title: Make a Android application use FIPS 140-2 valiated cryptography
body: <p>I have client who wants our application to use <a href="http://en.wikipedia.org/wiki/FIPS_140-2" rel="noreferrer">FIPS 140-2 validated cryptography</a>. The app uses <a href="http://square.github.io/okhttp/" rel="noreferrer">Okhttp and does some HTTPS requests</a>. AFAIK Android uses OpenSSL C library and <a href="http://docs.oracle.com/javase/7/docs/api/javax/net/ssl/package-summary.html" rel="noreferrer">uses java wrapper javax/net/ssl</a>.</p>
  
  <p>Questions:</p>
  
  <ol>
  <li><p>How to make android Application FIPS 140 -2 Complaint?</p></li>
  <li><p>Is it not android at stack(OS) level should use FIPS Compliant OpenSSL, hence all app are default  FIPS 140 -2 Compliant?</p></li>
  <li><p>Or our app should use FIPS 140-2 validated cryptography and make java javax/net/ssl to use it? Feasible?</p></li>
  <li><p>Is there a  FIPS 140-2 JCE library which can be pluggable to OKhttp?</p></li>
  </ol>
  
  <p>Thanks</p>