From Fedora Project Wiki
 
(59 intermediate revisions by 9 users not shown)
Line 1: Line 1:
= Crypto Consolidation Scorecard =
= Crypto Consolidation Scorecard =
For what this page is about see [[FedoraCryptoConsolidation|Fedora Crypto Consolidation]] and [[CryptoConsolidationEval|Crypto Consolidation Eval]]


For what this page is about see [[FedoraCryptoConsolidation|Fedora Crypto Consolidation]] and [[CryptoConsolidationEval|Crypto Consolidation Eval]]
==Legend==
{| border="1"
|-
|style="font-weight: bold"|Status||style="font-weight: bold"|Meaning
|-
|style="text-align:center; background:darkgray; color:white"|TBD||Status unknown
|-
|style="text-align:center; background:gold; color:white"|Started||The tracking bug report has an engineer assigned to the project
|-
|style="text-align:center; background:steelblue; color:white"|Implemented||The module now can be compiled with the NSS option.  (What about QA?)
|-
|style="text-align:center; background:steelblue; color:white"|Complete / Not Yet Upstream||??
|-
|style="text-align:center; background:darkgreen; color:white"|Completed / Upstream||The module is NSS-enabled, has been QA'd, and the upstream module owner has checked in the patch. 
|-
|}


== Components that Use NSS Already ==
== Components that Use NSS Already ==
{| border="1"
{| border="1"
|-
|-
Line 23: Line 38:
| firefox-2.0.0.1-5.fc7.src.rpm || NSS || caillon ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || ||
| firefox-2.0.0.1-5.fc7.src.rpm || NSS || caillon ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || ||
|-
|-
| gaim-2.0.0-0.30.beta6.fc7.src.rpm || Libcrypt, NSS, Kerberos ||  ||style="text-align:center; background:darkgray; color:white" | TBD || Also has other crypt! ||  
| pidgin-2.4.3-1.fc9.src.rpm || Libcrypt, NSS, Kerberos ||  ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || pidgin's libpurple can use gtls or nss, fedora builds it for nsss. wtogami owner? ||  
|-
|-
| gdm-2.17.6-4.fc7.src.rpm || NSS || rstrode ||style="text-align:center; background:steelblue; color:black" | Complete / Not Yet Upstream ||  ||  
| gdm-2.17.6-4.fc7.src.rpm || NSS || rstrode ||style="text-align:center; background:steelblue; color:black" | Complete / Not Yet Upstream ||  ||  
Line 29: Line 44:
| mod_nss-1.0.6-2.fc7.i386.rpm || NSS || rcritten ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  
| mod_nss-1.0.6-2.fc7.i386.rpm || NSS || rcritten ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  
|-
|-
| openoffice.org-2.2.0-8.1.src.rpm || NSS || ||style="text-align:center; background:darkgray; color:white" | TBD || Runs in FIPS mode? Other crypto? ||
| openoffice.org-2.2.0-8.1.src.rpm || NSS || caolanm ||style="text-align:center; background:darkgray; color:white" | TBD || Runs in FIPS mode? Other crypto? ||
|-
|-
| seamonkey-1.1.1-2.fc7.i386.rpm || NSS || caillon ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || No longer in Fedora ||
| seamonkey-1.1.1-2.fc7.i386.rpm || NSS || caillon ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || No longer in Fedora ||
Line 43: Line 58:
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug #
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug #
|-
|-
| pam_pkcs11-0.5.3-22.src.rpm || NSS || rrelyea ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  
| pam_pkcs11-0.5.3-22.src.rpm || NSS || rrelyea ||||  ||  
|-
|-
| openssh-4.5p1-2.fc7.src.rpm || openssl || tmraz ||style="text-align:center; background:gold" | Started ||  ||  
| openssh-4.5p1-2.fc7.src.rpm || openssl || tmraz ||style="text-align:center; background:gold" | Started ||  ||  
|-
|-
| stunnel-4.20-2.src.rpm || openssl || ||style="text-align:center; background:steelblue" | Implemented ||  ||  
| stunnel-4.20-2.src.rpm || openssl || mitr ||style="text-align:center; background:steelblue" | Implemented ||  ||  
|-
|-
| wget-1.10.2-15.fc7.src.rpm || openssl || ||style="text-align:center; background:steelblue" | Implemented || Uses built-in MD5 and NTLM is disabled in test version ||  
| wget-1.10.2-15.fc7.src.rpm || openssl || karsten ||style="text-align:center; background:steelblue" | Implemented || Uses built-in MD5 and NTLM is disabled in test version ||  
|-
|-
