Use top-level OpenSSL constant

        return true if %w[1 true yes].include?(ENV["FIPS_MODE"])

        # Otherwise, attempt to auto-detect FIPS mode from OpenSSL

        return true if OpenSSL.fips_mode

        return true if ::OpenSSL.fips_mode

        false

      end

      def use_openssl_digest(ruby_algorithm, openssl_algorithm)

        ::Digest.send(:remove_const, ruby_algorithm) # rubocop:disable GitlabSecurity/PublicSend

        ::Digest.const_set(ruby_algorithm, OpenSSL::Digest.const_get(openssl_algorithm, false))

        ::Digest.const_set(ruby_algorithm, ::OpenSSL::Digest.const_get(openssl_algorithm, false))

      end

    end

  end