F37: CHANGE: Strong crypto settings: phase 3, forewarning 1/2

[dustymabe]

For the proposed Fedora 37 changes we decided to discuss further the following change:

• Strong crypto settings: phase 3, forewarning 1/2
  • Cryptographic policies will be tightened in Fedora 38-39, SHA-1 signatures will no longer be trusted by default. Fedora 37 specifically doesn't come with any change of defaults, and this Fedora Change is an advance warning filed for extra visibility. Test your setup with TEST-FEDORA39 today and file bugs so you won't get bit by Fedora 38-39.
  • Tracking bug: #2089811
  • NOTES: LB: we may want to check how much we will be impact by this in F38/F39

[dustymabe]

For Fedora CoreOS we might want to adapt some tests to use the new stronger defaults early OR possibly ship this on our next stream earlier than Fedora 38 beta.

[travier]

We are now moving to F42. Closing this one.