| curl-7.16.1-1.fc7.src.rpm || openssl || ||style="text-align:center; background:steelblue" | Implemented || ||  
| curl-7.19.3-1.fc11.src.rpm || OpenSSL, GnuTLS, NSS || kdudka ||style="text-align:center; background:darkgreen" | Completed / Upstream || also uses OpenSSL through libssh2 ||  
|-
|-
| openldap-2.3.34-0.fc7.src.rpm || openssl || rrelyea ||style="text-align:center; background:gold" | Started || ||  
| openldap-2.4.22-1.fc14.src.rpm || openssl/nss || rrelyea/jzeleny ||style="text-align:center; background:steelblue" | Implemented || ||  
|-
|-
| gnupg-1.4.6-3.src.rpm ||  || ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  
| gnupg-1.4.6-3.src.rpm ||  || nalin ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  
|-
|-
| kernel-2.6.20-1.2936.fc7.src.rpm ||  || N/A ||style="text-align:center; background:darkgray; color:white" | TBD || Not applicable to convert to NSS ||  
| kernel-2.6.20-1.2936.fc7.src.rpm ||  || N/A ||style="text-align:center; background:darkgray; color:white" | TBD || Not applicable to convert to NSS ||  
Line 61: Line 76:
| kernel-xen-2.6-2.6.19-1.2898.2.3.fc7.src.rpm ||  || N/A ||style="text-align:center; background:darkgray; color:white" | TBD || Not applicable to convert to NSS ||  
| kernel-xen-2.6-2.6.19-1.2898.2.3.fc7.src.rpm ||  || N/A ||style="text-align:center; background:darkgray; color:white" | TBD || Not applicable to convert to NSS ||  
|-
|-
| new python bindings || || jdennis ||style="text-align:center; background:darkgray; color:white" | TBD || Package status? ||  
| new python bindings (python-nss) || || jdennis ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream  || Upstream @ Mozilla along with NSS, in Fedora, in RHEL. API coverage not complete but essential bindings are there || || style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=293291 NEW]
|-
|-
| openswan-2.4.7-1.fc7.src.rpm || || ||style="text-align:center; background:darkgray; color:white" | TBD || ||  
| openswan-2.6.21-5.fc11.src.rpm || own + NSS + kernel crypto || avagarwa, emaldona ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream || || || [http://bugzilla.redhat.com/show_bug.cgi?id=347841 CLOSED CURRENTRELEASE]
|-
|-
| rpm-4.4.2-40.fc7.src.rpm || beecrypt, openssl || tmraz ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  
| rpm-4.4.2-40.fc7.src.rpm || beecrypt, openssl || tmraz ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  
|-
|-
| crypto-utils-2.4-1.src.rpm || openssl || ebatiz, jorton ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346731 NEW]
| crypto-utils-2.4-1.src.rpm || openssl or nss selectable via command line option || emaldona, jorton ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  ||style="background:darkgreen" | [http://bugzilla.redhat.com/show_bug.cgi?id=346731 CLOSED CURRENTRELEASE]
|-
| cryptsetup-luks-1.0.3-4.fc7.src.rpm || libgcrypt || pjones ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346741 ASSIGNED]
|-
| glibc-2.5.90-17.src.rpm ||  || jakub ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||style="background:white; color"bue" | [http://bugzilla.redhat.com/show_bug.cgi?id=346991 CLOSED CURRENTRELEASE]
|-
| krb5-1.6-1.src.rpm || Kerberos || rrelyea ||style="text-align:center; background:gold" | Started || I have a prototype that works with 1.8 in non-FIPs mode. The plan is to clean up the key handling in 1.9 to allow FIPS mode to work ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347371 NEW]
|-
|-
| cryptsetup-luks-1.0.3-4.fc7.src.rpm || libgcrypt || ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346741 NEW]
| pam_krb5-2.2.11-1.src.rpm || Kerberos || nalin ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347871 NEW]
|-
|-
| glibc-2.5.90-17.src.rpm || || ||style="text-align:center; background:gold" | Started || Waiting on NSS changes [rrelyea] ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346991 NEW]
| nfs-utils-lib-1.0.8-7.2.src.rpm || Kerberos || nalin ||style="text-align:center; background:darkgray; color:white" | TBD || ||  ||
|-
|-
| kerberos (needs package name) ||  || nalin ||style="text-align:center; background:darkgray; color:white" | TBD || Applicable packages? ||
|}
|}


