node-linux-s390x 24.21.0 → 24.22.1

package/include/node/openssl/archs/linux64-s390x/no-asm/include/openssl/opensslv.h

@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 /* clang-format on */
 
 /*
@@ -87,10 +87,10 @@ extern "C" {
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.8"
+# define OPENSSL_VERSION_STR "3.5.9"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.8"
+# define OPENSSL_FULL_VERSION_STR "3.5.9"
 /* clang-format on */
 
 /*
@@ -99,7 +99,7 @@ extern "C" {
  * These strings are defined separately to allow them to be parsable.
  */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "25 Aug 2026"
+# define OPENSSL_RELEASE_DATE "29 Sep 2026"
 /* clang-format on */
 
 /*
@@ -107,7 +107,7 @@ extern "C" {
  */
 
 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.9 29 Sep 2026"
 /* clang-format on */
 
 /* clang-format off */

package/include/node/openssl/archs/solaris-x86-gcc/asm/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: solaris-x86-gcc"
-#define DATE "built on: Tue Aug 25 12:54:49 2026 UTC"
+#define DATE "built on: Tue Sep 29 14:27:28 2026 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/solaris-x86-gcc/asm/include/internal/param_names.h

@@ -118,6 +118,7 @@ int ossl_param_find_pidx(const char *s);
 #define PIDX_DECODER_PARAM_PROPERTIES PIDX_ALG_PARAM_PROPERTIES
 #define PIDX_DIGEST_PARAM_ALGID_ABSENT 78
 #define PIDX_DIGEST_PARAM_BLOCK_SIZE 45
+#define PIDX_DIGEST_PARAM_FIPS_APPROVED_INDICATOR PIDX_ALG_PARAM_FIPS_APPROVED_INDICATOR
 #define PIDX_DIGEST_PARAM_MICALG 79
 #define PIDX_DIGEST_PARAM_PAD_TYPE 80
 #define PIDX_DIGEST_PARAM_SIZE 81

package/include/node/openssl/archs/solaris-x86-gcc/asm/include/openssl/core_names.h

@@ -218,6 +218,7 @@ extern "C" {
 # define OSSL_DECODER_PARAM_PROPERTIES OSSL_ALG_PARAM_PROPERTIES
 # define OSSL_DIGEST_PARAM_ALGID_ABSENT "algid-absent"
 # define OSSL_DIGEST_PARAM_BLOCK_SIZE "blocksize"
+# define OSSL_DIGEST_PARAM_FIPS_APPROVED_INDICATOR OSSL_ALG_PARAM_FIPS_APPROVED_INDICATOR
 # define OSSL_DIGEST_PARAM_MICALG "micalg"
 # define OSSL_DIGEST_PARAM_PAD_TYPE "pad-type"
 # define OSSL_DIGEST_PARAM_SIZE "size"

package/include/node/openssl/archs/solaris-x86-gcc/asm/include/openssl/opensslv.h

@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 /* clang-format on */
 
 /*
@@ -87,10 +87,10 @@ extern "C" {
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.8"
+# define OPENSSL_VERSION_STR "3.5.9"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.8"
+# define OPENSSL_FULL_VERSION_STR "3.5.9"
 /* clang-format on */
 
 /*
@@ -99,7 +99,7 @@ extern "C" {
  * These strings are defined separately to allow them to be parsable.
  */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "25 Aug 2026"
+# define OPENSSL_RELEASE_DATE "29 Sep 2026"
 /* clang-format on */
 
 /*
@@ -107,7 +107,7 @@ extern "C" {
  */
 
 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.9 29 Sep 2026"
 /* clang-format on */
 
 /* clang-format off */

package/include/node/openssl/archs/solaris-x86-gcc/asm_avx2/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: solaris-x86-gcc"
-#define DATE "built on: Tue Aug 25 12:55:04 2026 UTC"
+#define DATE "built on: Tue Sep 29 14:27:43 2026 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/solaris-x86-gcc/asm_avx2/include/internal/param_names.h

