It's in misc, so yes, you have to edit sources.list.

https://packages.debian.org/source/stretch/igtf-policy-bundle

On Mon, Jun 25, 2018 at 2:25 AM, Van L <van@scratch.space> wrote:

> Jimmy Yuen Ho Wong wrote:
>
> On Debian, you can get a bunch of CRL PEM files by the following:
>
>     $ sudo apt-get install igtf-policy-bundle
>     $ sudo apt-get install fetch-crl
>     $ sudo fetch-crl -p 8 --format pem

On Debian (stretch), do you change sources.list?

  All packages are up to date.
  /etc/apt # apt install igtf-policy-bundle
  Reading package lists... Done
  Building dependency tree
  Reading state information... Done
  E: Unable to locate package igtf-policy-bundle

There are `igtf-policy-` things but not `bundle`:

  https://packages.debian.org/stretch/igtf-policy-iota