Package fipstls allows control over whether crypto/tls requires FIPS-approved settings. This package only exists with GOEXPERIMENT=boringcrypto, but the effects are independent of the use of BoringCrypto.