Line 86: Line 106:
| subversion-1.4.2-5.src.rpm || Openssl, apr-util, python ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  
| subversion-1.4.2-5.src.rpm || Openssl, apr-util, python ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  
|-
|-
| postfix-2.3.6-1.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347951 NEW]
| postfix-2.3.6-1.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347951 ASSIGNED]
|-
|-
| dovecot-1.0-3.rc22.fc7.src.rpm || Openssl, Kerberos || ||style="text-align:center; background:darkgray; color:white" | TBD ||  || ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346831 NEW]
|style="background:red" | dovecot-1.0-3.rc22.fc7.src.rpm ||style="background:red" | Openssl, Kerberos ||style="background:red" | ||style="text-align:center; background:darkgray; color:white" | TBD ||style="background:red" |  ||style="background:red" | ||style="background:red" | [http://bugzilla.redhat.com/show_bug.cgi?id=346831 CLOSED (WONTFIX)]
|-
|-
| cyrus-imap (need package name)||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346771 NEW]
| cyrus-imap (need package name)||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346771 NEW]
Line 101: Line 121:
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug #
|<width="425" |Component ||<width="175" |Current Libraries ||<width="175" |Owner(s)||<width="75" |Status||<width="100" |Notes||<width="90" |FIPS Compliant?||<width="90" |Bug #
|-
|-
| ant-1.6.5-4jpp.2.fc7.src.rpm || java ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346531 NEW]
| ant-1.7.0-1jpp.4.fc9.src.rpm || java ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346531 NEW]
|-
|-
| apr-1.2.8-4.src.rpm || Libcrypt ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346541 NEW]
| apr-1.2.8-4.src.rpm || Libcrypt ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346541 NEW]
Line 147: Line 167:
| dump-0.4b41-5.fc7.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346851 NEW]
| dump-0.4b41-5.fc7.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346851 NEW]
|-
|-
| elinks-0.11.1-5.1.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346861 NEW]
| ecryptfs-utils-73-1.fc11.src.rpm || Openssl, libgcrypt || mhlavink ||style="text-align:center; background:gold" | Started ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=497056 ASSIGNED]
|-
| elinks-0.12-0.6.pre2.src.rpm || OpenSSL, GnuTLS, nss_compat_ossl || kdudka ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346861 CLOSED]
|-
|-
| epic-2.6-1.fc7.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346881 ASSIGNED]
| epic-2.6-1.fc7.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=346881 ASSIGNED]
Line 234: Line 256:
|-
|-
| kexec-tools-1.101-60.fc7.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347361 NEW]
| kexec-tools-1.101-60.fc7.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347361 NEW]
|-
| krb5-1.6-1.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347371 NEW]
|-
|-
| krb5-auth-dialog-0.7-1.src.rpm || Kerberos ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347381 NEW]
| krb5-auth-dialog-0.7-1.src.rpm || Kerberos ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347381 NEW]
Line 265: Line 285:
| lucene-1.4.3-1jpp.14.src.rpm || java ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347541 NEW]
| lucene-1.4.3-1jpp.14.src.rpm || java ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347541 NEW]
|-
|-
| lynx-2.8.6-2.src.rpm || openssl || ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347551 NEW]
| lynx-2.8.7-2.fc13.src.rpm || openssl || kdudka ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347551 NEW]
|-
|-
| m2crypto-0.17-1.src.rpm || openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347561 NEW]
| m2crypto-0.17-1.src.rpm || openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347561 NEW]
Line 299: Line 319:
| net-snmp-5.4-8.fc7.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347711 NEW]
| net-snmp-5.4-8.fc7.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347711 NEW]
|-
|-
| NetworkManager-0.6.5-0.cvs20061025.fc7.1.src.rpm || libgcrypt ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347721 NEW]
| NetworkManager-0.6.5-0.cvs20061025.fc7.1.src.rpm || libgcrypt & NSS ||  ||style="text-align:center; background:darkgreen; color:white" | Completed / Upstream ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347721 CLOSED]
|-
|-
| nmap-4.20-1.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347731 NEW]
| nmap-4.20-1.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347731 NEW]
Line 309: Line 329:
| ntp-4.2.4-4.fc7.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347761 NEW]
| ntp-4.2.4-4.fc7.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347761 NEW]
|-
|-
| nut-2.0.5-2.src.rpm || Openssl || ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347771 NEW]
| nut-2.0.5-2.src.rpm || nss || mhlavink || style="text-align:center; background:darkgreen; color:white"|Completed / Upstream ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347771 CLOSED]
|-
|-
| opal-2.2.5-1.fc7.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347781 NEW]
| opal-2.2.5-1.fc7.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347781 NEW]
Line 324: Line 344:
|-
|-
| pam_ccreds-4-1.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347861 NEW]
| pam_ccreds-4-1.src.rpm || Openssl ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347861 NEW]
|-
| pam_krb5-2.2.11-1.src.rpm || Kerberos ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347871 NEW]
|-
|-
| pam_smb-1.1.7-7.2.1.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347881 NEW]
| pam_smb-1.1.7-7.2.1.src.rpm ||  ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=347881 NEW]
Line 404: Line 422:
|-
|-
| system-config-httpd-1.4.3-1.fc7.src.rpm || python ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348311 NEW]
| system-config-httpd-1.4.3-1.fc7.src.rpm || python ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348311 NEW]
|-
| system-config-network-1.3.96-1.fc6.src.rpm || python ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348321 ASSIGNED]
|-
|-
| system-config-network-1.3.96-1.fc6.src.rpm || python ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348321 ASSIGNED]
| system-config-network-1.3.96-1.fc6.src.rpm || python ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348321 ASSIGNED]
Line 450: Line 466:
|-
|-
| yp-tools-2.9-0.1.src.rpm || libcrypt ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348561 ASSIGNED]
| yp-tools-2.9-0.1.src.rpm || libcrypt ||  ||style="text-align:center; background:darkgray; color:white" | TBD ||  ||  ||style="background:darkgrey" | [http://bugzilla.redhat.com/show_bug.cgi?id=348561 ASSIGNED]
|-
|}
=Links=
Here are some links to related pages:
# [[CryptoConsolidationEval|Crypto Consolidation Evaluation]]
# [https://bugzilla.redhat.com/buglist.cgi?quicksearch=NSS+library+for+cryptography Fedora Bugzilla query for all consolidation packages ]

