<div dir="ltr"><p style="margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px;margin-top:0px">Hi folks,</p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px">AFAIK Android javax.net.ssl classes uses openSSL/BoringSSL library at C/Low level for any SSL/TLS.</p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><a href="https://developer.android.com/reference/javax/net/ssl/package-summary.html" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">https://developer.android.com/reference/javax/net/ssl/package-summary.html</a>.</p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px">/**</p><ul style="padding-left:2em;margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><li style="margin-left:0px">Provides the Java side of our JNI glue for OpenSSL. */<a href="https://android.googlesource.com/platform/external/conscrypt/+/f087968/src/main/java/org/conscrypt/OpenSSLSocketImpl.java" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">https://android.googlesource.com/platform/external/conscrypt/+/f087968/src/main/java/org/conscrypt/OpenSSLSocketImpl.java</a></li></ul><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><a href="https://android.googlesource.com/platform/external/conscrypt/+/master/src/main/java/org/conscrypt/NativeCrypto.java" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">https://android.googlesource.com/platform/external/conscrypt/+/master/src/main/java/org/conscrypt/NativeCrypto.java</a></p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><a href="https://android.googlesource.com/platform/external/conscrypt/+/master/src/main/java/org/conscrypt" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">https://android.googlesource.com/platform/external/conscrypt/+/master/src/main/java/org/conscrypt</a></p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px">C++<br style="box-sizing: border-box;"><a href="https://android.googlesource.com/platform/external/conscrypt/+/master/src/main/native/org_conscrypt_NativeCrypto.cpp" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">https://android.googlesource.com/platform/external/conscrypt/+/master/src/main/native/org_conscrypt_NativeCrypto.cpp</a></p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px">org_conscrypt_NativeCrypto.cpp</p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><a href="https://android.googlesource.com/platform/external/conscrypt/+/master/Android.mk" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">https://android.googlesource.com/platform/external/conscrypt/+/master/Android.mk</a></p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px">(Build OpenSSL or BoringSSL).</p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><span style="font-weight:600">Intention:</span> Load FIPS compliance openSSL libaray in my application and make javax.net.ssl(okhttp) classes use the that library hence my application become fips complaince.</p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><a href="https://wiki.openssl.org/index.php/FIPS_Library_and_Android" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">https://wiki.openssl.org/index.php/FIPS_Library_and_Android</a><br style="box-sizing: border-box;"><a href="http://square.github.io/okhttp/" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">http://square.github.io/okhttp/</a></p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px">Simlilar to WolfSSL provider but its at firrware level or aosp, also its not JSSE compatible.</p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px"><a href="http://www.linuxjournal.com/article/10896" style="color:rgb(64,120,192);text-decoration:none;background-color:transparent">http://www.linuxjournal.com/article/10896</a></p><p style="margin-top:0px;margin-bottom:16px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px">is this feasible to load FIPS openSSL .OS and link it , what are configuration at android java level ?</p><p style="margin-top:0px;color:rgb(51,51,51);font-family:-apple-system,blinkmacsystemfont,"segoe ui",roboto,helvetica,arial,sans-serif,"apple color emoji","segoe ui emoji","segoe ui symbol";font-size:14px;line-height:21px;margin-bottom:0px">Thanks<br style="box-sizing: border-box;">Nithin</p></div>