Oracle® Linux 6 Security Guide

What You Need to Know about FIPS 140-2, OpenSSL, and the However, navigating FIPS 140-2 involves working with two government agencies that coordinate cryptographic module testing and algorithm testing against dozens of standards through twenty or so testing laboratories. It’s ever-changing, time-consuming and often riddled with red tape. linux - How to check FIPS 140-2 support in OpenSSL OpenSSL itself is not FIPS 140-2 validated and, according to it's maintainers, will never be. However, it has a FIPS 140-2 validated module called the FIPS Object Module, that partly replaces libcrypto used in vanilla OpenSSL. More information, including user guide, can be found here. OpenSSL FIPS 140-2 Security Policy

Advanced Encryption Standard - Wikipedia

Ok, if you created the FIPS module (the fipscanister.lib and technically also the fipscanister.lib.sha1, fips_premain.c, fips_premain.c.sha1 files) *exactly* as documented in the Security Policy and without *any* modification of the ./openssl-fips-2.0.3/ workarea, *then* you have a FIPS module you can claim as FIPS 140-2 validated.

OpenSSL itself is not FIPS 140-2 validated and, according to it's maintainers, will never be. However, it has a FIPS 140-2 validated module called the FIPS Object Module, that partly replaces libcrypto used in vanilla OpenSSL. More information, including user guide, can be found here. In short:

Mocana Announces Integration with Unified Automation’s Jan 15, 2019 Federal Information Processing Standards (FIPS) - VMware