Latest revision as of 22:19, 31 January 2014

Crypto Consolidation Scorecard

For what this page is about see Fedora Crypto Consolidation and Crypto Consolidation Eval

Legend

Status Meaning
TBD Status unknown
Started The tracking bug report has an engineer assigned to the project
Implemented The module now can be compiled with the NSS option. (What about QA?)
Complete / Not Yet Upstream ??
Completed / Upstream The module is NSS-enabled, has been QA'd, and the upstream module owner has checked in the patch.

Components that Use NSS Already

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
cman-2.0.60-1.fc6.src.rpm NSS cfeist TBD Runs in FIPS mode? Other crypto?
coolkey-1.1.0-1.fc7.src.rpm NSS rrelyea, jmagne Completed / Upstream
epiphany-2.17.91-1.fc7.src.rpm NSS caillon TBD Runs in FIPS mode? Other crypto?
esc-1.0.0-19.fc7.src.rpm NSS jmagne Completed / Upstream
evolution-2.9.91-3.fc7.src.rpm NSS mbarnes TBD Runs in FIPS mode? Other crypto?
evolution-data-server-1.9.91-1.fc7.src.rpm NSS mbarnes TBD Runs in FIPS mode? Other crypto?
firefox-2.0.0.1-5.fc7.src.rpm NSS caillon Completed / Upstream
pidgin-2.4.3-1.fc9.src.rpm Libcrypt, NSS, Kerberos Completed / Upstream pidgin's libpurple can use gtls or nss, fedora builds it for nsss. wtogami owner?
gdm-2.17.6-4.fc7.src.rpm NSS rstrode Complete / Not Yet Upstream
mod_nss-1.0.6-2.fc7.i386.rpm NSS rcritten Completed / Upstream
openoffice.org-2.2.0-8.1.src.rpm NSS caolanm TBD Runs in FIPS mode? Other crypto?
seamonkey-1.1.1-2.fc7.i386.rpm NSS caillon Completed / Upstream No longer in Fedora
thunderbird-1.5.0.9-8.fc7.src.rpm NSS caillon Completed / Upstream

