Verifying that the NGINX is Running Over HTTPS For the Utimaco SecurityServer

  1. Log in to the Pod using the command below:

›_ Console

# oc rsh <pod-name>

  1. To verify that the pod is communicating with Utimaco HSM and is able to list the objects, run the command below:

›_ Console

# /opt/utimaco/bin/p11tool2 slot=<slot_id> LoginUser=<So_Pin> listobjects

1477c78c-da03-4445-91ff-0ea59078cb28.jpg


listobjects output

  1. Verify you can connect to the NGINX Server over HTTPS from another Pod.

Log in to the second Pod with the command below and execute the OpenSSL command as given below:

›_ Console

# oc rsh <pod-name>

# openssl s_client -connect <IP_of_Pod>:8443

a7b67af4-b7bb-4652-9712-f4e13ab6bd25.jpg


b32f606e-8a78-4cea-9d09-4c198e2b1961.jpg


OpenSSL s_client connect output

You can ignore the above error message, as a self-signed certificate has been used for demonstration. It is recommended to use a CA-signed certificate in a production environment.