Verifying that the NGINX is running over HTTPS For the Utimaco CP5

  1. Log in to the Pod using the command below:

›_ Console

# oc rsh <pod-name>

  1. To verify that the pod is communicating with Utimaco HSM and is able to list the objects, run the command below:

›_ Console

# /opt/utimaco/bin/p11tool2 slot=<slot_id> LoginUser=<So_Pin> listobjects

ada195e6-a3f2-4f3f-9d06-719f8cd0a122.jpg


listobjects output

  1. Verify you can connect to the Nginx Server over HTTPS from another Pod.

Log in to the second Pod with the command below and execute the OpenSSL command as given below:

›_ Console

# oc rsh <pod-name>

# openssl s_client -connect <IP_of_Pod>:8443

4ab7c06e-283a-4320-bfd6-863f62797580.jpg


OpenSSL s_client connect output

You can ignore the above error message, as a self-signed certificate has been used for demonstration. It is recommended to use a CA-signed certificate in a production environment.

This completes the integration of OpenShift Container Platform with NGINX & OpenSSL3 with Utimaco SecurityServer & CP5.