From Fedora Project Wiki
Description
This test case ensures the correct functioning of crypto-policies
, which provides the system-wide cryptographic policies defining the cryptographic settings for various packages, ensuring consistent security and performance profiles. The associated crypto-policies-scripts
provides utilities to manage and apply these policies.
Setup
- Install a fresh version of Fedora.
- Install
crypto-policies
andcrypto-policies-scripts
:sudo dnf install crypto-policies crypto-policies-scripts
.
How to test
- Check the current applied policy:
update-crypto-policies --show
. - Set a new policy, e.g.,
update-crypto-policies --set FUTURE
. - Again, check the applied policy to confirm the change.
- Revert back to the default policy:
update-crypto-policies --set DEFAULT
. - Check if the policy has been reverted.
- Optionally, explore other provided scripts from the
crypto-policies-scripts
package and test their functionality.
Expected Results
- The
update-crypto-policies --show
command should display the current applied policy without any errors. - After setting the
FUTURE
policy, the new policy should be applied, and it should reflect when checked. - After reverting back to the
DEFAULT
policy, it should be confirmed as the current applied policy. - Any other tested scripts should function without errors and produce the expected results.
Optional
For extended testing:
- Test the impact of the set policy on various cryptographic back-ends and services (like OpenSSL or GnuTLS).
- Explore and test any other relevant scripts in the
crypto-policies-scripts
package. - Check manual pages for the scripts and utilities for additional functionalities: e.g.,
man update-crypto-policies
.