the "?" syntax for optional names doesn't work in FIPS mode.

When openssl is executed with openssl s_server -groups ?P-384:P-256 -serverpref -www and client with default settings, the connection ends up with P-256 curve.

that's with openssl-3.2.2-3.el9

Same for sig algs.