@@ -118,6 +118,7 @@ int ossl_param_find_pidx(const char *s);
 #define PIDX_DECODER_PARAM_PROPERTIES PIDX_ALG_PARAM_PROPERTIES
 #define PIDX_DIGEST_PARAM_ALGID_ABSENT 78
 #define PIDX_DIGEST_PARAM_BLOCK_SIZE 45
+#define PIDX_DIGEST_PARAM_FIPS_APPROVED_INDICATOR PIDX_ALG_PARAM_FIPS_APPROVED_INDICATOR
 #define PIDX_DIGEST_PARAM_MICALG 79
 #define PIDX_DIGEST_PARAM_PAD_TYPE 80
 #define PIDX_DIGEST_PARAM_SIZE 81

package/include/node/openssl/archs/solaris-x86-gcc/asm_avx2/include/openssl/core_names.h

@@ -218,6 +218,7 @@ extern "C" {
 # define OSSL_DECODER_PARAM_PROPERTIES OSSL_ALG_PARAM_PROPERTIES
 # define OSSL_DIGEST_PARAM_ALGID_ABSENT "algid-absent"
 # define OSSL_DIGEST_PARAM_BLOCK_SIZE "blocksize"
+# define OSSL_DIGEST_PARAM_FIPS_APPROVED_INDICATOR OSSL_ALG_PARAM_FIPS_APPROVED_INDICATOR
 # define OSSL_DIGEST_PARAM_MICALG "micalg"
 # define OSSL_DIGEST_PARAM_PAD_TYPE "pad-type"
 # define OSSL_DIGEST_PARAM_SIZE "size"

package/include/node/openssl/archs/solaris-x86-gcc/asm_avx2/include/openssl/opensslv.h

@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 /* clang-format on */
 
 /*
@@ -87,10 +87,10 @@ extern "C" {
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.8"
+# define OPENSSL_VERSION_STR "3.5.9"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.8"
+# define OPENSSL_FULL_VERSION_STR "3.5.9"
 /* clang-format on */
 
 /*
@@ -99,7 +99,7 @@ extern "C" {
  * These strings are defined separately to allow them to be parsable.
  */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "25 Aug 2026"
+# define OPENSSL_RELEASE_DATE "29 Sep 2026"
 /* clang-format on */
 
 /*
@@ -107,7 +107,7 @@ extern "C" {
  */
 
 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.9 29 Sep 2026"
 /* clang-format on */
 
 /* clang-format off */

package/include/node/openssl/archs/solaris-x86-gcc/no-asm/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: solaris-x86-gcc"
-#define DATE "built on: Tue Aug 25 12:55:18 2026 UTC"
+#define DATE "built on: Tue Sep 29 14:27:58 2026 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/solaris-x86-gcc/no-asm/include/internal/param_names.h

@@ -118,6 +118,7 @@ int ossl_param_find_pidx(const char *s);
 #define PIDX_DECODER_PARAM_PROPERTIES PIDX_ALG_PARAM_PROPERTIES
 #define PIDX_DIGEST_PARAM_ALGID_ABSENT 78
 #define PIDX_DIGEST_PARAM_BLOCK_SIZE 45
+#define PIDX_DIGEST_PARAM_FIPS_APPROVED_INDICATOR PIDX_ALG_PARAM_FIPS_APPROVED_INDICATOR
 #define PIDX_DIGEST_PARAM_MICALG 79
 #define PIDX_DIGEST_PARAM_PAD_TYPE 80
 #define PIDX_DIGEST_PARAM_SIZE 81

package/include/node/openssl/archs/solaris-x86-gcc/no-asm/include/openssl/core_names.h

@@ -218,6 +218,7 @@ extern "C" {
 # define OSSL_DECODER_PARAM_PROPERTIES OSSL_ALG_PARAM_PROPERTIES
 # define OSSL_DIGEST_PARAM_ALGID_ABSENT "algid-absent"
 # define OSSL_DIGEST_PARAM_BLOCK_SIZE "blocksize"
+# define OSSL_DIGEST_PARAM_FIPS_APPROVED_INDICATOR OSSL_ALG_PARAM_FIPS_APPROVED_INDICATOR
 # define OSSL_DIGEST_PARAM_MICALG "micalg"
 # define OSSL_DIGEST_PARAM_PAD_TYPE "pad-type"
 # define OSSL_DIGEST_PARAM_SIZE "size"

package/include/node/openssl/archs/solaris-x86-gcc/no-asm/include/openssl/opensslv.h