High priority

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
pam_pkcs11-0.5.3-22.src.rpm NSS rrelyea
openssh-4.5p1-2.fc7.src.rpm openssl tmraz Started
stunnel-4.20-2.src.rpm openssl mitr Implemented
wget-1.10.2-15.fc7.src.rpm openssl karsten Implemented Uses built-in MD5 and NTLM is disabled in test version
curl-7.19.3-1.fc11.src.rpm OpenSSL, GnuTLS, NSS kdudka Completed / Upstream also uses OpenSSL through libssh2
openldap-2.4.22-1.fc14.src.rpm openssl/nss rrelyea/jzeleny Implemented
gnupg-1.4.6-3.src.rpm nalin TBD
kernel-2.6.20-1.2936.fc7.src.rpm N/A TBD Not applicable to convert to NSS
kernel-xen-2.6-2.6.19-1.2898.2.3.fc7.src.rpm N/A TBD Not applicable to convert to NSS
new python bindings (python-nss) jdennis Completed / Upstream Upstream @ Mozilla along with NSS, in Fedora, in RHEL. API coverage not complete but essential bindings are there NEW
openswan-2.6.21-5.fc11.src.rpm own + NSS + kernel crypto avagarwa, emaldona Completed / Upstream CLOSED CURRENTRELEASE
rpm-4.4.2-40.fc7.src.rpm beecrypt, openssl tmraz Completed / Upstream
crypto-utils-2.4-1.src.rpm openssl or nss selectable via command line option emaldona, jorton Completed / Upstream CLOSED CURRENTRELEASE
cryptsetup-luks-1.0.3-4.fc7.src.rpm libgcrypt pjones TBD ASSIGNED
glibc-2.5.90-17.src.rpm jakub Completed / Upstream CLOSED CURRENTRELEASE
krb5-1.6-1.src.rpm Kerberos rrelyea Started I have a prototype that works with 1.8 in non-FIPs mode. The plan is to clean up the key handling in 1.9 to allow FIPS mode to work NEW
pam_krb5-2.2.11-1.src.rpm Kerberos nalin TBD NEW
nfs-utils-lib-1.0.8-7.2.src.rpm Kerberos nalin TBD

Medium priority

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
vnc-4.1.2-11.fc7.src.rpm TBD
subversion-1.4.2-5.src.rpm Openssl, apr-util, python TBD
postfix-2.3.6-1.src.rpm Openssl TBD ASSIGNED
dovecot-1.0-3.rc22.fc7.src.rpm Openssl, Kerberos TBD CLOSED (WONTFIX)
cyrus-imap (need package name) TBD NEW
cups-1.2.8-1.fc7.src.rpm Libcrypt, gnutls TBD NEW

