From Fedora Project Wiki
Emaldonado (talk | contribs) |
|||
(81 intermediate revisions by 9 users not shown) | |||
Line 1: | Line 1: | ||
= Crypto Consolidation Scorecard = | = Crypto Consolidation Scorecard = | ||
For what this page is about see [[FedoraCryptoConsolidation|Fedora Crypto Consolidation]] and [[CryptoConsolidationEval|Crypto Consolidation Eval]] | |||
==Legend== | |||
{| border="1" | |||
|- | |||
|style="font-weight: bold"|Status||style="font-weight: bold"|Meaning | |||
|- | |||
|style="text-align:center; background:darkgray; color:white"|TBD||Status unknown | |||
|- | |||
|style="text-align:center; background:gold; color:white"|Started||The tracking bug report has an engineer assigned to the project | |||
|- | |||
|style="text-align:center; background:steelblue; color:white"|Implemented||The module now can be compiled with the NSS option. (What about QA?) | |||
|- | |||
|style="text-align:center; background:steelblue; color:white"|Complete / Not Yet Upstream||?? | |||
|- | |||
|style="text-align:center; background:darkgreen; color:white"|Completed / Upstream||The module is NSS-enabled, has been QA'd, and the upstream module owner has checked in the patch. | |||
|- | |||
|} | |||
== Components that Use NSS Already == | == Components that Use NSS Already == | ||
{| border="1" | {| border="1" | ||
|- | |- | ||
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" | | |<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug # | ||
|- | |- | ||
| cman-2.0.60-1.fc6.src.rpm || NSS || | | cman-2.0.60-1.fc6.src.rpm || NSS || cfeist ||style="text-align:center; background:darkgray; color:white" | TBD || Runs in FIPS mode? Other crypto? || | ||
|- | |- | ||
| coolkey-1.1.0-1.fc7.src.rpm || NSS || | | coolkey-1.1.0-1.fc7.src.rpm || NSS || rrelyea, jmagne ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | ||
|- | |- | ||
| epiphany-2.17.91-1.fc7.src.rpm || NSS || | | epiphany-2.17.91-1.fc7.src.rpm || NSS || caillon ||style="text-align:center; background:darkgray; color:white" | TBD || Runs in FIPS mode? Other crypto? || | ||
|- | |- | ||
| esc-1.0.0-19.fc7.src.rpm || NSS || | | esc-1.0.0-19.fc7.src.rpm || NSS || jmagne ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | ||
|- | |- | ||
| evolution-2.9.91-3.fc7.src.rpm || NSS || | | evolution-2.9.91-3.fc7.src.rpm || NSS || mbarnes ||style="text-align:center; background:darkgray; color:white" | TBD || Runs in FIPS mode? Other crypto? || | ||
|- | |- | ||
| evolution-data-server-1.9.91-1.fc7.src.rpm || NSS || | | evolution-data-server-1.9.91-1.fc7.src.rpm || NSS || mbarnes ||style="text-align:center; background:darkgray; color:white" | TBD || Runs in FIPS mode? Other crypto? || | ||
|- | |- | ||
| firefox-2.0.0.1-5.fc7.src.rpm || NSS || | | firefox-2.0.0.1-5.fc7.src.rpm || NSS || caillon ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | ||
|- | |- | ||
| | | pidgin-2.4.3-1.fc9.src.rpm || Libcrypt, NSS, Kerberos || ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || pidgin's libpurple can use gtls or nss, fedora builds it for nsss. wtogami owner? || | ||
|- | |- | ||
| gdm-2.17.6-4.fc7.src.rpm || NSS || | | gdm-2.17.6-4.fc7.src.rpm || NSS || rstrode ||style="text-align:center; background:steelblue; color:black" | Complete / Not Yet Upstream || || | ||
|- | |- | ||
| mod_nss-1.0.6-2.fc7.i386.rpm || NSS || rcritten ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | | mod_nss-1.0.6-2.fc7.i386.rpm || NSS || rcritten ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | ||
|- | |- | ||
| openoffice.org-2.2.0-8.1.src.rpm || NSS || | | openoffice.org-2.2.0-8.1.src.rpm || NSS || caolanm ||style="text-align:center; background:darkgray; color:white" | TBD || Runs in FIPS mode? Other crypto? || | ||
