if you are not happy on your FIPS system with modern #curl treatment of TLSv1.3, why not simply refrain from using curl?
Or take an older version and maintain it yourself.💁🏻♂️
github.com/curl/curl/pull/1934…
openssl: respect system crypto policy for TLS max version by jacekmigacz · Pull Request #19342 · curl/curl
When no explicit --tls-max option is provided, curl should respect OpenSSL's system-wide crypto policy configuration instead of overriding it. Previously, curl called SSL_CTX_set_max_proto_vers...GitHub