Low priority

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
ant-1.7.0-1jpp.4.fc9.src.rpm java TBD NEW
apr-1.2.8-4.src.rpm Libcrypt TBD NEW
arts-1.5.6-1.fc7.src.rpm TBD CLOSED (WONTFIX)
authd-1.4.3-9.src.rpm Openssl TBD NEW
autofs-5.0.1-0.rc3.9.src.rpm Openssl TBD ASSIGNED
axis-1.2.1-2jpp.6.src.rpm java TBD NEW
bind-9.3.4-6.fc7.src.rpm Openssl TBD NEW
binutils-2.17.50.0.9-1.src.rpm TBD NEW
busybox-1.2.2-6.fc7.src.rpm TBD NEW
cadaver-0.22.3-6.src.rpm Openssl TBD NEW
cdrtools-2.01-10.src.rpm TBD NEW
classpathx-mail-1.1.1-4jpp.3.src.rpm java TBD NEW
compat-db-4.3.29-2.fc7.src.rpm TBD NEW
compat-gcc-34-3.4.6-4.src.rpm TBD NEW
coreutils-6.7-8.fc7.src.rpm TBD NEW
cvs-1.11.22-9.fc7.src.rpm Libcrypt, kerberos TBD NEW
cyrus-sasl-2.1.22-5.src.rpm Libcrypt, Openssl, kerberos TBD NEW
db4-4.5.20-4.fc7.src.rpm TBD NEW
dhcp-3.0.5-8.fc7.src.rpm TBD ASSIGNED
dictd-1.9.15-8.1.src.rpm TBD NEW
distcache-1.4.5-14.1.src.rpm Openssl TBD NEW
doxygen-1.5.1-2.src.rpm TBD NEW
dump-0.4b41-5.fc7.src.rpm TBD NEW
ecryptfs-utils-73-1.fc11.src.rpm Openssl, libgcrypt mhlavink Started ASSIGNED
elinks-0.12-0.6.pre2.src.rpm OpenSSL, GnuTLS, nss_compat_ossl kdudka Completed / Upstream CLOSED
epic-2.6-1.fc7.src.rpm Openssl TBD ASSIGNED
fetchmail-6.3.7-1.fc7.src.rpm Openssl, Kerberos TBD ASSIGNED
freeradius-1.1.3-2.1.src.rpm Libcrypt, Openssl TBD NEW
gcc-4.1.2-1.src.rpm TBD NEW
gdb-6.6-3.fc7.src.rpm TBD NEW
gedit-2.17.4-1.fc7.src.rpm python TBD NEW
gftp-2.0.18-3.2.2.src.rpm Openssl TBD NEW
ghostscript-8.15.3-7.fc7.src.rpm TBD NEW
gimp-2.2.13-1.fc6.src.rpm TBD NEW
gmime-2.2.3-5.fc7.src.rpm TBD NEW
gnome-doc-utils-0.10.1-1.fc7.src.rpm python TBD ASSIGNED
gnome-games-2.17.91-1.fc7.src.rpm Libgcrypt TBD NEW
gnome-keyring-0.7.91-1.fc7.src.rpm TBD NEW
gnome-pilot-conduits-2.0.15-3.fc7.src.rpm TBD ASSIGNED
gnome-terminal-2.17.91-3.fc7.src.rpm TBD NEEDINFO
gnome-user-share-0.10-6.fc7.src.rpm TBD NEW
gnome-vfs2-2.17.91-1.fc7.src.rpm Openssl TBD NEW
gnu-crypto-2.1.0-2jpp.1.src.rpm TBD NEW
gnutls-1.4.5-1.src.rpm libgcrypt Library CLOSED (NOTABUG)
grub-0.97-13.src.rpm TBD NEW
gstreamer-plugins-base-0.10.11-1.fc7.src.rpm TBD NEW
gthumb-2.9.1-1.fc7.src.rpm TBD NEEDINFO
hplip-1.7.1-1.fc7.src.rpm Openssl, python TBD NEW
htdig-3.2.0b6-9.fc7.src.rpm Openssl TBD NEW
httpd-2.2.3-8.src.rpm Openssl TBD NEW
ImageMagick-6.2.8.0-3.fc6.1.src.rpm TBD NEW
inn-2.4.3-6.fc6.src.rpm Kerberos TBD NEW
ipsec-tools-0.6.6-1.src.rpm Openssl TBD vpn
iscsi-initiator-utils-6.2.0.695-0.7.src.rpm TBD NEW
isdn4k-utils-3.2-54.fc7.src.rpm TBD NEW
jakarta-commons-codec-1.3-7jpp.2.src.rpm java TBD NEW
jakarta-commons-httpclient-3.0.1-1jpp.1.fc7.src.rpm java TBD NEW
jessie-1.0.1-7.src.rpm java TBD NEW