@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 /* clang-format on */
 
 /*
@@ -87,10 +87,10 @@ extern "C" {
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.8"
+# define OPENSSL_VERSION_STR "3.5.9"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.8"
+# define OPENSSL_FULL_VERSION_STR "3.5.9"
 /* clang-format on */
 
 /*
@@ -99,7 +99,7 @@ extern "C" {
  * These strings are defined separately to allow them to be parsable.
  */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "25 Aug 2026"
+# define OPENSSL_RELEASE_DATE "29 Sep 2026"
 /* clang-format on */
 
 /*
@@ -107,7 +107,7 @@ extern "C" {
  */
 
 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.9 29 Sep 2026"
 /* clang-format on */
 
 /* clang-format off */

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: solaris64-x86_64-gcc"
-#define DATE "built on: Tue Aug 25 12:55:32 2026 UTC"
+#define DATE "built on: Tue Sep 29 14:28:11 2026 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm/include/internal/param_names.h

@@ -118,6 +118,7 @@ int ossl_param_find_pidx(const char *s);
 #define PIDX_DECODER_PARAM_PROPERTIES PIDX_ALG_PARAM_PROPERTIES
 #define PIDX_DIGEST_PARAM_ALGID_ABSENT 78
 #define PIDX_DIGEST_PARAM_BLOCK_SIZE 45
+#define PIDX_DIGEST_PARAM_FIPS_APPROVED_INDICATOR PIDX_ALG_PARAM_FIPS_APPROVED_INDICATOR
 #define PIDX_DIGEST_PARAM_MICALG 79
 #define PIDX_DIGEST_PARAM_PAD_TYPE 80
 #define PIDX_DIGEST_PARAM_SIZE 81

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm/include/openssl/core_names.h

@@ -218,6 +218,7 @@ extern "C" {
 # define OSSL_DECODER_PARAM_PROPERTIES OSSL_ALG_PARAM_PROPERTIES
 # define OSSL_DIGEST_PARAM_ALGID_ABSENT "algid-absent"
 # define OSSL_DIGEST_PARAM_BLOCK_SIZE "blocksize"
+# define OSSL_DIGEST_PARAM_FIPS_APPROVED_INDICATOR OSSL_ALG_PARAM_FIPS_APPROVED_INDICATOR
 # define OSSL_DIGEST_PARAM_MICALG "micalg"
 # define OSSL_DIGEST_PARAM_PAD_TYPE "pad-type"
 # define OSSL_DIGEST_PARAM_SIZE "size"

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm/include/openssl/opensslv.h

@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 /* clang-format on */
 
 /*
@@ -87,10 +87,10 @@ extern "C" {
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.8"
+# define OPENSSL_VERSION_STR "3.5.9"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.8"
+# define OPENSSL_FULL_VERSION_STR "3.5.9"
 /* clang-format on */
 
 /*
@@ -99,7 +99,7 @@ extern "C" {
  * These strings are defined separately to allow them to be parsable.
  */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "25 Aug 2026"
+# define OPENSSL_RELEASE_DATE "29 Sep 2026"
 /* clang-format on */
 
 /*
@@ -107,7 +107,7 @@ extern "C" {
  */
 
 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.9 29 Sep 2026"
 /* clang-format on */
 
 /* clang-format off */

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm_avx2/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: solaris64-x86_64-gcc"
-#define DATE "built on: Tue Aug 25 12:55:54 2026 UTC"
+#define DATE "built on: Tue Sep 29 14:28:33 2026 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm_avx2/include/internal/param_names.h

