/usr/share/crypto-policies/back-ends/FIPS
NameSizeModeActions
bind.config1400644editdlrm
gnutls.config5030644editdlrm
java.config5870644editdlrm
krb5.config1370644editdlrm
libreswan.config3590644editdlrm
libssh.config10200644editdlrm
nss.config3680644editdlrm
openssh.config8540644editdlrm
opensshserver.config11780644editdlrm
openssl.config1530644editdlrm
opensslcnf.config5950644editdlrm
Edit: /usr/share/crypto-policies/back-ends/FIPS/java.config (587B)
jdk.tls.ephemeralDHKeySize=2048 jdk.certpath.disabledAlgorithms=MD2, SHA1, MD5, DSA, RSA keySize < 2048 jdk.tls.disabledAlgorithms=DH keySize < 2048, TLSv1.1, TLSv1, SSLv3, SSLv2, TLS_RSA_WITH_AES_256_CBC_SHA256, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_RSA_WITH_AES_128_CBC_SHA256, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_GCM_SHA384, TLS_RSA_WITH_AES_128_GCM_SHA256, DHE_DSS, RSA_EXPORT, DHE_DSS_EXPORT, DHE_RSA_EXPORT, DH_DSS_EXPORT, DH_RSA_EXPORT, DH_anon, ECDH_anon, DH_RSA, DH_DSS, ECDH, 3DES_EDE_CBC, DES_CBC, RC4_40, RC4_128, DES40_CBC, RC2, HmacMD5 jdk.tls.legacyAlgorithms=