|- | |- | ||
| seamonkey-1.1.1-2.fc7.i386.rpm || NSS || | | seamonkey-1.1.1-2.fc7.i386.rpm || NSS || caillon ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || No longer in Fedora || | ||
|- | |- | ||
| thunderbird-1.5.0.9-8.fc7.src.rpm || NSS || | | thunderbird-1.5.0.9-8.fc7.src.rpm || NSS || caillon ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | ||
|- | |- | ||
|} | |} | ||
Line 41: | Line 56: | ||
{| border="1" | {| border="1" | ||
|- | |- | ||
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" | | |<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug # | ||
|- | |- | ||
| pam_pkcs11-0.5.3-22.src.rpm || NSS || | | pam_pkcs11-0.5.3-22.src.rpm || NSS || rrelyea |||| || | ||
|- | |- | ||
| openssh-4.5p1-2.fc7.src.rpm || openssl || tmraz ||style="text-align:center; background:gold" | Started || || | | openssh-4.5p1-2.fc7.src.rpm || openssl || tmraz ||style="text-align:center; background:gold" | Started || || | ||
|- | |- | ||
| stunnel-4.20-2.src.rpm || openssl || | | stunnel-4.20-2.src.rpm || openssl || mitr ||style="text-align:center; background:steelblue" | Implemented || || | ||
|- | |- | ||
| wget-1.10.2-15.fc7.src.rpm || openssl || | | wget-1.10.2-15.fc7.src.rpm || openssl || karsten ||style="text-align:center; background:steelblue" | Implemented || Uses built-in MD5 and NTLM is disabled in test version || | ||
|- | |- | ||
| curl-7. | | curl-7.19.3-1.fc11.src.rpm || OpenSSL, GnuTLS, NSS || kdudka ||style="text-align:center; background:darkgreen" | Completed / Upstream || also uses OpenSSL through libssh2 || | ||
|- | |- | ||
| openldap-2. | | openldap-2.4.22-1.fc14.src.rpm || openssl/nss || rrelyea/jzeleny ||style="text-align:center; background:steelblue" | Implemented || || | ||
|- | |- | ||
| gnupg-1.4.6-3.src.rpm || || | | gnupg-1.4.6-3.src.rpm || || nalin ||style="text-align:center; background:darkgray; color:white" | TBD || || | ||
|- | |- | ||
| kernel-2.6.20-1.2936.fc7.src.rpm || || | | kernel-2.6.20-1.2936.fc7.src.rpm || || N/A ||style="text-align:center; background:darkgray; color:white" | TBD || Not applicable to convert to NSS || | ||
|- | |- | ||
| kernel-xen-2.6-2.6.19-1.2898.2.3.fc7.src.rpm || || | | kernel-xen-2.6-2.6.19-1.2898.2.3.fc7.src.rpm || || N/A ||style="text-align:center; background:darkgray; color:white" | TBD || Not applicable to convert to NSS || | ||
|- | |- | ||
| new python bindings || | | new python bindings (python-nss) || || jdennis ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || Upstream @ Mozilla along with NSS, in Fedora, in RHEL. API coverage not complete but essential bindings are there || || style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=293291 NEW] | ||
|- | |- | ||
| openswan-2. | | openswan-2.6.21-5.fc11.src.rpm || own + NSS + kernel crypto || avagarwa, emaldona ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || || [http://bugzilla.redhat.com/show_bug.cgi?id=347841 CLOSED CURRENTRELEASE] | ||
|- | |- | ||
| rpm-4.4.2-40.fc7.src.rpm || beecrypt, openssl || tmraz ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | | rpm-4.4.2-40.fc7.src.rpm || beecrypt, openssl || tmraz ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || | ||
|- | |- | ||
| crypto-utils-2. | | crypto-utils-2.4-1.src.rpm || openssl or nss selectable via command line option || emaldona, jorton ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || ||style="background:darkgreen" | [http://bugzilla.redhat.com/show_bug.cgi?id=346731 CLOSED CURRENTRELEASE] | ||
|- | |||
| cryptsetup-luks-1.0.3-4.fc7.src.rpm || libgcrypt || pjones ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346741 ASSIGNED] | |||
|- | |- | ||
