Breadcrumbs

Configuring OpenSSL Configuration File

  1. Open the /etc/pki/tls/openssl.cnf file and enter the following in the first line of the file.

›_ Console

 
openssl_conf = openssl_init

  1. Enter the following lines under the last section of the openssl.cnf file.

›_ openssl.cnf

 
[openssl_init]
providers=provider_sect

[provider_sect]
default = default_sect
pkcs11 = pkcs11_sect

[default_sect]
activate = 1

[pkcs11_sect]
module = /usr/lib/x86_64-linux-gnu/ossl-modules/pkcs11.so
pkcs11-module-path = /opt/utimaco/lib/libcs_pkcs11_R3.so
pkcs11-module-login-behavior = always
activate = 1

The module and pkcs11-module-path variables must be changed according to the user environment.

The variable module must point to pkcs11.so.

The variable pkcs11-module-path must point to the SecurityServer PKCS#11-Provider.