@@ -118,6 +118,7 @@ int ossl_param_find_pidx(const char *s);
 #define PIDX_DECODER_PARAM_PROPERTIES PIDX_ALG_PARAM_PROPERTIES
 #define PIDX_DIGEST_PARAM_ALGID_ABSENT 78
 #define PIDX_DIGEST_PARAM_BLOCK_SIZE 45
+#define PIDX_DIGEST_PARAM_FIPS_APPROVED_INDICATOR PIDX_ALG_PARAM_FIPS_APPROVED_INDICATOR
 #define PIDX_DIGEST_PARAM_MICALG 79
 #define PIDX_DIGEST_PARAM_PAD_TYPE 80
 #define PIDX_DIGEST_PARAM_SIZE 81

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm_avx2/include/openssl/core_names.h

@@ -218,6 +218,7 @@ extern "C" {
 # define OSSL_DECODER_PARAM_PROPERTIES OSSL_ALG_PARAM_PROPERTIES
 # define OSSL_DIGEST_PARAM_ALGID_ABSENT "algid-absent"
 # define OSSL_DIGEST_PARAM_BLOCK_SIZE "blocksize"
+# define OSSL_DIGEST_PARAM_FIPS_APPROVED_INDICATOR OSSL_ALG_PARAM_FIPS_APPROVED_INDICATOR
 # define OSSL_DIGEST_PARAM_MICALG "micalg"
 # define OSSL_DIGEST_PARAM_PAD_TYPE "pad-type"
 # define OSSL_DIGEST_PARAM_SIZE "size"

package/include/node/openssl/archs/solaris64-x86_64-gcc/asm_avx2/include/openssl/opensslv.h

@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 /* clang-format on */
 
 /*
@@ -87,10 +87,10 @@ extern "C" {
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.8"
+# define OPENSSL_VERSION_STR "3.5.9"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.8"
+# define OPENSSL_FULL_VERSION_STR "3.5.9"
 /* clang-format on */
 
 /*
@@ -99,7 +99,7 @@ extern "C" {
  * These strings are defined separately to allow them to be parsable.
  */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "25 Aug 2026"
+# define OPENSSL_RELEASE_DATE "29 Sep 2026"
 /* clang-format on */
 
 /*
@@ -107,7 +107,7 @@ extern "C" {
  */
 
 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.9 29 Sep 2026"
 /* clang-format on */
 
 /* clang-format off */

package/include/node/openssl/archs/solaris64-x86_64-gcc/no-asm/crypto/buildinf.h

@@ -11,7 +11,7 @@
  */
 
 #define PLATFORM "platform: solaris64-x86_64-gcc"
-#define DATE "built on: Tue Aug 25 12:56:11 2026 UTC"
+#define DATE "built on: Tue Sep 29 14:28:51 2026 UTC"
 
 /*
  * Generate compiler_flags as an array of individual characters. This is a

package/include/node/openssl/archs/solaris64-x86_64-gcc/no-asm/include/internal/param_names.h

@@ -118,6 +118,7 @@ int ossl_param_find_pidx(const char *s);
 #define PIDX_DECODER_PARAM_PROPERTIES PIDX_ALG_PARAM_PROPERTIES
 #define PIDX_DIGEST_PARAM_ALGID_ABSENT 78
 #define PIDX_DIGEST_PARAM_BLOCK_SIZE 45
+#define PIDX_DIGEST_PARAM_FIPS_APPROVED_INDICATOR PIDX_ALG_PARAM_FIPS_APPROVED_INDICATOR
 #define PIDX_DIGEST_PARAM_MICALG 79
 #define PIDX_DIGEST_PARAM_PAD_TYPE 80
 #define PIDX_DIGEST_PARAM_SIZE 81

package/include/node/openssl/archs/solaris64-x86_64-gcc/no-asm/include/openssl/core_names.h