| | | glibc-2.5.90-17.src.rpm || || jakub ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || ||style="background:white; color"bue" | [http://bugzilla.redhat.com/show_bug.cgi?id=346991 CLOSED CURRENTRELEASE] | ||
|- | |- | ||
| | | krb5-1.6-1.src.rpm || Kerberos || rrelyea ||style="text-align:center; background:gold" | Started || I have a prototype that works with 1.8 in non-FIPs mode. The plan is to clean up the key handling in 1.9 to allow FIPS mode to work || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347371 NEW] | ||
|- | |||
| pam_krb5-2.2.11-1.src.rpm || Kerberos || nalin ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347871 NEW] | |||
|- | |||
| nfs-utils-lib-1.0.8-7.2.src.rpm || Kerberos || nalin ||style="text-align:center; background:darkgray; color:white" | TBD || || || | |||
|- | |- | ||
|} | |} | ||
Line 80: | Line 100: | ||
{| border="1" | {| border="1" | ||
|- | |- | ||
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" | | |<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug # | ||
|- | |- | ||
| vnc-4.1.2-11.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || | | vnc-4.1.2-11.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || | ||
Line 86: | Line 106: | ||
| subversion-1.4.2-5.src.rpm || Openssl, apr-util, python || ||style="text-align:center; background:darkgray; color:white" | TBD || || | | subversion-1.4.2-5.src.rpm || Openssl, apr-util, python || ||style="text-align:center; background:darkgray; color:white" | TBD || || | ||
|- | |- | ||
| postfix-2.3.6-1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347951 | | postfix-2.3.6-1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347951 ASSIGNED] | ||
|- | |- | ||
| dovecot-1.0-3.rc22.fc7.src.rpm || Openssl, Kerberos || | |style="background:red" | dovecot-1.0-3.rc22.fc7.src.rpm ||style="background:red" | Openssl, Kerberos ||style="background:red" | ||style="text-align:center; background:darkgray; color:white" | TBD ||style="background:red" | ||style="background:red" | ||style="background:red" | [http://bugzilla.redhat.com/show_bug.cgi?id=346831 CLOSED (WONTFIX)] | ||
|- | |- | ||
| cyrus-imap (need package name)|| || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346771 NEW] | | cyrus-imap (need package name)|| || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346771 NEW] | ||
Line 99: | Line 119: | ||
{| border="1" | {| border="1" | ||
|- | |- | ||
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" | | |<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug # | ||
|- | |- | ||
| ant-1. | | ant-1.7.0-1jpp.4.fc9.src.rpm || java || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346531 NEW] | ||
|- | |- | ||
| apr-1.2.8-4.src.rpm || Libcrypt || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346541 NEW] | | apr-1.2.8-4.src.rpm || Libcrypt || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346541 NEW] | ||
Line 130: | Line 150: | ||
|- | |- | ||
| coreutils-6.7-8.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346711 NEW] | | coreutils-6.7-8.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346711 NEW] | ||
|- | |- | ||
| cvs-1.11.22-9.fc7.src.rpm || Libcrypt, kerberos || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346761 NEW] | | cvs-1.11.22-9.fc7.src.rpm || Libcrypt, kerberos || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346761 NEW] | ||
Line 144: | Line 162: | ||
|- | |- | ||
| distcache-1.4.5-14.1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346821 NEW] | | distcache-1.4.5-14.1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346821 NEW] | ||
|- | |- | ||
| doxygen-1.5.1-2.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346841 NEW] | | doxygen-1.5.1-2.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346841 NEW] | ||
Line 151: | Line 167: | ||
