/usr/share/crypto-policies/back-ends/FIPS
NameSizeModeActions
bind.config1400644editdlrm
gnutls.config25280644editdlrm
java.config18530644editdlrm
javasystem.config1390644editdlrm
krb5.config890644editdlrm
libreswan.config2890644editdlrm
libssh.config9620644editdlrm
nss.config3520644editdlrm
openssh.config8190644editdlrm
opensshserver.config11140644editdlrm
openssl.config1820644editdlrm
opensslcnf.config7140644editdlrm
openssl_fips.config490644editdlrm
rpm-sequoia.config19710644editdlrm
Edit: /usr/share/crypto-policies/back-ends/FIPS/opensslcnf.config (714B)
CipherString = @SECLEVEL=2:kEECDH:kEDH:kPSK:kDHEPSK:kECDHEPSK:-kRSAPSK:-kRSA:-aDSS:-CHACHA20:-SHA256:-3DES:!DES:!RC4:!RC2:!IDEA:-SEED:!eNULL:!aNULL:-CBC:-SHA1:!MD5:-SHA384:-CAMELLIA:-ARIA:-AESCCM8 Ciphersuites = TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256:TLS_AES_128_CCM_SHA256 TLS.MinProtocol = TLSv1.2 TLS.MaxProtocol = TLSv1.3 DTLS.MinProtocol = DTLSv1.2 DTLS.MaxProtocol = DTLSv1.2 SignatureAlgorithms = ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:rsa_pss_pss_sha256:rsa_pss_pss_sha384:rsa_pss_pss_sha512:rsa_pss_rsae_sha256:rsa_pss_rsae_sha384:rsa_pss_rsae_sha512:RSA+SHA256:RSA+SHA384:RSA+SHA512:ECDSA+SHA224:RSA+SHA224 Groups = *secp256r1:secp521r1:secp384r1:ffdhe2048:ffdhe3072:ffdhe4096:ffdhe6144:ffdhe8192