/usr/share/crypto-policies/DEFAULT
NameSizeModeActions
bind.txt940644editdlrm
gnutls.txt4370644editdlrm
java.txt3890644editdlrm
krb5.txt1790644editdlrm
libreswan.txt4480644editdlrm
libssh.txt13240644editdlrm
nss.txt4060644editdlrm
openssh.txt12570644editdlrm
opensshserver.txt16630644editdlrm
openssl.txt1420644editdlrm
opensslcnf.txt6470644editdlrm
Edit: /usr/share/crypto-policies/DEFAULT/libreswan.txt (448B)
conn %default ikev2=insist pfs=yes ike=aes_gcm256-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,chacha20_poly1305-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,aes256-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,aes_gcm128-sha2_512+sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18,aes128-sha2_256-dh19+dh20+dh21+dh14+dh15+dh16+dh18 esp=aes_gcm256,chacha20_poly1305,aes256-sha2_512+sha1+sha2_256,aes_gcm128,aes128-sha1+sha2_256