
}
--
GitLab