It's in misc, so yes, you have to edit sources.list.

https://packages.debian.org/source/stretch/igtf-policy-bundle

On Mon, Jun 25, 2018 at 2:25 AM, Van L <van@scratch.space> wrote:

>
> > Jimmy Yuen Ho Wong wrote:
> >
> > On Debian, you can get a bunch of CRL PEM files by the following:
> >
> >     $ sudo apt-get install igtf-policy-bundle
> >     $ sudo apt-get install fetch-crl
> >     $ sudo fetch-crl -p 8 --format pem
>
> On Debian (stretch), do you change sources.list?
>
>   All packages are up to date.
>   /etc/apt # apt install igtf-policy-bundle
>   Reading package lists... Done
>   Building dependency tree
>   Reading state information... Done
>   E: Unable to locate package igtf-policy-bundle
>
> There are `igtf-policy-` things but not `bundle`:
>
>   https://packages.debian.org/stretch/igtf-policy-iota
>