From Fedora Project Wiki

Crypto Consolidation Scorecard

For what this page is about see Fedora Crypto Consolidation and Crypto Consolidation Eval

Legend

Status Meaning
TBD Status unknown
Started The tracking bug report has an engineer assigned to the project
Implemented The module now can be compiled with the NSS option. (What about QA?)
Complete / Not Yet Upstream ??
Completed / Upstream The module is NSS-enabled, has been QA'd, and the upstream module owner has checked in the patch.

Components that Use NSS Already

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
cman-2.0.60-1.fc6.src.rpm NSS cfeist TBD Runs in FIPS mode? Other crypto?
coolkey-1.1.0-1.fc7.src.rpm NSS rrelyea, jmagne Completed / Upstream
epiphany-2.17.91-1.fc7.src.rpm NSS caillon TBD Runs in FIPS mode? Other crypto?
esc-1.0.0-19.fc7.src.rpm NSS jmagne Completed / Upstream
evolution-2.9.91-3.fc7.src.rpm NSS mbarnes TBD Runs in FIPS mode? Other crypto?
evolution-data-server-1.9.91-1.fc7.src.rpm NSS mbarnes TBD Runs in FIPS mode? Other crypto?
firefox-2.0.0.1-5.fc7.src.rpm NSS caillon Completed / Upstream
pidgin-2.4.3-1.fc9.src.rpm Libcrypt, NSS, Kerberos Completed / Upstream pidgin's libpurple can use gtls or nss, fedora builds it for nsss. wtogami owner?
gdm-2.17.6-4.fc7.src.rpm NSS rstrode Complete / Not Yet Upstream
mod_nss-1.0.6-2.fc7.i386.rpm NSS rcritten Completed / Upstream
openoffice.org-2.2.0-8.1.src.rpm NSS caolanm TBD Runs in FIPS mode? Other crypto?
seamonkey-1.1.1-2.fc7.i386.rpm NSS caillon Completed / Upstream No longer in Fedora
thunderbird-1.5.0.9-8.fc7.src.rpm NSS caillon Completed / Upstream

High priority

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
pam_pkcs11-0.5.3-22.src.rpm NSS rrelyea
openssh-4.5p1-2.fc7.src.rpm openssl tmraz Started
stunnel-4.20-2.src.rpm openssl mitr Implemented
wget-1.10.2-15.fc7.src.rpm openssl karsten Implemented Uses built-in MD5 and NTLM is disabled in test version
curl-7.19.3-1.fc11.src.rpm OpenSSL, GnuTLS, NSS kdudka Completed / Upstream also uses OpenSSL through libssh2
openldap-2.4.22-1.fc14.src.rpm openssl/nss rrelyea/jzeleny Implemented
gnupg-1.4.6-3.src.rpm nalin TBD
kernel-2.6.20-1.2936.fc7.src.rpm N/A TBD Not applicable to convert to NSS
kernel-xen-2.6-2.6.19-1.2898.2.3.fc7.src.rpm N/A TBD Not applicable to convert to NSS
new python bindings (python-nss) jdennis Completed / Upstream Upstream @ Mozilla along with NSS, in Fedora, in RHEL. API coverage not complete but essential bindings are there NEW
openswan-2.6.21-5.fc11.src.rpm own + NSS + kernel crypto avagarwa, emaldona Completed / Upstream ASSIGNED
rpm-4.4.2-40.fc7.src.rpm beecrypt, openssl tmraz Completed / Upstream
crypto-utils-2.4-1.src.rpm openssl or nss selectable via command line option emaldona, jorton Completed / Upstream ASSIGNED
cryptsetup-luks-1.0.3-4.fc7.src.rpm libgcrypt pjones TBD ASSIGNED
glibc-2.5.90-17.src.rpm jakub Started Waiting on NSS changes [rrelyea] ASSIGNED
krb5-1.6-1.src.rpm Kerberos rrelyea Started I have a prototype that works with 1.8 in non-FIPs mode. The plan is to clean up the key handling in 1.9 to allow FIPS mode to work NEW
pam_krb5-2.2.11-1.src.rpm Kerberos nalin TBD NEW
nfs-utils-lib-1.0.8-7.2.src.rpm Kerberos nalin TBD

Medium priority

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
vnc-4.1.2-11.fc7.src.rpm TBD
subversion-1.4.2-5.src.rpm Openssl, apr-util, python TBD
postfix-2.3.6-1.src.rpm Openssl TBD NEW
dovecot-1.0-3.rc22.fc7.src.rpm Openssl, Kerberos TBD NEW
cyrus-imap (need package name) TBD NEW
cups-1.2.8-1.fc7.src.rpm Libcrypt, gnutls TBD NEW

