Openssl FIPS 1.1.2 to 1.2 conversion

Hi I am in the process of upgrading an application which was using the FIPS 1.1.2 module to using the FIPS 1.2 module and I am looking for a sanity check. My system is an x86 (AMD Geode LX 800) system running Linux 2.6.26. I noticed the time it takes to execute FIPS_mode_set(1) went from und

Key Derivation and FIPS mode

I am hoping that someone can clear this up for me. The tls1_PRF() function uses both the md5 and sha1 algorithms to generate pseudo-random data. Since this function is used for TLS key derivation, is the md5 algorithm allowed for key derivation while operating in FIPS mode? If it is OK, I am