Search code examples
androidsslopensslokhttpfips

Android javax.net.ssl and FIPS compliance openSSL

AFAIK Android javax.net.ssl classes uses openSSL/BoringSSL library at C/Low level for any SSL/TLS.

Intention: Load FIPS compliance openSSL libaray in my application and make javax.net.ssl(okhttp) classes use the that library?

Simlilar to WolfSSL provider,but its not JSSE compatible.

is this feasible with FIPS openSSL+ android, what are configuration at android java level ?

Thanks

Solution

  • Modified OKHTTP and OKIO code to use the WolfSSL java wrappers and made it work.

    Now any https requests made will go to WolfSSL layer instead of stock android BoringSSL/OpenSSL.