/usr/share/crypto-policies/policies/modules
NameSizeModeActions
AD-SUPPORT-LEGACY.pmod4690644editdlrm
AD-SUPPORT.pmod2830644editdlrm
ECDHE-ONLY.pmod1360644editdlrm
NO-ENFORCE-EMS.pmod2480644editdlrm
NO-SHA1.pmod1230644editdlrm
OSPP.pmod20720644editdlrm
PQ.pmod3850644editdlrm
SHA1.pmod1310644editdlrm
Edit: /usr/share/crypto-policies/policies/modules/NO-ENFORCE-EMS.pmod (248B)
# As per FIPS 140-3 IG Annex D.Q, EMS is mandatory in TLS 1.2 since 2023-05-16. # This subpolicy disables this mandatory EMS enforcement of the FIPS policy. # Doing so violates FIPS requirements, do not use in FIPS-compliant setups. __ems = RELAX