/usr/share/crypto-policies/DEFAULT
NameSizeModeActions
bind.txt940644editdlrm
gnutls.txt4370644editdlrm
java.txt3890644editdlrm
krb5.txt1790644editdlrm
libreswan.txt4480644editdlrm
libssh.txt13240644editdlrm
nss.txt4060644editdlrm
openssh.txt12570644editdlrm
opensshserver.txt16630644editdlrm
openssl.txt1420644editdlrm
opensslcnf.txt6470644editdlrm
Edit: /usr/share/crypto-policies/DEFAULT/java.txt (389B)
jdk.tls.ephemeralDHKeySize=2048 jdk.certpath.disabledAlgorithms=MD2, MD5, DSA, RSA keySize < 2048 jdk.tls.disabledAlgorithms=DH keySize < 2048, TLSv1.1, TLSv1, SSLv3, SSLv2, DHE_DSS, RSA_EXPORT, DHE_DSS_EXPORT, DHE_RSA_EXPORT, DH_DSS_EXPORT, DH_RSA_EXPORT, DH_anon, ECDH_anon, DH_RSA, DH_DSS, ECDH, 3DES_EDE_CBC, DES_CBC, RC4_40, RC4_128, DES40_CBC, RC2, HmacMD5 jdk.tls.legacyAlgorithms=