appliance: Copy in /etc/crypto-policies/back-ends/ files

Downstream patched openssl in Fedora 37+ broke unless
/etc/crypto-policies/back-ends/opensslcnf.conf is present.  Files in
this directory are generated by %post rules that use scripting
languages so cannot easily be created by supermin.

Force a copy of the host files into the appliance.  This is not ideal
and is hopefully a temporary fix until Fedora's openssl is fixed.

A symptom of this problem is the error:

  Requested hash sha256 is not supported.
  Failed to set pbkdf parameters.

Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2133884
This commit is contained in:
Richard W.M. Jones
2022-10-11 21:48:30 +01:00
parent cf89757883
commit d6ba398825

View File

@@ -14,6 +14,12 @@ dnl FRUGALWARE=1 For Frugalware.
dnl MAGEIA=1 For Mageia.
dnl OPENMANDRIVA=1 For OpenMandriva.
# Work around broken openssl in Fedora 37+ by forcibly copying in
# these host configuration files (RHBZ#2133884).
ifelse(REDHAT,1,
/etc/crypto-policies/back-ends/*.config
)
/etc/ld.so.cache
/lib/lsb/*
/usr/share/augeas/lenses/*.aug