jgroups-2.2.9.2-3jpp.2.src.rpm java TBD NEW
jpilot-0.99.9-2.fc7.src.rpm Openssl TBD NEW
k3b-1.0.0-0.rc6.1.fc7.src.rpm Kdelibs TBD NEW
kdeadmin-3.5.6-1.fc7.src.rpm Kdelibs TBD NEW
kdebase-3.5.6-1.fc7.src.rpm TBD NEW
kdegraphics-3.5.6-1.fc7.src.rpm TBD NEW
kdenetwork-3.5.6-1.fc7.src.rpm Openssl TBD NEW
kdepim-3.5.6-2.fc7.src.rpm Libgpg++ TBD NEW
kdewebdev-3.5.6-1.fc7.src.rpm Kdelibs TBD NEW
kexec-tools-1.101-60.fc7.src.rpm TBD NEW
krb5-auth-dialog-0.7-1.src.rpm Kerberos TBD NEW
krbafs-1.2.2-10.1.src.rpm TBD NEW
ldapjdk-4.17-1jpp.7.src.rpm java TBD NEW
lftp-3.5.9-1.fc7.src.rpm Openssl TBD NEW
libc-client-2004g-3.src.rpm Openssl, Kerberos TBD NEW
libgcrypt-1.2.4-1.src.rpm Library CLOSED (NOTABUG)
libgnomeui-2.17.91-1.fc7.src.rpm TBD NEW
liboil-0.3.10-1.fc7.src.rpm TBD NEEDINFO
libsilc-1.0.2-2.fc6.src.rpm TBD NEW
libsoup-2.2.99-1.fc7.src.rpm Gnutls TBD ASSIGNED
libtirpc-0.1.7-4.fc6.src.rpm TBD ASSIGNED
libwvstreams-4.2.2-3.fc7.src.rpm openssl TBD NEW
libXdmcp-1.0.2-2.fc7.src.rpm TBD NEW
lucene-1.4.3-1jpp.14.src.rpm java TBD NEW
lynx-2.8.7-2.fc13.src.rpm openssl kdudka TBD NEW
m2crypto-0.17-1.src.rpm openssl TBD NEW
mailman-2.1.9-5.src.rpm python TBD NEW
mc-4.6.1a-43.20070124cvs.fc7.src.rpm TBD NEW
mdadm-2.6-1.fc7.src.rpm TBD NEW
mod_authz_ldap-0.26-7.1.src.rpm Openssl TBD NEW
mod_python-3.3.1-3.src.rpm python TBD NEW
mono-1.2.3-1.fc7.src.rpm TBD NEW
mutt-1.5.13-2.20070212cvs.fc7.src.rpm GNUtls, Kerberos TBD NEW
mx4j-3.0.1-6jpp.4.src.rpm java TBD NEW
mysql-5.0.33-1.fc7.src.rpm Openssl TBD NEW
mysqlclient10-3.23.58-9.2.1.src.rpm libcrypt TBD NEW
mysqlclient14-4.1.14-4.2.1.src.rpm Openssl TBD NEW
MySQL-python-1.2.1_p2-2.src.rpm Openssl TBD NEW
neon-0.25.5-5.1.src.rpm Openssl, Kerberos TBD NEW
netatalk-2.0.3-9.fc7.src.rpm Openssl, Kerberos TBD NEW
net-snmp-5.4-8.fc7.src.rpm Openssl TBD NEW
NetworkManager-0.6.5-0.cvs20061025.fc7.1.src.rpm libgcrypt & NSS Completed / Upstream CLOSED
nmap-4.20-1.src.rpm Openssl TBD NEW
nss_db-2.2-35.1.src.rpm TBD NEW
nss_ldap-253-4.src.rpm TBD NEW
ntp-4.2.4-4.fc7.src.rpm TBD NEW
nut-2.0.5-2.src.rpm nss mhlavink Completed / Upstream CLOSED
opal-2.2.5-1.fc7.src.rpm Openssl TBD NEW
openhpi-2.8.0-3.fc7.src.rpm Openssl TBD NEW
OpenIPMI-2.0.6-7.fc7.src.rpm Openssl TBD NEW
openmpi-1.1-8.fc7.src.rpm TBD NEW
openssl-0.9.8b-12.fc7.src.rpm Library CLOSED (NOTABUG)
pam-0.99.7.1-2.fc7.src.rpm TBD NEW
pam_ccreds-4-1.src.rpm Openssl TBD NEW
pam_smb-1.1.7-7.2.1.src.rpm TBD NEW
perl-Crypt-SSLeay-0.53-1.fc7.src.rpm Openssl TBD NEW
perl-IO-Socket-SSL-1.02-1.fc7.src.rpm Openssl TBD NEW
php-5.2.1-3.src.rpm Openssl, Kerberos TBD NEW
pilot-link-0.12.1-4.fc7.src.rpm TBD NEW