@@ -218,6 +218,7 @@ extern "C" {
 # define OSSL_DECODER_PARAM_PROPERTIES OSSL_ALG_PARAM_PROPERTIES
 # define OSSL_DIGEST_PARAM_ALGID_ABSENT "algid-absent"
 # define OSSL_DIGEST_PARAM_BLOCK_SIZE "blocksize"
+# define OSSL_DIGEST_PARAM_FIPS_APPROVED_INDICATOR OSSL_ALG_PARAM_FIPS_APPROVED_INDICATOR
 # define OSSL_DIGEST_PARAM_MICALG "micalg"
 # define OSSL_DIGEST_PARAM_PAD_TYPE "pad-type"
 # define OSSL_DIGEST_PARAM_SIZE "size"

package/include/node/openssl/archs/solaris64-x86_64-gcc/no-asm/include/openssl/opensslv.h

@@ -34,7 +34,7 @@ extern "C" {
 # define OPENSSL_VERSION_MINOR  5
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_VERSION_PATCH  8
+# define OPENSSL_VERSION_PATCH  9
 /* clang-format on */
 
 /*
@@ -87,10 +87,10 @@ extern "C" {
  * OPENSSL_VERSION_BUILD_METADATA_STR appended.
  */
 /* clang-format off */
-# define OPENSSL_VERSION_STR "3.5.8"
+# define OPENSSL_VERSION_STR "3.5.9"
 /* clang-format on */
 /* clang-format off */
-# define OPENSSL_FULL_VERSION_STR "3.5.8"
+# define OPENSSL_FULL_VERSION_STR "3.5.9"
 /* clang-format on */
 
 /*
@@ -99,7 +99,7 @@ extern "C" {
  * These strings are defined separately to allow them to be parsable.
  */
 /* clang-format off */
-# define OPENSSL_RELEASE_DATE "25 Aug 2026"
+# define OPENSSL_RELEASE_DATE "29 Sep 2026"
 /* clang-format on */
 
 /*
@@ -107,7 +107,7 @@ extern "C" {
  */
 
 /* clang-format off */
-# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.8 25 Aug 2026"
+# define OPENSSL_VERSION_TEXT "OpenSSL 3.5.9 29 Sep 2026"
 /* clang-format on */
 
 /* clang-format off */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "node-linux-s390x",
-  "version": "24.21.0",
+  "version": "24.22.1",
   "description": "node",
   "repository": {
     "url": "git+https://github.com/aredridel/node-bin-gen.git"

package/share/man/man1/node.1

@@ -163,6 +163,12 @@ Enable FIPS mode at startup. With OpenSSL 3, a configured provider named
 \fBfips\fR must be available and initialize successfully. With OpenSSL 1.1.1,
 Node.js must be built against a FIPS-capable OpenSSL.
 .
+.It Fl -enable-fips-indicator-events
+Publish OpenSSL FIPS indicator results to the
+\fB'crypto.fips.indicator'\fR diagnostics channel. This option requires OpenSSL
+3.4 or later. It does not enable FIPS mode or change whether an operation
+is permitted.
+.
 .It Fl -enable-source-maps
 Enable Source Map V3 support for stack traces.
 .
@@ -321,9 +327,23 @@ Enable experimental support for storage inspection.
 .It Fl -force-context-aware
 Disable loading native addons that are not context-aware.
 .
-.It Fl -force-fips
+.It Fl -force-fips Ns = Ns Ar [mode]
 Enable FIPS mode at startup and prevent it from being disabled from script
 code. The same OpenSSL requirements as \fB--enable-fips\fR apply.
+An optional mode can be specified using \fB--force-fips=mode\fR:
+.Bl -bullet
+.It
+\fBprovider\fR: Preserve the OpenSSL FIPS provider's configured handling of
+non-approved operations. This is the current default when the mode is
+omitted.
+.It
+\fBstrict\fR: Reject non-approved operations reported through the OpenSSL FIPS
+indicator callback. This mode requires OpenSSL 3.4 or later.
+.El
+The \fBstrict\fR mode only covers operations reported through the callback for
+OpenSSL's default library context. It does not cover native addons that use
+another \fBOSSL_LIB_CTX\fR or another copy of \fBlibcrypto\fR, nor operation-specific
+indicators that do not invoke the callback.
 .
 .It Fl -frozen-intrinsics
 Enable experimental frozen intrinsics support.