| dump-0.4b41-5.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346851 NEW] | | dump-0.4b41-5.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346851 NEW] | ||
|- | |- | ||
| elinks-0. | | ecryptfs-utils-73-1.fc11.src.rpm || Openssl, libgcrypt || mhlavink ||style="text-align:center; background:gold" | Started || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=497056 ASSIGNED] | ||
|- | |||
| elinks-0.12-0.6.pre2.src.rpm || OpenSSL, GnuTLS, nss_compat_ossl || kdudka ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346861 CLOSED] | |||
|- | |- | ||
| epic-2.6-1.fc7.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346881 ASSIGNED] | | epic-2.6-1.fc7.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346881 ASSIGNED] | ||
Line 238: | Line 256: | ||
|- | |- | ||
| kexec-tools-1.101-60.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347361 NEW] | | kexec-tools-1.101-60.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347361 NEW] | ||
|- | |- | ||
| krb5-auth-dialog-0.7-1.src.rpm || Kerberos || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347381 NEW] | | krb5-auth-dialog-0.7-1.src.rpm || Kerberos || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347381 NEW] | ||
Line 269: | Line 285: | ||
| lucene-1.4.3-1jpp.14.src.rpm || java || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347541 NEW] | | lucene-1.4.3-1jpp.14.src.rpm || java || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347541 NEW] | ||
|- | |- | ||
| lynx-2.8. | | lynx-2.8.7-2.fc13.src.rpm || openssl || kdudka ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347551 NEW] | ||
|- | |- | ||
| m2crypto-0.17-1.src.rpm || openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347561 NEW] | | m2crypto-0.17-1.src.rpm || openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347561 NEW] | ||
Line 303: | Line 319: | ||
| net-snmp-5.4-8.fc7.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347711 NEW] | | net-snmp-5.4-8.fc7.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347711 NEW] | ||
|- | |- | ||
| NetworkManager-0.6.5-0.cvs20061025.fc7.1.src.rpm || libgcrypt || ||style="text-align:center; background: | | NetworkManager-0.6.5-0.cvs20061025.fc7.1.src.rpm || libgcrypt & NSS || ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347721 CLOSED] | ||
|- | |- | ||
| nmap-4.20-1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347731 NEW] | | nmap-4.20-1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347731 NEW] | ||
Line 313: | Line 329: | ||
| ntp-4.2.4-4.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347761 NEW] | | ntp-4.2.4-4.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347761 NEW] | ||
|- | |- | ||
| nut-2.0.5-2.src.rpm || | | nut-2.0.5-2.src.rpm || nss || mhlavink || style="text-align:center; background:darkgreen; color:white"|Completed / Upstream || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347771 CLOSED] | ||
|- | |- | ||
| opal-2.2.5-1.fc7.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347781 NEW] | | opal-2.2.5-1.fc7.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347781 NEW] | ||
Line 328: | Line 344: | ||
|- | |- | ||
| pam_ccreds-4-1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347861 NEW] | | pam_ccreds-4-1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347861 NEW] | ||
|- | |- | ||
| pam_smb-1.1.7-7.2.1.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347881 NEW] | | pam_smb-1.1.7-7.2.1.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347881 NEW] | ||
Line 408: | Line 422: | ||
|- | |- | ||
| system-config-httpd-1.4.3-1.fc7.src.rpm || python || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348311 NEW] | | system-config-httpd-1.4.3-1.fc7.src.rpm || python || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348311 NEW] | ||
