Configuring OpenSSL Configuration File

  1. Open the file /etc/pki/tls/openssl.cnf on Linux or C:\Program Files\Common Files\SSL\openssl.cnf on Windows and enter the following line in the first line of the file.

›_ Console

openssl_conf = openssl_init
  1. Enter the following lines under last section of openssl.cnf file.

›_ openssl.cnf

[openssl_init] 
engines=engine_section

[engine_section]
pkcs11 = pkcs11_section

[pkcs11_section] 
engine_id = pkcs11
dynamic_path = /usr/lib64/engines-3/pkcs11.so
MODULE_PATH = /opt/utimaco/lib/libcs_pkcs11_R3.so
init = 0

The dynamic path and module path will be changed according to the user environment.

On Linux, dynamic_path must point to pkcs11.so. On Windows, it must point to pkcs11.dll.

In both environments, dynamic_path must point to the SecurityServer PKCS#11 provider.