title: SSL with FIPS Enabled - will server choose strong ciphers
body: <p>Any webserver (like Nginx, Apache httpd) can have TLS cipher config. For example Nginx has 'ssl_ciphers' as configuration for ciphers. Suppose in this ciphers I have included 'SHA-1' or RC4 as possible algorithm but they are actually not valid for FIPS 140-2. Will the webserver still offer SHA-1 or RC4 as cipher options to the clients? Or the underlying openssl will not allow/offer these weak ciphers when FIPS is enabled?</p>