OpenSSL 3.x Provider and TLS 1.3 Configuration for FIPS or Compatibility
Choose OpenSSL 3.x default provider with TLS 1.3 only for speed and compatibility, or enable the FIPS provider with a restricted cipher and group set when regulatory approval is required.