From f9c33657bf715498da83da1c932d6a21cb635dab Mon Sep 17 00:00:00 2001
From: Tomas Mraz <tmraz@fedoraproject.org>
Date: May 27 2020 08:51:18 +0000
Subject: Update from upstream git master


explicitly enable DHE-DSS in gnutls config if enabled in policy
use grubby with --update-kernel=ALL to avoid breaking kernelopts
OSPP subpolicy: Allow GCM for SSH protocol
openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges
if the policy in FIPS mode is not a FIPS policy print a message
openssl: Add SignatureAlgorithms support

---

diff --git a/crypto-policies.spec b/crypto-policies.spec
index 7d40c8d..eb2847d 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20200312
-%global git_commit 3ae59d25388d9ed8d95bbe7a1a188b2715b697f6
+%global git_date 20200527
+%global git_commit b234a474f5b2a4684e1e5f163a5ddbeda69a7014
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -169,6 +169,14 @@ make check %{?_smp_mflags}
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
+* Wed May 27 2020 Tomáš Mráz <tmraz@redhat.com> - 20200527-1.gitb234a47
+- explicitly enable DHE-DSS in gnutls config if enabled in policy
+- use grubby with --update-kernel=ALL to avoid breaking kernelopts
+- OSPP subpolicy: Allow GCM for SSH protocol
+- openssh: Support newly standardized ECDHE-GSS and DHE-GSS key exchanges
+- if the policy in FIPS mode is not a FIPS policy print a message
+- openssl: Add SignatureAlgorithms support
+
 * Thu Mar 12 2020 Tomáš Mráz <tmraz@redhat.com> - 20200312-1.git3ae59d2
 - custom crypto policies: enable completely overriding contents of the list
   value
diff --git a/sources b/sources
index dbd0198..aca7b58 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-git3ae59d2.tar.gz) = e8dbe3d2457e681d28f637290b8b4ebfdb91a5b0737a0c8311cfd41f390d8be78afbe977f4179059e52b2755f309aaeec9f474ea91177878dd93383edc64c38a
+SHA512 (crypto-policies-gitb234a47.tar.gz) = 9efaf3e336af22774c7188828731d889da348ff0015823a4909ac1b4b97c144ee09d3b29ebdf80e6e4731addc0dd03c92d8775f0cd91dc5d87adf62371898dca