Low priority

Component Current Libraries Owner(s) Status Notes FIPS Compliant? Bug #
ant-1.7.0-1jpp.4.fc9.src.rpm java TBD NEW
apr-1.2.8-4.src.rpm Libcrypt TBD NEW
arts-1.5.6-1.fc7.src.rpm TBD CLOSED (WONTFIX)
authd-1.4.3-9.src.rpm Openssl TBD NEW
autofs-5.0.1-0.rc3.9.src.rpm Openssl TBD ASSIGNED
axis-1.2.1-2jpp.6.src.rpm java TBD NEW
bind-9.3.4-6.fc7.src.rpm Openssl TBD NEW
binutils-2.17.50.0.9-1.src.rpm TBD NEW
busybox-1.2.2-6.fc7.src.rpm TBD NEW
cadaver-0.22.3-6.src.rpm Openssl TBD NEW
cdrtools-2.01-10.src.rpm TBD NEW
classpathx-mail-1.1.1-4jpp.3.src.rpm java TBD NEW
compat-db-4.3.29-2.fc7.src.rpm TBD NEW
compat-gcc-34-3.4.6-4.src.rpm TBD NEW
coreutils-6.7-8.fc7.src.rpm TBD NEW
cvs-1.11.22-9.fc7.src.rpm Libcrypt, kerberos TBD NEW
cyrus-sasl-2.1.22-5.src.rpm Libcrypt, Openssl, kerberos TBD NEW
db4-4.5.20-4.fc7.src.rpm TBD NEW
dhcp-3.0.5-8.fc7.src.rpm TBD ASSIGNED
dictd-1.9.15-8.1.src.rpm TBD NEW
distcache-1.4.5-14.1.src.rpm Openssl TBD NEW
doxygen-1.5.1-2.src.rpm TBD NEW
dump-0.4b41-5.fc7.src.rpm TBD NEW
ecryptfs-utils-73-1.fc11.src.rpm Openssl, libgcrypt mhlavink Started ASSIGNED
elinks-0.12-0.6.pre2.src.rpm OpenSSL, GnuTLS, nss_compat_ossl kdudka Completed / Upstream CLOSED
epic-2.6-1.fc7.src.rpm Openssl TBD ASSIGNED
fetchmail-6.3.7-1.fc7.src.rpm Openssl, Kerberos TBD ASSIGNED
freeradius-1.1.3-2.1.src.rpm Libcrypt, Openssl TBD NEW
gcc-4.1.2-1.src.rpm TBD NEW
gdb-6.6-3.fc7.src.rpm TBD NEW
gedit-2.17.4-1.fc7.src.rpm python TBD NEW
gftp-2.0.18-3.2.2.src.rpm Openssl TBD NEW
ghostscript-8.15.3-7.fc7.src.rpm TBD NEW
gimp-2.2.13-1.fc6.src.rpm TBD NEW
gmime-2.2.3-5.fc7.src.rpm TBD NEW
gnome-doc-utils-0.10.1-1.fc7.src.rpm python TBD ASSIGNED
gnome-games-2.17.91-1.fc7.src.rpm Libgcrypt TBD NEW
gnome-keyring-0.7.91-1.fc7.src.rpm TBD NEW
gnome-pilot-conduits-2.0.15-3.fc7.src.rpm TBD ASSIGNED
gnome-terminal-2.17.91-3.fc7.src.rpm TBD NEEDINFO
gnome-user-share-0.10-6.fc7.src.rpm TBD NEW
gnome-vfs2-2.17.91-1.fc7.src.rpm Openssl TBD NEW
gnu-crypto-2.1.0-2jpp.1.src.rpm TBD NEW
gnutls-1.4.5-1.src.rpm libgcrypt Library CLOSED (NOTABUG)
grub-0.97-13.src.rpm TBD NEW
gstreamer-plugins-base-0.10.11-1.fc7.src.rpm TBD NEW
gthumb-2.9.1-1.fc7.src.rpm TBD NEEDINFO
hplip-1.7.1-1.fc7.src.rpm Openssl, python TBD NEW
htdig-3.2.0b6-9.fc7.src.rpm Openssl TBD NEW
httpd-2.2.3-8.src.rpm Openssl TBD NEW
ImageMagick-6.2.8.0-3.fc6.1.src.rpm TBD NEW
inn-2.4.3-6.fc6.src.rpm Kerberos TBD NEW
ipsec-tools-0.6.6-1.src.rpm Openssl TBD vpn
iscsi-initiator-utils-6.2.0.695-0.7.src.rpm TBD NEW
isdn4k-utils-3.2-54.fc7.src.rpm TBD NEW
jakarta-commons-codec-1.3-7jpp.2.src.rpm java TBD NEW
jakarta-commons-httpclient-3.0.1-1jpp.1.fc7.src.rpm java TBD NEW
