From e5568ea8b4dc1f6170662d58e59c09984225357e Mon Sep 17 00:00:00 2001 From: Ben Cotton Date: May 09 2022 18:57:20 +0000 Subject: Add SHA-1 deprecation notice. Fixes #829 --- diff --git a/modules/release-notes/pages/sysadmin/Security.adoc b/modules/release-notes/pages/sysadmin/Security.adoc index fac186d..deff295 100644 --- a/modules/release-notes/pages/sysadmin/Security.adoc +++ b/modules/release-notes/pages/sysadmin/Security.adoc @@ -4,6 +4,13 @@ include::{partialsdir}/entities.adoc[] [[sect-security]] = Security +NOTE: SHA-1 signatures will be distrusted beginning in Fedora Linux 39. +This is part of the next installment of our periodic tightening of cryptographic defaults. +The change has the potential to be significantly disruptive. +We urge users and package maintainers to test their software by either previewing upcoming restrictive cryptographic policies +or passively logging the offending applications and workflows starting from Fedora Linux36. +Please refer to the https://fedoraproject.org/wiki/Changes/StrongCryptoSettings3[Strong Crypto Settings 3 proposal] and https://fedoraproject.org/wiki/SHA1SignaturesGuidance[SHA1 signature guideance] for more details on the plan and specific steps to take. + [[openssl3]] == OpenSSL 3.0