Circling back to wrap up this thread I retested with, and without, OpenSSL FIPS and tweaked the docs and code a little to ensure it detects the right function to use. The attached is what I propose we go ahead with.
-- Daniel Gustafsson
v7-0001-pgcrypto-Make-it-possible-to-disable-built-in-cry.patch
Description: Binary data