<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
I build a test RHEL 9 server using the following Red Hat security profile:
<div class="FluidPluginCopy"><br>
</div>
<div class="FluidPluginCopy">"Protection Profile for General Purpose Operating Systems"</div>
<div class="FluidPluginCopy">This profile is part of Red Hat Enterprise Linux 9 Common Criteria Guidance</div>
<div class="FluidPluginCopy">documenation for Target of Evaluation based on Protection Profile for
</div>
<div class="FluidPluginCopy">General Purpose Operating System (OSPP) version 4.2.1 and Functional</div>
<div class="FluidPluginCopy">Package for SSH version 1.0</div>
<div class="FluidPluginCopy"><br>
</div>
<div class="FluidPluginCopy">I was going to test using Zendto using this profile, but when attempting to setup the yum repository:</div>
<div class="FluidPluginCopy"><br>
</div>
<div class="FluidPluginCopy">rpm --import https://zend.to/files/zendto.gpg.asc</div>
<div class="FluidPluginCopy"><br>
</div>
<div class="FluidPluginCopy">This error occurs:</div>
<div class="FluidPluginCopy elementToProof">warning: Signature not supported. Hash algorithm SHA1 not available.</div>
<div class="FluidPluginCopy">error: https://zend.to/files/zendto.gpg.asc: key 1 import failed.</div>
<div class="FluidPluginCopy"><br>
</div>
<div class="FluidPluginCopy">$ /usr/bin/openssl ciphers -V</div>
<div class="FluidPluginCopy"> 0x13,0x02 - TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0x13,0x01 - TLS_AES_128_GCM_SHA256 TLSv1.3 Kx=any Au=any Enc=AESGCM(128) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0xC0,0x2C - ECDHE-ECDSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(256) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0xC0,0x30 - ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(256) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0xC0,0x2B - ECDHE-ECDSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=ECDSA Enc=AESGCM(128) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0xC0,0x2F - ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=ECDH Au=RSA Enc=AESGCM(128) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0x00,0x9F - DHE-RSA-AES256-GCM-SHA384 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(256) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0x00,0x9E - DHE-RSA-AES128-GCM-SHA256 TLSv1.2 Kx=DH Au=RSA Enc=AESGCM(128) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0x00,0xA9 - PSK-AES256-GCM-SHA384 TLSv1.2 Kx=PSK Au=PSK Enc=AESGCM(256) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0x00,0xA8 - PSK-AES128-GCM-SHA256 TLSv1.2 Kx=PSK Au=PSK Enc=AESGCM(128) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0x00,0xAB - DHE-PSK-AES256-GCM-SHA384 TLSv1.2 Kx=DHEPSK Au=PSK Enc=AESGCM(256) Mac=AEAD</div>
<div class="FluidPluginCopy"> 0x00,0xAA - DHE-PSK-AES128-GCM-SHA256 TLSv1.2 Kx=DHEPSK Au=PSK Enc=AESGCM(128) Mac=AEAD</div>
<div class="FluidPluginCopy"><br>
</div>
<div class="FluidPluginCopy elementToProof">So the protection profile eliminated the SHA1
<span style="color:rgb(0, 0, 0);font-size:14px;background-color:rgb(255, 255, 255);display:inline !important" class="FluidPluginCopy">
algorithm</span>.</div>
<div class="FluidPluginCopy"><br>
</div>
<div class="FluidPluginCopy elementToProof">Is another cipher or option available that can be used to setup the yum repository?</div>
<div class="elementToProof" style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
<br>
</div>
<div class="elementToProof" style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Cheers</div>
<div class="elementToProof" style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);">
Brad</div>
<div class="elementToProof">
<div id="Signature">
<div>
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px"></p>
</div>
</div>
</div>
</div>
</body>
</html>