You could update to the latest OpenSSL from HP-UX:
http://h20293.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=OPENSSL11I
This contains FIPS 1.1.2 OpenSSL
FIPS OpenSSL, used in FIPS mode, does restrict the algorithms used to a subset
of the normal list of OpenSSL algorithms.
You can use EVP_add_cipher() to add the ciphers that you would wish to allow
instead of OpenSSL_add_all_ciphers().
For Eg. if you want to use only DES in ecb mode, you can do
EVP_add_cipher(EVP_des_cfb());
Conversely, you can also edit the function OpenSSL_add_all_ciphers() and
remove all the
