/usr/share/crypto-policies/back-ends/DEFAULT
NameSizeModeActions
bind.config940644editdlrm
gnutls.config4370644editdlrm
java.config3890644editdlrm
krb5.config1790644editdlrm
libreswan.config4480644editdlrm
libssh.config13240644editdlrm
nss.config4060644editdlrm
openssh.config12570644editdlrm
opensshserver.config16630644editdlrm
openssl.config1420644editdlrm
opensslcnf.config6470644editdlrm
Edit: /usr/share/crypto-policies/back-ends/DEFAULT/java.config (389B)
jdk.tls.ephemeralDHKeySize=2048 jdk.certpath.disabledAlgorithms=MD2, MD5, DSA, RSA keySize < 2048 jdk.tls.disabledAlgorithms=DH keySize < 2048, TLSv1.1, TLSv1, SSLv3, SSLv2, DHE_DSS, RSA_EXPORT, DHE_DSS_EXPORT, DHE_RSA_EXPORT, DH_DSS_EXPORT, DH_RSA_EXPORT, DH_anon, ECDH_anon, DH_RSA, DH_DSS, ECDH, 3DES_EDE_CBC, DES_CBC, RC4_40, RC4_128, DES40_CBC, RC2, HmacMD5 jdk.tls.legacyAlgorithms=