/usr/share/crypto-policies/back-ends/FUTURE
NameSizeModeActions
bind.config1240644editdlrm
gnutls.config5290644editdlrm
java.config6570644editdlrm
krb5.config1070644editdlrm
libreswan.config2010644editdlrm
libssh.config10650644editdlrm
nss.config3470644editdlrm
openssh.config9750644editdlrm
opensshserver.config13440644editdlrm
openssl.config1650644editdlrm
opensslcnf.config5800644editdlrm
Edit: /usr/share/crypto-policies/back-ends/FUTURE/nss.config (347B)
library= name=Policy NSS=flags=policyOnly,moduleDB config="disallow=ALL allow=HMAC-SHA256:HMAC-SHA384:HMAC-SHA512:CURVE25519:SECP256R1:SECP384R1:SECP521R1:aes256-gcm:chacha20-poly1305:SHA256:SHA384:SHA512:ECDHE-RSA:ECDHE-ECDSA:DHE-RSA:ECDSA:RSA-PSS:RSA-PKCS:tls-version-min=tls1.2:dtls-version-min=dtls1.2:DH-MIN=3072:DSA-MIN=3072:RSA-MIN=3072"