That works. Thanks! -----Original Message----- From: openssl-users <openssl-users-bounces at openssl.org> On Behalf Of Dr Paul Dale Sent: Tuesday, January 26, 2021 6:01 PM You could set the default property query to "?fips=yes". This will prefer FIPS algorithms over any others but will not prevent other algorithms from being fetched. Pauli