>Is there anyway to make the FIPS mode always enabled by default in the library
>layer, so that there's no need to invoke the FIPS_mode_set API?
No. You'd have to end up calling some explicit routine of your own which
called FIPS_mode_set.
___
openssl
Your first question should be presented to the Python developers that
provide support for OpenSSL. They would be the user of the OpenSSL
API. I'm not a Python expert, but somewhere they would have a native
layer that leverages the OpenSSL API. This native layer code would need
to invoke FIPS_mod