Integration Steps on OpenSSL | Utimaco Integration Guides

Configuring OpenSSL Configuration File

Open the /etc/pki/tls/openssl.cnf file and enter the following in the first line of the file.

›_ Console

openssl_conf = openssl_init

Enter the following lines under the last section of the openssl.cnf file.

›_ openssl.cnf

[openssl_init]
providers=provider_sect
[provider_sect]
default = default_sect
pkcs11 = pkcs11_sect
[default_sect]
activate = 1
[pkcs11_sect]
module = /usr/lib/x86_64-linux-gnu/ossl-modules/pkcs11.so
pkcs11-module-path = /opt/utimaco/lib/libcs_pkcs11_R3.so
pkcs11-module-login-behavior = always
activate = 1

The module and pkcs11-module-path variables must be changed according to the user environment.

The variable module must point to pkcs11.so.

The variable pkcs11-module-path must point to the SecurityServer PKCS#11-Provider.

Verify the pkcs11-provider

Run the command below to verify if the OpenSSL provider is available.

›_ Console

openssl list -providers
Providers:
  default
    name: OpenSSL Default Provider
    version: 3.5.0
    status: active
  pkcs11
    name: PKCS#11 Provider (Utimaco QuantumProtect Fork)
    version: 1.0
    status: active