diff --git a/.gitignore b/.gitignore
index 822d949..9e955a2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1 +1 @@
-crypto-policies-gitfd9b9b9.tar.gz
+crypto-policies-git4304d53.tar.gz
diff --git a/crypto-policies.spec b/crypto-policies.spec
index 6159e05..73a34c1 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,17 +1,17 @@
-%global git_date 20250214
-%global git_commit fd9b9b972b658fc9c66174e979bc7cd49bf6a6bf
+%global git_commit 4304d53132e06ecb4ffbfdb5cb13dfdbc66adb7b
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
 
 Name:           crypto-policies
-Version:        %{git_date}
-Release:        1.git%{git_commit_hash}%{?dist}
+Version:        20250214
+Release:        1.gitfd9b9b9%{?dist}.1
 Summary:        System-wide crypto policies
 
 License:        LGPL-2.1-or-later
 URL:            https://gitlab.com/redhat-crypto/fedora-crypto-policies
-# For RHEL-10 we use the upstream branch rhel10.
+# For RHEL-10.0 we use the upstream branch rhel10.0
+# and freeze the version at 20250214-1.gitfd9b9b9
 Source0:        https://gitlab.com/redhat-crypto/fedora-crypto-policies/-/archive/%{git_commit_hash}/%{name}-git%{git_commit_hash}.tar.gz
 
 ExclusiveArch: %{java_arches} noarch
@@ -231,6 +231,7 @@ exit 0
 %{_datarootdir}/crypto-policies/policies/LEGACY.pol
 %dir %{_datarootdir}/crypto-policies/policies/modules
 %{_datarootdir}/crypto-policies/policies/modules/AD-SUPPORT.pmod
+%{_datarootdir}/crypto-policies/policies/modules/AD-SUPPORT-LEGACY.pmod
 %{_datarootdir}/crypto-policies/policies/modules/ECDHE-ONLY.pmod
 %{_datarootdir}/crypto-policies/policies/modules/NO-ENFORCE-EMS.pmod
 %{_datarootdir}/crypto-policies/policies/modules/OSPP.pmod
@@ -252,6 +253,9 @@ exit 0
 
 
 %changelog
+* Tue Jul 15 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250214-1.gitfd9b9b9.1
+- AD-SUPPORT-LEGACY: resurrect subpolicy as present in RHEL-9
+
 * Fri Feb 14 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250214-1.gitfd9b9b9
 - openssl: use both names for P384-MLKEM1024
 
diff --git a/sources b/sources
index e911461..b9a9147 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-gitfd9b9b9.tar.gz) = 269fb47a27813a794b225541c85ea159624fe67b78b8277d7fdca4ab6d25e74fc7e3fe99045bbff2e13c5194ae98deefe3b3a0c0c24199e639d2d44e7040efc3
+SHA512 (crypto-policies-git4304d53.tar.gz) = d3da2ccb7473ce720f73e7133cfafc7b68b5ba17c650383224993b9c37f3d71b78051b69442b129b916240d17ee8f27c0a99e817c0348893a6000ceb28cc811b