-
Bug
-
Resolution: Unresolved
-
Critical
-
rhel-10.1
-
crypto-policies-20250905-2.gitc7eb7b2.el10_1
-
No
-
Moderate
-
1
-
rhel-security-crypto-spades
-
31
-
32
-
0.5
-
False
-
False
-
-
No
-
Crypto25September
-
Approved Exception
-
-
Pass
-
Not Needed
-
Manual
-
Unspecified Release Note Type - Unknown
-
Unspecified
-
Unspecified
-
Unspecified
-
-
All
-
None
What were you trying to do that didn't work?
We have crypto-policies from 10.0 + crypto-policies-pq-preview to enable PQ crypto in RHEL 10.0
# dnf update Updating Subscription Management repositories. Unable to read consumer identity This system is not registered with an entitlement server. You can use "rhc" or "subscription-manager" to register. rhel 44 MB/s | 1.5 MB 00:00 rhel-AppStream 48 MB/s | 1.5 MB 00:00 Error: Problem 1: package crypto-policies-pq-preview-20250214-1.gitfd9b9b9.el10_0.1.noarch from @System requires crypto-policies = 20250214-1.gitfd9b9b9.el10_0.1, but none of the providers can be installed - cannot install both crypto-policies-20250804-1.git2ca4115.el10.noarch from rhel and crypto-policies-20250214-1.gitfd9b9b9.el10_0.1.noarch from @System - cannot install both crypto-policies-20250214-1.gitfd9b9b9.el10_0.1.noarch from rhel-updates and crypto-policies-20250804-1.git2ca4115.el10.noarch from rhel - cannot install the best update candidate for package crypto-policies-pq-preview-20250214-1.gitfd9b9b9.el10_0.1.noarch - cannot install the best update candidate for package crypto-policies-20250214-1.gitfd9b9b9.el10_0.1.noarch Problem 2: problem with installed package crypto-policies-pq-preview-20250214-1.gitfd9b9b9.el10_0.1.noarch - package crypto-policies-pq-preview-20250214-1.gitfd9b9b9.el10_0.1.noarch from @System requires oqsprovider, but none of the providers can be installed - package crypto-policies-pq-preview-20250214-1.gitfd9b9b9.el10_0.1.noarch from rhel-AppStream-updates requires oqsprovider, but none of the providers can be installed - package openssl-1:3.5.1-3.el10.x86_64 from rhel obsoletes oqsprovider < 0.9.0 provided by oqsprovider-0.8.0-5.el10.x86_64 from @System - package openssl-1:3.5.1-3.el10.x86_64 from rhel obsoletes oqsprovider < 0.9.0 provided by oqsprovider-0.8.0-5.el10.x86_64 from rhel-AppStream - package openssl-1:3.5.1-3.el10.x86_64 from rhel obsoletes oqsprovider < 0.9.0 provided by oqsprovider-0.8.0-5.el10.x86_64 from rhel-AppStream-updates - cannot install the best update candidate for package openssl-1:3.2.2-16.el10.x86_64 (try to add '--allowerasing' to command line to replace conflicting packages or '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)
What is the impact of this issue to you?
On upgrade from 10.0 to 10.1 the crypto policies should remove crypto-policies-pq-preview
Please provide the package NVR for which the bug is seen:
How reproducible is this bug?:
Steps to reproduce
Expected results
Actual results
- links to
-
RHBA-2025:148296 crypto-policies bug fix and enhancement update