Package fipsonly restricts all TLS configuration to FIPS-approved settings.
The effect is triggered by importing the package anywhere in a program, as in:
import _ "crypto/tls/fipsonly"
This package only exists when using Go compiled with GOEXPERIMENT=boringcrypto.