/usr/share/crypto-policies/DEFAULT/opensslcnf.txt