Clemens Lang

hidraw is not cross-platform and does not work on non-Linux systems, while libusb does.

jpmens: You could try downloading ddraw, it's a web-based tool to create graph definitions. Also, have a look at munin, they have some pretty neat graph definitions for bind yet...

Interesting idea, but I'm wondering why you're not just putting the CSS on `example.com` as well, which would make this unnecessary?

OK, I see that use case and am willing to accept this patch, but I'm not convinced `--website` is a good parameter name for this. Let's maybe use `--base-path` instead?...

> Test failures seem relevant Yes, I'll fix those.

Rebased on top of the current master. I believe I have currently addressed all review comments and would appreciate another round of reviews.

As you know, [SHA-1's collision resistance][sha1mbles] is no longer what it used to be. In RHEL 9, we're shipping a [downstream patch][c9s-sha1-disable-patch] that provides an option to make creation and...

Yeah, this was aiming at signatures only for now. Maybe we eventually want to add a similar approach for KDFs, MACs, DRBGs, but I don't think that area is as...

> Configuration options certainly empower users/administrators to make some blanket policy statements; but I think it's worth noting that signing and verifying have different policies applied to them. > >...

Sure, we can make that happen: ``` [evp_properties] signature_digest_algorithms_signing = "ALL:!MD4:!MD5:!MDC2:!RIPEMD160:!SM3:!whirlpool:!SHA1:!SHA1-MD5" signature_digest_algorithms_verification = "ALL:!MD4:!MD5:!MDC2:!RIPEMD160:!SM3" ``` There are upsides and downsides to this – the example above is relatively simple to...