Command Summary (CLI commands used)

sudo nano /etc/keyless/gokeyless.yaml

Edit the GoKeyless configuration file to provide Cloudflare, HSM, and authentication parameters.

sudo nano /usr/lib/systemd/system/gokeyless.service

Create or modify the systemd service file for GoKeyless.

sudo systemctl daemon-reexec

Re-execute systemd manager to apply configuration changes.

sudo systemctl daemon-reload

Reload systemd configuration after creating or modifying service files.

sudo systemctl enable gokeyless

Enable GoKeyless service to start automatically on system boot.

sudo systemctl start gokeyless

Start the GoKeyless service.

sudo systemctl status gokeyless

Check the status and health of the GoKeyless service.

journalctl -u gokeyless -f

View real-time logs for GoKeyless service (used for validation and troubleshooting).

sudo dnf install -y nginx

Install Nginx web server package.

sudo systemctl enable nginx

Enable Nginx service to start automatically on boot.

sudo systemctl start nginx

Start the Nginx service.

sudo systemctl status nginx

Verify that Nginx is running successfully.

sudo firewall-cmd --add-service=http --permanent

Allow HTTP (port 80) traffic through the firewall.

sudo firewall-cmd --add-service=https --permanent

Allow HTTPS (port 443) traffic through the firewall.

sudo firewall-cmd --reload

Reload firewall rules to apply changes.

`ss -tulnp

grep -E '80

`ss -tulnp

grep 2407`

curl -v utimaco.ssl4saas.com

Validate HTTPS connectivity and inspect TLS handshake details.

openssl s_client -connect <domain>:443

Perform detailed TLS handshake validation and certificate inspection.

pkcs11-tool --module <module_path> -O

List objects (keys/certificates) available in the HSM.

journalctl -u gokeyless --since "10 min ago"

View recent GoKeyless logs for troubleshooting.