search

simp / pupmod-simp-crypto_policy

A Puppet module for managing the system crypto policy settings
0 stars 7 forks source link

The list of available crypto policies should also check against the available crypto-policy submodules #24

Open michael-riddle opened 2 years ago

michael-riddle commented 2 years ago

Users should be able to ensure their crypto-policy is set to something like "FIPS:OSPP". The module should check for a colon in the ensure and then subsequently check if the submodule listed is available within /usr/share/crypto-policies/policies/modules. Reliant on https://github.com/simp/pupmod-simp-simplib/issues/268 being finished.

qateey commented 1 year ago

adding support for this, RHEL 6 hosts cannot ssh into RHEL 9 hosts and as per https://access.redhat.com/solutions/6816771, one of the solutions is to set the crypto_policy as DEFAULT:SHA1 which is not possible with the current module