java-11-openjdk allows chacha20_poly1305 in FIPS mode

# fips-mode-setup --enable && reboot

# cat Client.java
import java.io.*;
import javax.net.ssl.*;public class Client {
    public static void main(String[] args) throws Exception {
        try {
            String[] cipherSuites = ((SSLSocketFactory) SSLSocketFactory.getDefault()).getDefaultCipherSuites();
            for (int i=0; i < cipherSuites.length; i++)
                System.out.println(cipherSuites[i]);                
            System.exit(0);
        } catch (Exception e) {            
            e.printStackTrace();
            System.exit(1);
        }
    }
}

# javac Client.java

# java Client
TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
TLS_EMPTY_RENEGOTIATION_INFO_SCSV