|- | |- | ||
| system-config-network-1.3.96-1.fc6.src.rpm || python || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348321 ASSIGNED] | | system-config-network-1.3.96-1.fc6.src.rpm || python || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348321 ASSIGNED] | ||
Line 454: | Line 466: | ||
|- | |- | ||
| yp-tools-2.9-0.1.src.rpm || libcrypt || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348561 ASSIGNED] | | yp-tools-2.9-0.1.src.rpm || libcrypt || ||style="text-align:center; background:darkgray; color:white" | TBD || || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348561 ASSIGNED] | ||
|- | |||
|} | |||
=Links= | |||
Here are some links to related pages: | |||
# [[CryptoConsolidationEval|Crypto Consolidation Evaluation]] | |||
# [https://bugzilla.redhat.com/buglist.cgi?quicksearch=NSS+library+for+cryptography Fedora Bugzilla query for all consolidation packages ] |
Latest revision as of 22:19, 31 January 2014
Crypto Consolidation Scorecard
For what this page is about see Fedora Crypto Consolidation and Crypto Consolidation Eval
Legend
Status | Meaning |
TBD | Status unknown |
Started | The tracking bug report has an engineer assigned to the project |
Implemented | The module now can be compiled with the NSS option. (What about QA?) |
Complete / Not Yet Upstream | ?? |
Completed / Upstream | The module is NSS-enabled, has been QA'd, and the upstream module owner has checked in the patch. |
Components that Use NSS Already
Component | Current Libraries | Owner(s) | Status | Notes | FIPS Compliant? | Bug # |
cman-2.0.60-1.fc6.src.rpm | NSS | cfeist | TBD | Runs in FIPS mode? Other crypto? | ||
coolkey-1.1.0-1.fc7.src.rpm | NSS | rrelyea, jmagne | Completed / Upstream | |||
epiphany-2.17.91-1.fc7.src.rpm | NSS | caillon | TBD | Runs in FIPS mode? Other crypto? | ||
esc-1.0.0-19.fc7.src.rpm | NSS | jmagne | Completed / Upstream | |||
evolution-2.9.91-3.fc7.src.rpm | NSS | mbarnes | TBD | Runs in FIPS mode? Other crypto? | ||
evolution-data-server-1.9.91-1.fc7.src.rpm | NSS | mbarnes | TBD | Runs in FIPS mode? Other crypto? | ||
firefox-2.0.0.1-5.fc7.src.rpm | NSS | caillon | Completed / Upstream | |||
pidgin-2.4.3-1.fc9.src.rpm | Libcrypt, NSS, Kerberos | Completed / Upstream | pidgin's libpurple can use gtls or nss, fedora builds it for nsss. wtogami owner? | |||
gdm-2.17.6-4.fc7.src.rpm | NSS | rstrode | Complete / Not Yet Upstream | |||
mod_nss-1.0.6-2.fc7.i386.rpm | NSS | rcritten | Completed / Upstream | |||
openoffice.org-2.2.0-8.1.src.rpm | NSS | caolanm | TBD | Runs in FIPS mode? Other crypto? | ||
seamonkey-1.1.1-2.fc7.i386.rpm | NSS | caillon | Completed / Upstream | No longer in Fedora | ||
thunderbird-1.5.0.9-8.fc7.src.rpm | NSS | caillon | Completed / Upstream |
High priority
Component | Current Libraries | Owner(s) | Status | Notes | FIPS Compliant? | Bug # |
pam_pkcs11-0.5.3-22.src.rpm | NSS | rrelyea | ||||
openssh-4.5p1-2.fc7.src.rpm | openssl | tmraz | Started | |||
stunnel-4.20-2.src.rpm | openssl | mitr | Implemented | |||
wget-1.10.2-15.fc7.src.rpm | openssl | karsten | Implemented | Uses built-in MD5 and NTLM is disabled in test version | ||
curl-7.19.3-1.fc11.src.rpm | OpenSSL, GnuTLS, NSS | kdudka | Completed / Upstream | also uses OpenSSL through libssh2 | ||
openldap-2.4.22-1.fc14.src.rpm | openssl/nss | rrelyea/jzeleny | Implemented | |||
gnupg-1.4.6-3.src.rpm | nalin | TBD | ||||
kernel-2.6.20-1.2936.fc7.src.rpm | N/A | TBD | Not applicable to convert to NSS | |||
kernel-xen-2.6-2.6.19-1.2898.2.3.fc7.src.rpm | N/A | TBD | Not applicable to convert to NSS | |||
new python bindings (python-nss) | jdennis | Completed / Upstream | Upstream @ Mozilla along with NSS, in Fedora, in RHEL. API coverage not complete but essential bindings are there | NEW | ||
