Once I have the FIPS crypto built, how do I use OpenSSL so that all SSL crypto work is done using that FIPS crypto?
You have to specify a crypto suite that only contains DSA, 3DES, AES, DH, RSA, SHA-1/SHA-2. Those and DH are all that are currently implemented as FIPS modules. Applications do need minor modification to switch on FIPS mode (it is optional by design), and also typically to avoid using unapproved algorithms (which in general don’t work in FIPS mode). Consideration is being given to having it optionally (at build time, of course) start out switched on, but given that very few apps can actually run correctly in FIPS mode without some modification, the motivation for that is not huge.
