Summary

Add kernel command line option "fips=1"
Most likely required the Kernel option CONFIG_CRYPTO_FIPS=y

Use case

By default, OpenSSL supports more cryptographic algorithms than are allowed by FIPS 140-2/3, so we have to tell it to limit itself.

https://github.com/torvalds/linux/blob/master/Documentation/admin-guide/sysctl/crypto.rst