openswan-2.6.21-5.fc11.src.rpm | own + NSS + kernel crypto | avagarwa, emaldona | Completed / Upstream | CLOSED CURRENTRELEASE | ||
rpm-4.4.2-40.fc7.src.rpm | beecrypt, openssl | tmraz | Completed / Upstream | |||
crypto-utils-2.4-1.src.rpm | openssl or nss selectable via command line option | emaldona, jorton | Completed / Upstream | CLOSED CURRENTRELEASE | ||
cryptsetup-luks-1.0.3-4.fc7.src.rpm | libgcrypt | pjones | TBD | ASSIGNED | ||
glibc-2.5.90-17.src.rpm | jakub | Completed / Upstream | CLOSED CURRENTRELEASE | |||
krb5-1.6-1.src.rpm | Kerberos | rrelyea | Started | I have a prototype that works with 1.8 in non-FIPs mode. The plan is to clean up the key handling in 1.9 to allow FIPS mode to work | NEW | |
pam_krb5-2.2.11-1.src.rpm | Kerberos | nalin | TBD | NEW | ||
nfs-utils-lib-1.0.8-7.2.src.rpm | Kerberos | nalin | TBD |
Medium priority
Component | Current Libraries | Owner(s) | Status | Notes | FIPS Compliant? | Bug # |
vnc-4.1.2-11.fc7.src.rpm | TBD | |||||
subversion-1.4.2-5.src.rpm | Openssl, apr-util, python | TBD | ||||
postfix-2.3.6-1.src.rpm | Openssl | TBD | ASSIGNED | |||
dovecot-1.0-3.rc22.fc7.src.rpm | Openssl, Kerberos | TBD | CLOSED (WONTFIX) | |||
cyrus-imap (need package name) | TBD | NEW | ||||
cups-1.2.8-1.fc7.src.rpm | Libcrypt, gnutls | TBD | NEW |
Low priority
Component | Current Libraries | Owner(s) | Status | Notes | FIPS Compliant? | Bug # |
ant-1.7.0-1jpp.4.fc9.src.rpm | java | TBD | NEW | |||
apr-1.2.8-4.src.rpm | Libcrypt | TBD | NEW | |||
arts-1.5.6-1.fc7.src.rpm | TBD | CLOSED (WONTFIX) | ||||
authd-1.4.3-9.src.rpm | Openssl | TBD | NEW | |||
autofs-5.0.1-0.rc3.9.src.rpm | Openssl | TBD | ASSIGNED | |||
axis-1.2.1-2jpp.6.src.rpm | java | TBD | NEW | |||
bind-9.3.4-6.fc7.src.rpm | Openssl | TBD | NEW | |||
binutils-2.17.50.0.9-1.src.rpm | TBD | NEW | ||||
busybox-1.2.2-6.fc7.src.rpm | TBD | NEW | ||||
cadaver-0.22.3-6.src.rpm | Openssl | TBD | NEW | |||
cdrtools-2.01-10.src.rpm | TBD | NEW | ||||
classpathx-mail-1.1.1-4jpp.3.src.rpm | java | TBD | NEW | |||
compat-db-4.3.29-2.fc7.src.rpm | TBD | NEW | ||||
compat-gcc-34-3.4.6-4.src.rpm | TBD | NEW | ||||
coreutils-6.7-8.fc7.src.rpm | TBD | NEW | ||||
cvs-1.11.22-9.fc7.src.rpm | Libcrypt, kerberos | TBD | NEW | |||
cyrus-sasl-2.1.22-5.src.rpm | Libcrypt, Openssl, kerberos | TBD | NEW | |||
db4-4.5.20-4.fc7.src.rpm | TBD | NEW | ||||
dhcp-3.0.5-8.fc7.src.rpm | TBD | ASSIGNED | ||||
dictd-1.9.15-8.1.src.rpm | TBD | NEW | ||||
distcache-1.4.5-14.1.src.rpm | Openssl | TBD | NEW | |||
doxygen-1.5.1-2.src.rpm | TBD | NEW | ||||
dump-0.4b41-5.fc7.src.rpm | TBD | NEW | ||||
ecryptfs-utils-73-1.fc11.src.rpm | Openssl, libgcrypt | mhlavink | Started | ASSIGNED | ||
elinks-0.12-0.6.pre2.src.rpm | OpenSSL, GnuTLS, nss_compat_ossl | kdudka | Completed / Upstream | CLOSED | ||
epic-2.6-1.fc7.src.rpm | Openssl | TBD | ASSIGNED | |||
fetchmail-6.3.7-1.fc7.src.rpm | Openssl, Kerberos | TBD | ASSIGNED | |||
freeradius-1.1.3-2.1.src.rpm | Libcrypt, Openssl | TBD | NEW | |||
gcc-4.1.2-1.src.rpm | TBD | NEW | ||||
gdb-6.6-3.fc7.src.rpm | TBD | NEW | ||||
gedit-2.17.4-1.fc7.src.rpm | python | TBD | NEW | |||
gftp-2.0.18-3.2.2.src.rpm | Openssl | TBD | NEW | |||
ghostscript-8.15.3-7.fc7.src.rpm | TBD | NEW | ||||
gimp-2.2.13-1.fc6.src.rpm | TBD | NEW | ||||
gmime-2.2.3-5.fc7.src.rpm | TBD | NEW | ||||
gnome-doc-utils-0.10.1-1.fc7.src.rpm | python | TBD | ASSIGNED | |||
gnome-games-2.17.91-1.fc7.src.rpm | Libgcrypt | TBD | NEW | |||
gnome-keyring-0.7.91-1.fc7.src.rpm | TBD | NEW | ||||
gnome-pilot-conduits-2.0.15-3.fc7.src.rpm | TBD | ASSIGNED | ||||
gnome-terminal-2.17.91-3.fc7.src.rpm | TBD | NEEDINFO | ||||
