2.3. Switching the system-wide cryptographic policy to mode compatible with earlier releases
The default system-wide cryptographic policy in Red Hat Enterprise Linux 10 does not allow communication using older, insecure protocols. For environments that require compatibility with Red Hat Enterprise Linux 6 or earlier, the less secure LEGACY policy is available.
Switching to the LEGACY policy results in a less secure system and applications.
Prerequisites
-
Commands that start with the
#command prompt require administrative privileges provided bysudoor root user access. For information on how to configuresudoaccess, see Enabling unprivileged users to run certain commands.
Procedure
To switch the system-wide cryptographic policy to
LEGACY, enter:# update-crypto-policies --set LEGACY Setting system policy to LEGACYFor the list of available cryptographic policies, see the
update-crypto-policies(8)man page on your system.To make your cryptographic settings effective for already running services and applications, restart the system:
$ reboot
Verification
After the restart, verify the current policy is set to
LEGACY:$ update-crypto-policies --show LEGACY
Next steps
-
For defining custom cryptographic policies, see the
Custom Policiessection in theupdate-crypto-policies(8)man page and theCrypto Policy Definition Formatsection in thecrypto-policies(7)man page on your system.