Ticket 50099 - In FIPS mode, the server can select an unsupported password storage scheme
    
    Bug Description:
    	When running in FIPS mode, DS selects SSHA512 as password storage schema else it selects PBKDF2_SHA256.
    	The problem is that in FIPS mode it selects PBKDF2_SHA256 that is currently not supported by NSS.
    	So DS fails to hash password
    	The scheme selection is done in the early phase of DS startup (slapd_bootstrap_config).
    	To determine it is in FIPS mode, DS calls PK11_IsFIPS that requires that NSS has been initialized.
    	The problem is that during slapd_bootstrap_config, NSS is not yet initialized and PK11_IsFIPS returns
    	PR_FALSE even in FIPS mode
    
    Fix Description:
    	The fix consists to check if NSS is initialized. If it is initialize, then rely on PK11_IsFIPS.
    	If it is not initialized then retrieve the FIPS mode from the system, assuming that if system
    	is in FIPS mode, then NSS will be in FIPS mode as well
    
    https://pagure.io/389-ds-base/issue/50099
    
    Reviewed by: Mark Reynolds (thanks Mark !)
    
    Platforms tested: F27
    
    Flag Day: no
    
    Doc impact: no