fips_check_dsa_prng() should only be built when OPENSSL_FIPS is defined.