PATH:
usr
/
share
/
crypto-policies
/
policies
/
modules
# As per FIPS 140-3 IG Annex D.Q, EMS is mandatory in TLS 1.2 since 2023-05-16. # This subpolicy disables this mandatory EMS enforcement of the FIPS policy. # Doing so violates FIPS requirements, do not use in FIPS-compliant setups. __ems = RELAX
[-] AD-SUPPORT-LEGACY.pmod
[edit]
[-] OSPP.pmod
[edit]
[-] NO-SHA1.pmod
[edit]
[-] ECDHE-ONLY.pmod
[edit]
[+]
..
[-] AD-SUPPORT.pmod
[edit]
[-] PQ.pmod
[edit]
[-] SHA1.pmod
[edit]
[-] NO-ENFORCE-EMS.pmod
[edit]