policycoreutils-2.0.2-3.fc7.src.rpm python TBD NEW
poppler-0.5.4-5.fc7.src.rpm TBD NEW
postgresql-8.2.3-2.fc7.src.rpm Openssl TBD NEW
postgresql-jdbc-8.2.504-1jpp.fc7.src.rpm java TBD NEW
postgresql-odbc-08.01.0200-4.fc7.src.rpm TBD NEW
ppp-2.4.4-2.src.rpm TBD NEW
prelink-0.3.10-1.src.rpm TBD NEW
puretls-0.9-0.b5.4jpp.1.src.rpm TBD NEW
pwlib-1.10.4-1.fc7.src.rpm Openssl TBD NEW
pyOpenSSL-0.6-1.p24.9.src.rpm Openssl TBD NEW
python-2.5-9.fc7.src.rpm Openssl TBD NEW
python-ldap-2.2.0-3.src.rpm Openssl TBD ASSIGNED
python-urlgrabber-2.9.9-5.fc7.src.rpm python TBD NEW
Pyrex-0.9.4-4.fc7.src.rpm python TBD ASSIGNED
qt-3.3.7-2.fc7.src.rpm TBD NEW
quagga-0.98.6-3.fc7.src.rpm libcrypt TBD NEW
rdesktop-1.5.0-1.fc7.src.rpm Openssl TBD NEW
rhpl-0.203-2.src.rpm python TBD NEW
rp-pppoe-3.5-32.1.src.rpm TBD NEW
rsh-0.17-39.fc7.src.rpm Kerberos TBD NEW
rsync-2.6.9-2.fc7.src.rpm TBD NEW
ruby-1.8.5.2-1.fc7.src.rpm Openssl TBD NEW
samba-3.0.24-2.fc7.src.rpm Kerberos TBD NEW
sane-backends-1.0.18-5.fc7.src.rpm TBD NEW
sendmail-8.14.0-1.src.rpm Openssl TBD NEW
setroubleshoot-1.9.3-1.fc7.src.rpm python TBD NEW
sharutils-4.6.1-2.src.rpm TBD NEW
spamassassin-3.1.8-2.fc7.src.rpm Openssl TBD NEW
squid-2.6.STABLE9-1.fc7.src.rpm Openssl TBD NEW
squirrelmail-1.4.8-4.fc6.src.rpm PHP TBD NEW
struts-1.2.9-4jpp.2.src.rpm java TBD NEW
syslinux-3.36-1.fc7.src.rpm TBD NEW
system-config-bind-4.0.2-3.fc7.src.rpm python TBD NEW
system-config-httpd-1.4.3-1.fc7.src.rpm python TBD NEW
system-config-network-1.3.96-1.fc6.src.rpm python TBD ASSIGNED
telnet-0.17-37.src.rpm TBD NEW
tetex-3.0-36.fc7.src.rpm TBD NEW
texinfo-4.8-15.src.rpm TBD ASSIGNED
tn5250-0.17.3-9.fc7.src.rpm Openssl TBD NEW
tog-pegasus-2.5.2-2.fc6.src.rpm Openssl TBD ASSIGNED
tomcat5-5.5.17-6jpp.2.src.rpm java TBD NEW
unixODBC-2.2.12-1.fc7.src.rpm TBD NEW
unzip-5.52-4.fc7.src.rpm TBD NEW
util-linux-2.13-0.49.fc7.src.rpm TBD NEW
vino-2.17.5-1.fc7.src.rpm libgcrypt TBD ASSIGNED
vsftpd-2.0.5-8.src.rpm Openssl TBD NEW
w3m-0.5.1-15.fc6.src.rpm Openssl TBD NEW
wireshark-0.99.5-1.fc7.src.rpm libgcrypt, gnutls, python TBD NEW
wpa_supplicant-0.4.9-1.fc7.src.rpm Openssl TBD NEW
xchat-2.6.6-8.fc7.src.rpm Openssl TBD NEW
xdelta-1.1.4-1.fc7.src.rpm TBD NEW
xmlrpc-2.0.1-3jpp.2.src.rpm java TBD NEW
xmlsec1-1.2.9-8.1.src.rpm Openssl, gnutls, NSS TBD NEW
xorg-x11-xdm-1.1.3-1.fc7.src.rpm libcrypt TBD ASSIGNED
xsane-0.991-4.fc7.src.rpm TBD NEW
yp-tools-2.9-0.1.src.rpm libcrypt TBD ASSIGNED

Links

Here are some links to related pages:

  1. Crypto Consolidation Evaluation
  2. Fedora Bugzilla query for all consolidation packages
Retrieved from "https://fedoraproject.org/w/index.php?title=CryptoConsolidationScorecard&oldid=368837"