/usr/share/crypto-policies/LEGACY
NameSizeModeActions
bind.txt790644editdlrm
gnutls.txt3350644editdlrm
java.txt3570644editdlrm
krb5.txt1790644editdlrm
libreswan.txt4680644editdlrm
libssh.txt14340644editdlrm
nss.txt4390644editdlrm
openssh.txt13550644editdlrm
opensshserver.txt17540644editdlrm
openssl.txt1250644editdlrm
opensslcnf.txt6790644editdlrm
Edit: /usr/share/crypto-policies/LEGACY/nss.txt (439B)
library= name=Policy NSS=flags=policyOnly,moduleDB config="disallow=ALL allow=HMAC-SHA256:HMAC-SHA1:HMAC-SHA384:HMAC-SHA512:CURVE25519:SECP256R1:SECP384R1:SECP521R1:aes256-gcm:chacha20-poly1305:aes256-cbc:aes128-gcm:aes128-cbc:des-ede3-cbc:rc4:SHA256:SHA384:SHA512:SHA224:SHA1:ECDHE-RSA:ECDHE-ECDSA:RSA:DHE-RSA:DHE-DSS:DSA:ECDSA:RSA-PSS:RSA-PKCS:DSA:tls-version-min=tls1.0:dtls-version-min=dtls1.0:DH-MIN=1023:DSA-MIN=1023:RSA-MIN=1023"