Tsk. Tsk. Someone forgot to compile test the other half.
Stop setting the EVP_MD_CTX_FLAG_NON_FIPS_ALLOW - it has been ignored since
OpenSSL 1.0.0.

ok miod@ (a little while back)