By "best way available" I mean I've honestly tried other approaches to fix it (played with configure script keys around, default 'openssl_fips' variable values) but had no success.