gnome-user-share-0.10-6.fc7.src.rpm | TBD | NEW | ||||
gnome-vfs2-2.17.91-1.fc7.src.rpm | Openssl | TBD | NEW | |||
gnu-crypto-2.1.0-2jpp.1.src.rpm | TBD | NEW | ||||
gnutls-1.4.5-1.src.rpm | libgcrypt | Library | CLOSED (NOTABUG) | |||
grub-0.97-13.src.rpm | TBD | NEW | ||||
gstreamer-plugins-base-0.10.11-1.fc7.src.rpm | TBD | NEW | ||||
gthumb-2.9.1-1.fc7.src.rpm | TBD | NEEDINFO | ||||
hplip-1.7.1-1.fc7.src.rpm | Openssl, python | TBD | NEW | |||
htdig-3.2.0b6-9.fc7.src.rpm | Openssl | TBD | NEW | |||
httpd-2.2.3-8.src.rpm | Openssl | TBD | NEW | |||
ImageMagick-6.2.8.0-3.fc6.1.src.rpm | TBD | NEW | ||||
inn-2.4.3-6.fc6.src.rpm | Kerberos | TBD | NEW | |||
ipsec-tools-0.6.6-1.src.rpm | Openssl | TBD | vpn | |||
iscsi-initiator-utils-6.2.0.695-0.7.src.rpm | TBD | NEW | ||||
isdn4k-utils-3.2-54.fc7.src.rpm | TBD | NEW | ||||
jakarta-commons-codec-1.3-7jpp.2.src.rpm | java | TBD | NEW | |||
jakarta-commons-httpclient-3.0.1-1jpp.1.fc7.src.rpm | java | TBD | NEW | |||
jessie-1.0.1-7.src.rpm | java | TBD | NEW | |||
jgroups-2.2.9.2-3jpp.2.src.rpm | java | TBD | NEW | |||
jpilot-0.99.9-2.fc7.src.rpm | Openssl | TBD | NEW | |||
k3b-1.0.0-0.rc6.1.fc7.src.rpm | Kdelibs | TBD | NEW | |||
kdeadmin-3.5.6-1.fc7.src.rpm | Kdelibs | TBD | NEW | |||
kdebase-3.5.6-1.fc7.src.rpm | TBD | NEW | ||||
kdegraphics-3.5.6-1.fc7.src.rpm | TBD | NEW | ||||
kdenetwork-3.5.6-1.fc7.src.rpm | Openssl | TBD | NEW | |||
kdepim-3.5.6-2.fc7.src.rpm | Libgpg++ | TBD | NEW | |||
kdewebdev-3.5.6-1.fc7.src.rpm | Kdelibs | TBD | NEW | |||
kexec-tools-1.101-60.fc7.src.rpm | TBD | NEW | ||||
krb5-auth-dialog-0.7-1.src.rpm | Kerberos | TBD | NEW | |||
krbafs-1.2.2-10.1.src.rpm | TBD | NEW | ||||
ldapjdk-4.17-1jpp.7.src.rpm | java | TBD | NEW | |||
lftp-3.5.9-1.fc7.src.rpm | Openssl | TBD | NEW | |||
libc-client-2004g-3.src.rpm | Openssl, Kerberos | TBD | NEW | |||
libgcrypt-1.2.4-1.src.rpm | Library | CLOSED (NOTABUG) | ||||
libgnomeui-2.17.91-1.fc7.src.rpm | TBD | NEW | ||||
liboil-0.3.10-1.fc7.src.rpm | TBD | NEEDINFO | ||||
libsilc-1.0.2-2.fc6.src.rpm | TBD | NEW | ||||
libsoup-2.2.99-1.fc7.src.rpm | Gnutls | TBD | ASSIGNED | |||
libtirpc-0.1.7-4.fc6.src.rpm | TBD | ASSIGNED | ||||
libwvstreams-4.2.2-3.fc7.src.rpm | openssl | TBD | NEW | |||
libXdmcp-1.0.2-2.fc7.src.rpm | TBD | NEW | ||||
lucene-1.4.3-1jpp.14.src.rpm | java | TBD | NEW | |||
lynx-2.8.7-2.fc13.src.rpm | openssl | kdudka | TBD | NEW | ||
m2crypto-0.17-1.src.rpm | openssl | TBD | NEW | |||
mailman-2.1.9-5.src.rpm | python | TBD | NEW | |||
mc-4.6.1a-43.20070124cvs.fc7.src.rpm | TBD | NEW | ||||
mdadm-2.6-1.fc7.src.rpm | TBD | NEW | ||||
mod_authz_ldap-0.26-7.1.src.rpm | Openssl | TBD | NEW | |||
mod_python-3.3.1-3.src.rpm | python | TBD | NEW | |||
mono-1.2.3-1.fc7.src.rpm | TBD | NEW | ||||
mutt-1.5.13-2.20070212cvs.fc7.src.rpm | GNUtls, Kerberos | TBD | NEW | |||
mx4j-3.0.1-6jpp.4.src.rpm | java | TBD | NEW | |||
mysql-5.0.33-1.fc7.src.rpm | Openssl | TBD | NEW | |||
mysqlclient10-3.23.58-9.2.1.src.rpm | libcrypt | TBD | NEW | |||
mysqlclient14-4.1.14-4.2.1.src.rpm | Openssl | TBD | NEW | |||
MySQL-python-1.2.1_p2-2.src.rpm | Openssl | TBD | NEW | |||
neon-0.25.5-5.1.src.rpm | Openssl, Kerberos | TBD | NEW | |||
netatalk-2.0.3-9.fc7.src.rpm | Openssl, Kerberos | TBD | NEW | |||
net-snmp-5.4-8.fc7.src.rpm | Openssl | TBD | NEW | |||
NetworkManager-0.6.5-0.cvs20061025.fc7.1.src.rpm | libgcrypt & NSS | Completed / Upstream | CLOSED | |||
nmap-4.20-1.src.rpm | Openssl | TBD | NEW | |||
nss_db-2.2-35.1.src.rpm | TBD | NEW | ||||
nss_ldap-253-4.src.rpm | TBD | NEW | ||||
ntp-4.2.4-4.fc7.src.rpm | TBD | NEW | ||||
nut-2.0.5-2.src.rpm | nss | mhlavink | Completed / Upstream | CLOSED | ||
opal-2.2.5-1.fc7.src.rpm | Openssl | TBD | NEW | |||
