Setting up Utimaco SecurityServer Library in OpenSSL Configuration File

Open the file /etc/pki/tls/openssl.cnf and enter the following line in the first line of the file.

openssl.cnf
`openssl_conf = openssl_init`

Enter the following lines under last section of openssl.cnf file.

openssl.cnf
`[openssl_init] engines=engine_section [engine_section] pkcs11 = pkcs11_section [pkcs11_section] engine_id = pkcs11 dynamic_path = /<engine_directory>/pkcs11.so MODULE_PATH = /opt/utimaco/lib/libcs_pkcs11_R3.so init = 0`

openssl.cnf

[openssl_init]  
engines=engine_section  
[engine_section]  
pkcs11 = pkcs11_section  
[pkcs11_section]  
engine_id = pkcs11  
dynamic_path = /<engine_directory>/pkcs11.so  
MODULE_PATH = /opt/utimaco/lib/libcs_pkcs11_R3.so  
init = 0

Dynamic path and Module path will get changed according to the user environment.

Verifying PKCS#11 Engine

Run the command below to verify whether the OpenSSL Engine is available.

›_ Console
`# openssl engine pkcs11 -t`

Verification of pkcs11 engine