Crypto policies used by different applications and libraries
Description
This package provides few predefined security policies such as LEGACY, DEFAULT and FUTURE
which are set system-wide by the administrator, used by various cryptographic back-ends,
such as GnuTLS, OpenSSL, NSS, BIND, libkrb5, OpenSSH, Java via OpenJDK, libssh.
Then applications that have no special needs will follow these policies by default.
That way the management of the various crypto applications and libraries used in a
system simplifies significantly.
The current implementations works by setting the desired policy in /etc/crypto-policies/config.
After this file is changed the script 'update-crypto-policies' should be executed,
and the new policies will activate.
The policies are described in a simple policy language at policies/POLICYFILE.pol,
and they operate on strings defined at the beginning of python/cryptopolicies.py.
Individual application configuration generators are present in python/policygenerators.
To generate the policies per application use the script python/build-crypto-policies.py
policydir DESTDIR or make install.
