Ubuntu Developing "crypto-config" For System-Wide Cryptography Configuration

Written by Michael Larabel in Ubuntu on 3 July 2024 at 08:52 AM EDT. 11 Comments
A new Ubuntu utility seeing an uptick in development recently is crypto-config as a means of system-wide cryptography configuration.

Crypto-config has been quietly in development since last year but seemingly now taking on more development load being past the Ubuntu 24.04 LTS phase. In last week's Ubuntu Foundations Team Updates it was described by Canonical engineer Adrien Nader as:
Work on crypto-config for system-wide configuration of cryptography

Updated code against latest specification, fixed several small issues
Added temporary code to be able to not be a dependency of the configured packages
Started preparing demonstration profiles
looked at gnutls’ configuration handling to add drop-ins support
looked at nginx’ configuration which prevents disabling TLS versions after they’ve been enabled once

Crypto-config isn't currently relied upon by Ubuntu but is under active development. There is a PPA for offering the latest crypto-config packages for those interested. The upstream code for crypto-config is currently on GitLab.


Documentation is light but crypto-config currently is aiming to be a means of system-wide cryptography configuration profile management. There are currently profiles for managing the crypto settings around Apt, Nginx, GnuTLS, and OpenSSL. It will be interesting to see what comes of crypto-config for easing crypto settings management in future Ubuntu releases.
Related News
About The Author
Michael Larabel

Michael Larabel is the principal author of Phoronix.com and founded the site in 2004 with a focus on enriching the Linux hardware experience. Michael has written more than 20,000 articles covering the state of Linux hardware support, Linux performance, graphics drivers, and other topics. Michael is also the lead developer of the Phoronix Test Suite, Phoromatic, and OpenBenchmarking.org automated benchmarking software. He can be followed via Twitter, LinkedIn, or contacted via MichaelLarabel.com.

Popular News This Week