Verifying NGINX is Running Over HTTPS For Utimaco CP5

  1. Log in to the Pod using the command below.

›_ Console

# oc rsh <pod-name>

  1. To verify that the pod is communicating with Utimaco HSM and is able to list the objects, run the command below.

›_ Console

# /opt/utimaco/bin/p11tool2 slot=<slot_id> LoginUser=<So_Pin> listobjects

tmptb9rhnqf.png

listobjects output

  1. Verify you can connect to the NGINX Server over HTTPS from another Pod.

Log in to the second Pod with the command below and execute the OpenSSL command as given below.

›_ Console

# oc rsh <pod-name>

# openssl s_client -connect <IP_of_Pod>:8443

tmpi3qo660e.jpg

OpenSSL s_client connect output

You can ignore the above error message, as a self-signed certificate has been used for demonstration. It is recommended to use CA signed certificate in a production environment.

This completes the integration of OpenShift Container Platform with NGINX & OpenSSL1.1 with Utimaco SecurityServer & CP5.