Breadcrumbs

Verifying NGINX is Running Over HTTPS For Utimaco SecurityServer

  1. Log in to the Pod using the command below.

›_ Console

# oc rsh <pod-name>

  1. To verify that the pod is communicating with Utimaco HSM and is able to list the objects, run the command below.

›_ Console

# /opt/utimaco/bin/p11tool2 slot=<slot_id> LoginUser=<So_Pin> listobjects
tmprka51pi2.png

listobjects output

  1. Verify you can connect to the NGINX Server over HTTPS from another Pod.

Log in to the second Pod with the command below and execute the OpenSSL command as given below.

›_ Console

# oc rsh <pod-name>

# openssl s_client -connect <IP_of_Pod>:8443
tmpzi35pi0w.jpg

OpenSSL s_client connect output

tmph6n6g7ov.png

OpenSSL s_client connect output

You can ignore the above error message, as a self-signed certificate has been used for demonstration. It is recommended to use a CA-signed certificate in a production environment.