IIUC, anyway, the right thing to do is to include openssl/crypto.h which includes declarations for FIPS_mode and so on. So no need to include openssl/opensslconf.h (though that seems harmless).