jessie-1.0.1-7.src.rpm java TBD NEW
jgroups-2.2.9.2-3jpp.2.src.rpm java TBD NEW
jpilot-0.99.9-2.fc7.src.rpm Openssl TBD NEW
k3b-1.0.0-0.rc6.1.fc7.src.rpm Kdelibs TBD NEW
kdeadmin-3.5.6-1.fc7.src.rpm Kdelibs TBD NEW
kdebase-3.5.6-1.fc7.src.rpm TBD NEW
kdegraphics-3.5.6-1.fc7.src.rpm TBD NEW
kdenetwork-3.5.6-1.fc7.src.rpm Openssl TBD NEW
kdepim-3.5.6-2.fc7.src.rpm Libgpg++ TBD NEW
kdewebdev-3.5.6-1.fc7.src.rpm Kdelibs TBD NEW
kexec-tools-1.101-60.fc7.src.rpm TBD NEW
krb5-auth-dialog-0.7-1.src.rpm Kerberos TBD NEW
krbafs-1.2.2-10.1.src.rpm TBD NEW
ldapjdk-4.17-1jpp.7.src.rpm java TBD NEW
lftp-3.5.9-1.fc7.src.rpm Openssl TBD NEW
libc-client-2004g-3.src.rpm Openssl, Kerberos TBD NEW
libgcrypt-1.2.4-1.src.rpm Library CLOSED (NOTABUG)
libgnomeui-2.17.91-1.fc7.src.rpm TBD NEW
liboil-0.3.10-1.fc7.src.rpm TBD NEEDINFO
libsilc-1.0.2-2.fc6.src.rpm TBD NEW
libsoup-2.2.99-1.fc7.src.rpm Gnutls TBD ASSIGNED
libtirpc-0.1.7-4.fc6.src.rpm TBD ASSIGNED
libwvstreams-4.2.2-3.fc7.src.rpm openssl TBD NEW
libXdmcp-1.0.2-2.fc7.src.rpm TBD NEW
lucene-1.4.3-1jpp.14.src.rpm java TBD NEW
lynx-2.8.7-2.fc13.src.rpm openssl kdudka TBD NEW
m2crypto-0.17-1.src.rpm openssl TBD NEW
mailman-2.1.9-5.src.rpm python TBD NEW
mc-4.6.1a-43.20070124cvs.fc7.src.rpm TBD NEW
mdadm-2.6-1.fc7.src.rpm TBD NEW
mod_authz_ldap-0.26-7.1.src.rpm Openssl TBD NEW
mod_python-3.3.1-3.src.rpm python TBD NEW
mono-1.2.3-1.fc7.src.rpm TBD NEW
mutt-1.5.13-2.20070212cvs.fc7.src.rpm GNUtls, Kerberos TBD NEW
mx4j-3.0.1-6jpp.4.src.rpm java TBD NEW
mysql-5.0.33-1.fc7.src.rpm Openssl TBD NEW
mysqlclient10-3.23.58-9.2.1.src.rpm libcrypt TBD NEW
mysqlclient14-4.1.14-4.2.1.src.rpm Openssl TBD NEW
MySQL-python-1.2.1_p2-2.src.rpm Openssl TBD NEW
neon-0.25.5-5.1.src.rpm Openssl, Kerberos TBD NEW
netatalk-2.0.3-9.fc7.src.rpm Openssl, Kerberos TBD NEW
net-snmp-5.4-8.fc7.src.rpm Openssl TBD NEW
NetworkManager-0.6.5-0.cvs20061025.fc7.1.src.rpm libgcrypt & NSS Completed / Upstream CLOSED
nmap-4.20-1.src.rpm Openssl TBD NEW
nss_db-2.2-35.1.src.rpm TBD NEW
nss_ldap-253-4.src.rpm TBD NEW
ntp-4.2.4-4.fc7.src.rpm TBD NEW
nut-2.0.5-2.src.rpm Openssl mhlavink Started ASSIGNED
opal-2.2.5-1.fc7.src.rpm Openssl TBD NEW
openhpi-2.8.0-3.fc7.src.rpm Openssl TBD NEW
OpenIPMI-2.0.6-7.fc7.src.rpm Openssl TBD NEW
openmpi-1.1-8.fc7.src.rpm TBD NEW
openssl-0.9.8b-12.fc7.src.rpm Library CLOSED (NOTABUG)
pam-0.99.7.1-2.fc7.src.rpm TBD NEW
pam_ccreds-4-1.src.rpm Openssl TBD NEW
pam_smb-1.1.7-7.2.1.src.rpm TBD NEW
perl-Crypt-SSLeay-0.53-1.fc7.src.rpm Openssl TBD NEW
perl-IO-Socket-SSL-1.02-1.fc7.src.rpm Openssl TBD NEW
php-5.2.1-3.src.rpm Openssl, Kerberos TBD NEW
pilot-link-0.12.1-4.fc7.src.rpm TBD NEW