openhpi-2.8.0-3.fc7.src.rpm | Openssl | TBD | NEW | |||
OpenIPMI-2.0.6-7.fc7.src.rpm | Openssl | TBD | NEW | |||
openmpi-1.1-8.fc7.src.rpm | TBD | NEW | ||||
openssl-0.9.8b-12.fc7.src.rpm | Library | CLOSED (NOTABUG) | ||||
pam-0.99.7.1-2.fc7.src.rpm | TBD | NEW | ||||
pam_ccreds-4-1.src.rpm | Openssl | TBD | NEW | |||
pam_smb-1.1.7-7.2.1.src.rpm | TBD | NEW | ||||
perl-Crypt-SSLeay-0.53-1.fc7.src.rpm | Openssl | TBD | NEW | |||
perl-IO-Socket-SSL-1.02-1.fc7.src.rpm | Openssl | TBD | NEW | |||
php-5.2.1-3.src.rpm | Openssl, Kerberos | TBD | NEW | |||
pilot-link-0.12.1-4.fc7.src.rpm | TBD | NEW | ||||
policycoreutils-2.0.2-3.fc7.src.rpm | python | TBD | NEW | |||
poppler-0.5.4-5.fc7.src.rpm | TBD | NEW | ||||
postgresql-8.2.3-2.fc7.src.rpm | Openssl | TBD | NEW | |||
postgresql-jdbc-8.2.504-1jpp.fc7.src.rpm | java | TBD | NEW | |||
postgresql-odbc-08.01.0200-4.fc7.src.rpm | TBD | NEW | ||||
ppp-2.4.4-2.src.rpm | TBD | NEW | ||||
prelink-0.3.10-1.src.rpm | TBD | NEW | ||||
puretls-0.9-0.b5.4jpp.1.src.rpm | TBD | NEW | ||||
pwlib-1.10.4-1.fc7.src.rpm | Openssl | TBD | NEW | |||
pyOpenSSL-0.6-1.p24.9.src.rpm | Openssl | TBD | NEW | |||
python-2.5-9.fc7.src.rpm | Openssl | TBD | NEW | |||
python-ldap-2.2.0-3.src.rpm | Openssl | TBD | ASSIGNED | |||
python-urlgrabber-2.9.9-5.fc7.src.rpm | python | TBD | NEW | |||
Pyrex-0.9.4-4.fc7.src.rpm | python | TBD | ASSIGNED | |||
qt-3.3.7-2.fc7.src.rpm | TBD | NEW | ||||
quagga-0.98.6-3.fc7.src.rpm | libcrypt | TBD | NEW | |||
rdesktop-1.5.0-1.fc7.src.rpm | Openssl | TBD | NEW | |||
rhpl-0.203-2.src.rpm | python | TBD | NEW | |||
rp-pppoe-3.5-32.1.src.rpm | TBD | NEW | ||||
rsh-0.17-39.fc7.src.rpm | Kerberos | TBD | NEW | |||
rsync-2.6.9-2.fc7.src.rpm | TBD | NEW | ||||
ruby-1.8.5.2-1.fc7.src.rpm | Openssl | TBD | NEW | |||
samba-3.0.24-2.fc7.src.rpm | Kerberos | TBD | NEW | |||
sane-backends-1.0.18-5.fc7.src.rpm | TBD | NEW | ||||
sendmail-8.14.0-1.src.rpm | Openssl | TBD | NEW | |||
setroubleshoot-1.9.3-1.fc7.src.rpm | python | TBD | NEW | |||
sharutils-4.6.1-2.src.rpm | TBD | NEW | ||||
spamassassin-3.1.8-2.fc7.src.rpm | Openssl | TBD | NEW | |||
squid-2.6.STABLE9-1.fc7.src.rpm | Openssl | TBD | NEW | |||
squirrelmail-1.4.8-4.fc6.src.rpm | PHP | TBD | NEW | |||
struts-1.2.9-4jpp.2.src.rpm | java | TBD | NEW | |||
syslinux-3.36-1.fc7.src.rpm | TBD | NEW | ||||
system-config-bind-4.0.2-3.fc7.src.rpm | python | TBD | NEW | |||
system-config-httpd-1.4.3-1.fc7.src.rpm | python | TBD | NEW | |||
system-config-network-1.3.96-1.fc6.src.rpm | python | TBD | ASSIGNED | |||
telnet-0.17-37.src.rpm | TBD | NEW | ||||
tetex-3.0-36.fc7.src.rpm | TBD | NEW | ||||
texinfo-4.8-15.src.rpm | TBD | ASSIGNED | ||||
tn5250-0.17.3-9.fc7.src.rpm | Openssl | TBD | NEW | |||
tog-pegasus-2.5.2-2.fc6.src.rpm | Openssl | TBD | ASSIGNED | |||
tomcat5-5.5.17-6jpp.2.src.rpm | java | TBD | NEW | |||
unixODBC-2.2.12-1.fc7.src.rpm | TBD | NEW | ||||
unzip-5.52-4.fc7.src.rpm | TBD | NEW | ||||
util-linux-2.13-0.49.fc7.src.rpm | TBD | NEW | ||||
vino-2.17.5-1.fc7.src.rpm | libgcrypt | TBD | ASSIGNED | |||
vsftpd-2.0.5-8.src.rpm | Openssl | TBD | NEW | |||
w3m-0.5.1-15.fc6.src.rpm | Openssl | TBD | NEW | |||
wireshark-0.99.5-1.fc7.src.rpm | libgcrypt, gnutls, python | TBD | NEW | |||
wpa_supplicant-0.4.9-1.fc7.src.rpm | Openssl | TBD | NEW | |||
xchat-2.6.6-8.fc7.src.rpm | Openssl | TBD | NEW | |||
xdelta-1.1.4-1.fc7.src.rpm | TBD | NEW | ||||
xmlrpc-2.0.1-3jpp.2.src.rpm | java | TBD | NEW | |||
xmlsec1-1.2.9-8.1.src.rpm | Openssl, gnutls, NSS | TBD | NEW | |||
xorg-x11-xdm-1.1.3-1.fc7.src.rpm | libcrypt | TBD | ASSIGNED | |||
xsane-0.991-4.fc7.src.rpm | TBD | NEW | ||||
yp-tools-2.9-0.1.src.rpm | libcrypt | TBD | ASSIGNED |
Links
Here are some links to related pages: