While eliminating all but TLSv1 (the only FIPS-complient handshaking mechansim), I noticed that we have several other single-case methods similar to the SSLv2 exception; use the explicit method in preference to the generic SSLv23_client|server_method() calls if exactly one method is supported.