Re: F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-23 Thread Christopher
It's my understanding that there's been some recent work to move openjdk to certain NSS security providers (for EC, for example). But, I think you already answered my (poorly worded) question. Thanks. On Mon, May 23, 2016, 04:01 Nikos Mavrogiannopoulos wrote: > The impact in

Re: F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-23 Thread Nikos Mavrogiannopoulos
The impact in what sense? Note that openjdk will also conform to the system wide policy. regards, Nikos On Fri, 2016-05-20 at 15:24 +, Christopher wrote: > What is the impact on openjdk crypto providers? > > On Fri, May 20, 2016, 05:49 Jan Kurik wrote: > > = Proposed

Re: F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-23 Thread Nikos Mavrogiannopoulos
On Fri, 2016-05-20 at 10:01 -0500, Michael Catanzaro wrote: > On Fri, 2016-05-20 at 11:48 +0200, Jan Kurik wrote: > > > > As it is now, the System-wide crypto policy in F24 is only enforced > > by > > the OpenSSL and GnuTLS TLS libraries. > Keep in mind that the system policy is still overridden

Re: F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-20 Thread Christopher
What is the impact on openjdk crypto providers? On Fri, May 20, 2016, 05:49 Jan Kurik wrote: > = Proposed Self Contained Change: NSS enforces the system-wide crypto > policy = > https://fedoraproject.org/wiki/Changes/NSSCryptoPolicies > > Change owner(s): > * Nikos

Re: F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-20 Thread Michael Catanzaro
On Fri, 2016-05-20 at 11:48 +0200, Jan Kurik wrote: > As it is now, the System-wide crypto policy in F24 is only enforced > by > the OpenSSL and GnuTLS TLS libraries. Keep in mind that the system policy is still overridden by glib- networking for all GNOME applications. -- devel mailing list

Re: F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-20 Thread David Woodhouse
On Fri, 2016-05-20 at 11:48 +0200, Jan Kurik wrote: > = Proposed Self Contained Change: NSS enforces the system-wide crypto > policy = > https://fedoraproject.org/wiki/Changes/NSSCryptoPolicies IYTM "enforces *some* of the system-wide crypto policy". We also have a policy (in p11-kit config) for

Re: F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-20 Thread Petr Spacek
On 20.5.2016 11:48, Jan Kurik wrote: > = Proposed Self Contained Change: NSS enforces the system-wide crypto policy = > https://fedoraproject.org/wiki/Changes/NSSCryptoPolicies > > Change owner(s): > * Nikos Mavrogiannopoulos > > As it is now, the System-wide crypto policy in F24 is only

F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-20 Thread Jan Kurik
= Proposed Self Contained Change: NSS enforces the system-wide crypto policy = https://fedoraproject.org/wiki/Changes/NSSCryptoPolicies Change owner(s): * Nikos Mavrogiannopoulos As it is now, the System-wide crypto policy in F24 is only enforced by the OpenSSL and GnuTLS TLS libraries. To

F25 Self Contained Change: NSS enforces the system-wide crypto policy

2016-05-20 Thread Jan Kurik
= Proposed Self Contained Change: NSS enforces the system-wide crypto policy = https://fedoraproject.org/wiki/Changes/NSSCryptoPolicies Change owner(s): * Nikos Mavrogiannopoulos As it is now, the System-wide crypto policy in F24 is only enforced by the OpenSSL and GnuTLS TLS libraries. To