/usr/share/crypto-policies/back-ends/FUTURE
NameSizeModeActions
bind.config1240644editdlrm
gnutls.config5290644editdlrm
java.config6570644editdlrm
krb5.config1070644editdlrm
libreswan.config2010644editdlrm
libssh.config10650644editdlrm
nss.config3470644editdlrm
openssh.config9750644editdlrm
opensshserver.config13440644editdlrm
openssl.config1650644editdlrm
opensslcnf.config5800644editdlrm
Edit: /usr/share/crypto-policies/back-ends/FUTURE/opensslcnf.config (580B)
CipherString = @SECLEVEL=3:kEECDH:kEDH:kPSK:kDHEPSK:kECDHEPSK:-kRSA:-aDSS:-AES128:-SHA256:-3DES:!DES:!RC4:!RC2:!IDEA:-SEED:!eNULL:!aNULL:-SHA1:!MD5:-SHA384:-CAMELLIA:-ARIA:-AESCCM8 Ciphersuites = TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256 TLS.MinProtocol = TLSv1.2 TLS.MaxProtocol = TLSv1.3 DTLS.MinProtocol = DTLSv1.2 DTLS.MaxProtocol = DTLSv1.2 SignatureAlgorithms = ECDSA+SHA256:ECDSA+SHA384:ECDSA+SHA512:ed25519:ed448:rsa_pss_pss_sha256:rsa_pss_rsae_sha256:rsa_pss_pss_sha384:rsa_pss_rsae_sha384:rsa_pss_pss_sha512:rsa_pss_rsae_sha512:RSA+SHA256:RSA+SHA384:RSA+SHA512