Breadcrumbs

Configuring OpenSSL to Use Utimaco SecurityServer

Bind9 uses openssl pkcs11 engine which is provided by libp11 package for signing the zone files. You can install libp11 with your existing openssl by following below steps:

If you want to install OpenSSL from source code, you can refer to OpenSSL integration guide available on Utimaco support portal.

Installing Libp11

  1. Download the latest libp11 package from Releases · OpenSC/libp11 · GitHub.

›_ Console 

# wget https://github.com/OpenSC/libp11/releases/download/libp110.4.12/libp11-0.4.12.tar.gz

  1. (Optional) It is recommended to update the system with latest security patch.

›_ Console 

# dnf update

  1. Extract the file.

›_ Console 

# tar -xvf libp11-0.4.12.tar.gz

  1. Go to libp11 directory, build, and install libp11using the following commands.

›_ Console 

# cd libp11-0.4.12 

# ./configure prefix="/usr/local/libp11/" 

# make 

# make install 

# export LD_LIBRARY_PATH=/usr/local/libp11/lib/:$LD_LIBRARY_PATH