chore: update cargo deny policy

deny.toml

@@ -22,12 +22,27 @@ allow = [
     "BSD-3-Clause",
     "Unicode-DFS-2016",
     "MPL-2.0",
+    "ISC",
+    "OpenSSL"
 ]
 copyleft = "deny"
 allow-osi-fsf-free = "neither"
 default = "deny"
 confidence-threshold = 0.96
 
+# See: https://github.com/EmbarkStudios/cargo-deny/issues/389
+[[licenses.clarify]]
+name = "ring"
+# SPDX considers OpenSSL to encompass both the OpenSSL and SSLeay licenses
+# https://spdx.org/licenses/OpenSSL.html
+# ISC - Both BoringSSL and ring use this for their new files
+# MIT - "Files in third_party/ have their own licenses, as described therein. The MIT
+# license, for third_party/fiat, which, unlike other third_party directories, is
+# compiled into non-test libraries, is included below."
+# OpenSSL - Obviously
+expression = "ISC AND MIT AND OpenSSL"
+license-files = [{ path = "LICENSE", hash = 0xbd0eed23 }]
+
 [licenses.private]
 ignore = false