diff --git a/.crypto-policies.metadata b/.crypto-policies.metadata
index 1a3d4d0..06104fd 100644
--- a/.crypto-policies.metadata
+++ b/.crypto-policies.metadata
@@ -1 +1 @@
-4d5e23d4260a9700829d7c684f82893072a85c5e SOURCES/crypto-policies-gitf03e75e.tar.gz
+de1d69d0e29453cfbed156815ddc24052f3e7887 SOURCES/crypto-policies-git5203b41.tar.gz
diff --git a/.gitignore b/.gitignore
index 02ea571..01e18c8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-SOURCES/crypto-policies-gitf03e75e.tar.gz
+SOURCES/crypto-policies-git5203b41.tar.gz
diff --git a/SPECS/crypto-policies.spec b/SPECS/crypto-policies.spec
index f4ac4fe..c53477c 100644
--- a/SPECS/crypto-policies.spec
+++ b/SPECS/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20220203
-%global git_commit f03e75eb11e7583cd8b68c49d6d0e2aa87d28e54
+%global git_date 20220223
+%global git_commit 5203b41aba45a7596774bff439f6428deda778b8
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -29,7 +29,7 @@ BuildRequires: python3-devel >= 3.6
 BuildRequires: python3-pytest
 BuildRequires: make
 
-Conflicts: openssl < 1.1.1h
+Conflicts: openssl < 1:3.0.1-10
 Conflicts: nss < 3.44.0
 Conflicts: libreswan < 3.28
 Conflicts: openssh < 8.5p1
@@ -186,7 +186,12 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
-* Tue Feb 03 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
+* Wed Feb 23 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
+- openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
+- update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
+- fips-mode-setup: catch more inconsistencies, clarify --check
+
+* Thu Feb 03 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
 - gnutls: enable SHAKE, needed for Ed448
 - fips-mode-setup: improve handling FIPS plus subpolicies
 - FIPS: disable SHA-1 HMAC