How to edit /etc/crypto-policies/back-ends/openssl.config on Fedora Kinoite?

Ask Fedora
,
1

I’m currently trying out Fedora Kinoite. I am using “normal” Linux Distros for Years (mostly Ubuntu and Manjaro), but everyone talks about how good immutable Distros are, so I want to try it out myself on my new Laptop. I need to connect to a WPA/WPA2 Enterpise Network. This doesn’t work out of the box. I found out that the command sudo update-crypto-policies --set LEGACY fixes the problem. That works for Fedora 38, but it no longer works for Fedora 39.

I found this topic which seems to have a solution for my problem. But it requires editing /etc/crypto-policies/back-ends/openssl.config, but this file is just a symlink to /usr/share/crypto-policies/LEGACY/openssl.txt, which is part of the read only fs. The documentation says, that I can use rpm-ostree replace to replace a package, but that’s not what I want. The documentation also mentions rpm-ostree usroverlay, which makes /usr writeable, so I can change this file. However, the changes are not persist across reboots, which makes this useless for me. How am I supposed to edit this file and connect to the Network?

3

I have now created /etc/crypto-policies/local.d/back-end-openssl.config with just SECLEVEL=0 as content, but without luck.

4

Replace the symlink with a plain text file:
Fedora 39 802.1x TLS authentication does not work - #4 by vgaetera

5

Using @SECLEVEL don’t works, but replaceing the symlink with a copy of the file and edit it works. Are there any problems e.g. on a OpenSSL Upgrade with this?