/usr/share/crypto-policies/FIPS
library= name=Policy NSS=flags=policyOnly,moduleDB config="disallow=ALL allow=HMAC-SHA256:HMAC-SHA384:HMAC-SHA512:SECP256R1:SECP521R1:SECP384R1:aes256-gcm:aes128-gcm:SHA256:SHA384:SHA512:SHA224:ECDHE-RSA:ECDHE-ECDSA:DHE-RSA:TLS-REQUIRE-EMS:ECDSA:RSA-PSS:RSA-PKCS:tls-version-min=tls1.2:dtls-version-min=dtls1.2:DH-MIN=2048:DSA-MIN=2048:RSA-MIN=2048"
.
Edit
..
Edit
bind.txt
Edit
gnutls.txt
Edit
java.txt
Edit
javasystem.txt
Edit
krb5.txt
Edit
libreswan.txt
Edit
libssh.txt
Edit
nss.txt
Edit
openssh.txt
Edit
opensshserver.txt
Edit
openssl.txt
Edit
openssl_fips.txt
Edit
opensslcnf.txt
Edit