policycoreutils-2.0.2-3.fc7.src.rpm python TBD NEW
poppler-0.5.4-5.fc7.src.rpm TBD NEW
postgresql-8.2.3-2.fc7.src.rpm Openssl TBD NEW
postgresql-jdbc-8.2.504-1jpp.fc7.src.rpm java TBD NEW
postgresql-odbc-08.01.0200-4.fc7.src.rpm TBD NEW
ppp-2.4.4-2.src.rpm TBD NEW
prelink-0.3.10-1.src.rpm TBD NEW
puretls-0.9-0.b5.4jpp.1.src.rpm TBD NEW
pwlib-1.10.4-1.fc7.src.rpm Openssl TBD NEW
pyOpenSSL-0.6-1.p24.9.src.rpm Openssl TBD NEW
python-2.5-9.fc7.src.rpm Openssl TBD NEW
python-ldap-2.2.0-3.src.rpm Openssl TBD ASSIGNED
python-urlgrabber-2.9.9-5.fc7.src.rpm python TBD NEW
Pyrex-0.9.4-4.fc7.src.rpm python TBD ASSIGNED
qt-3.3.7-2.fc7.src.rpm TBD NEW
quagga-0.98.6-3.fc7.src.rpm libcrypt TBD NEW
rdesktop-1.5.0-1.fc7.src.rpm Openssl TBD NEW
rhpl-0.203-2.src.rpm python TBD NEW
rp-pppoe-3.5-32.1.src.rpm TBD NEW
rsh-0.17-39.fc7.src.rpm Kerberos TBD NEW
rsync-2.6.9-2.fc7.src.rpm TBD NEW
ruby-1.8.5.2-1.fc7.src.rpm Openssl TBD NEW
samba-3.0.24-2.fc7.src.rpm Kerberos TBD NEW
sane-backends-1.0.18-5.fc7.src.rpm TBD NEW
sendmail-8.14.0-1.src.rpm Openssl TBD NEW
setroubleshoot-1.9.3-1.fc7.src.rpm python TBD NEW
sharutils-4.6.1-2.src.rpm TBD NEW
spamassassin-3.1.8-2.fc7.src.rpm Openssl TBD NEW
squid-2.6.STABLE9-1.fc7.src.rpm Openssl TBD NEW
squirrelmail-1.4.8-4.fc6.src.rpm PHP TBD NEW
struts-1.2.9-4jpp.2.src.rpm java TBD NEW
syslinux-3.36-1.fc7.src.rpm TBD NEW
system-config-bind-4.0.2-3.fc7.src.rpm python TBD NEW
system-config-httpd-1.4.3-1.fc7.src.rpm python TBD NEW
system-config-network-1.3.96-1.fc6.src.rpm python TBD ASSIGNED
telnet-0.17-37.src.rpm TBD NEW
tetex-3.0-36.fc7.src.rpm TBD NEW
texinfo-4.8-15.src.rpm TBD ASSIGNED
tn5250-0.17.3-9.fc7.src.rpm Openssl TBD NEW
tog-pegasus-2.5.2-2.fc6.src.rpm Openssl TBD ASSIGNED
tomcat5-5.5.17-6jpp.2.src.rpm java TBD NEW
unixODBC-2.2.12-1.fc7.src.rpm TBD NEW
unzip-5.52-4.fc7.src.rpm TBD NEW
util-linux-2.13-0.49.fc7.src.rpm TBD NEW
vino-2.17.5-1.fc7.src.rpm libgcrypt TBD ASSIGNED
vsftpd-2.0.5-8.src.rpm Openssl TBD NEW
w3m-0.5.1-15.fc6.src.rpm Openssl TBD NEW
wireshark-0.99.5-1.fc7.src.rpm libgcrypt, gnutls, python TBD NEW
wpa_supplicant-0.4.9-1.fc7.src.rpm Openssl TBD NEW
xchat-2.6.6-8.fc7.src.rpm Openssl TBD NEW
xdelta-1.1.4-1.fc7.src.rpm TBD NEW
xmlrpc-2.0.1-3jpp.2.src.rpm java TBD NEW
xmlsec1-1.2.9-8.1.src.rpm Openssl, gnutls, NSS TBD NEW
xorg-x11-xdm-1.1.3-1.fc7.src.rpm libcrypt TBD ASSIGNED
xsane-0.991-4.fc7.src.rpm TBD NEW
yp-tools-2.9-0.1.src.rpm libcrypt TBD ASSIGNED

Links

Here are some links to related pages:

  1. Crypto Consolidation Evaluation
  2. Fedora Bugzilla query for all consolidation packages
Retrieved from "https://fedoraproject.org/w/index.php?title=CryptoConsolidationScorecard&oldid=307726"