diff --git a/crypto-policies.spec b/crypto-policies.spec
index f4ac4fe..c53477c 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20220203
-%global git_commit f03e75eb11e7583cd8b68c49d6d0e2aa87d28e54
+%global git_date 20220223
+%global git_commit 5203b41aba45a7596774bff439f6428deda778b8
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -29,7 +29,7 @@ BuildRequires: python3-devel >= 3.6
 BuildRequires: python3-pytest
 BuildRequires: make
 
-Conflicts: openssl < 1.1.1h
+Conflicts: openssl < 1:3.0.1-10
 Conflicts: nss < 3.44.0
 Conflicts: libreswan < 3.28
 Conflicts: openssh < 8.5p1
@@ -186,7 +186,12 @@ end
 %{_mandir}/man8/fips-finish-install.8*
 
 %changelog
-* Tue Feb 03 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
+* Wed Feb 23 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220223-1.git5203b41
+- openssl: allow SHA-1 signatures with rh-allow-sha1-signatures in LEGACY
+- update AD-SUPPORT, move RC4 enctype enabling to AD-SUPPORT-LEGACY
+- fips-mode-setup: catch more inconsistencies, clarify --check
+
+* Thu Feb 03 2022 Alexander Sosedkin <asosedkin@redhat.com> - 20220203-1.gitf03e75e
 - gnutls: enable SHAKE, needed for Ed448
 - fips-mode-setup: improve handling FIPS plus subpolicies
 - FIPS: disable SHA-1 HMAC
diff --git a/sources b/sources
index 86187a8..9ee012c 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-gitf03e75e.tar.gz) = 72c68d7f1941f45c251cc1aae47e45be2e3d23e1067cf98d87c6a14d15dbcce22c7970ad05a4fb298361ccf7d6d904f286191d7ac39be847bee8237b088c62cd
+SHA512 (crypto-policies-git5203b41.tar.gz) = bc9a88e2a953c4ea6261a3b3fddf887bce1a3e8cf79d4e8ca8136cfc54e047fabf4f28c7a98fd553ddd26908ccbf607640ea59187c1d24b1a23f5798edf1d99e