/etc/crypto-policies/back-ends
NameSizeModeActions
bind.config940644editdlrm
gnutls.config4370644editdlrm
java.config3890644editdlrm
krb5.config1790644editdlrm
libreswan.config4480644editdlrm
libssh.config13240644editdlrm
nss.config4520644editdlrm
openssh.config12570644editdlrm
opensshserver.config16630644editdlrm
openssl.config1420644editdlrm
opensslcnf.config6470644editdlrm
Edit: /usr/share/crypto-policies/DEFAULT/libreswan.txt (448B)
conn %default ikev2=insist pfs=yes ike=aes_gcm256-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,chacha20_poly1305-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,aes256-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,aes_gcm128-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,aes128-sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18 esp=aes_gcm256,chacha20_poly1305,aes256-sha2_512+sha1+sha2_256,aes_gcm128,aes128-sha1+sha2_256