From Fedora Project Wiki
Description
This test case ensures the correct functioning of crypto-policies, which provides the system-wide cryptographic policies defining the cryptographic settings for various packages, ensuring consistent security and performance profiles. The associated crypto-policies-scripts provides utilities to manage and apply these policies.
Setup
- Install a fresh version of Fedora.
- Install
crypto-policiesandcrypto-policies-scripts:sudo dnf install crypto-policies crypto-policies-scripts.
How to test
- Check the current applied policy:
update-crypto-policies --show. - Set a new policy, e.g.,
update-crypto-policies --set FUTURE. - Again, check the applied policy to confirm the change.
- Revert back to the default policy:
update-crypto-policies --set DEFAULT. - Check if the policy has been reverted.
- Optionally, explore other provided scripts from the
crypto-policies-scriptspackage and test their functionality.
Expected Results
- The
update-crypto-policies --showcommand should display the current applied policy without any errors. - After setting the
FUTUREpolicy, the new policy should be applied, and it should reflect when checked. - After reverting back to the
DEFAULTpolicy, it should be confirmed as the current applied policy. - Any other tested scripts should function without errors and produce the expected results.
Optional
For extended testing:
- Test the impact of the set policy on various cryptographic back-ends and services (like OpenSSL or GnuTLS).
- Explore and test any other relevant scripts in the
crypto-policies-scriptspackage. - Check manual pages for the scripts and utilities for additional functionalities: e.g.,
man update-crypto-policies.
