/usr/share/crypto-policies/policies/modules
NameSizeModeActions
AD-SUPPORT-LEGACY.pmod4690644editdlrm
AD-SUPPORT.pmod2830644editdlrm
ECDHE-ONLY.pmod1360644editdlrm
NO-ENFORCE-EMS.pmod2480644editdlrm
NO-SHA1.pmod1230644editdlrm
OSPP.pmod20720644editdlrm
PQ.pmod3850644editdlrm
SHA1.pmod1310644editdlrm
Edit: /usr/share/crypto-policies/policies/modules/AD-SUPPORT.pmod (283B)
# AD-SUPPORT subpolicy is intended to be used in Active Directory environments. # This subpolicy is provided for enabling aes256-cts-hmac-sha1-96, # the strongest Kerberos encryption type interoperable with Active Directory. cipher@kerberos = AES-256-CBC+ mac@kerberos = HMAC-SHA1+