FIPS-140-2 certification is required for cryptographic products used by agencies for unclassified but sensitive information. OpenSSL is an open-source version of Secure Sockets Layer encryption that can be used by browsers and other programs to securely exchange data.

OpenSSL loses it's FIPS certification.

Open Source encryption module loses FIPS certification