Project

General

Profile

Actions

Feature #36325

open

Support setting key-algorithm for ISC DHCP

Added by Ewoud Kohl van Wijngaarden about 2 years ago. Updated 1 day ago.

Status:
Ready For Testing
Priority:
Normal
Category:
DHCP
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

EL 8.2 introduced support for specifying key-algorithm in omshell (https://access.redhat.com/errata/RHBA-2021:1623) and Debian stable also supports this. If unspecified, it defaults to the insecure HMAC-MD5. Especially on FIPS (where MD5 is forbidden) this is problematic.

Actions

Also available in: Atom PDF