Prerequisites

This pages describes the prerequisites for setting up OpenSSL for usage with a Primus HSM using an OpenSSL engine.

You will need:

• A Securosys CloudHSM Primus HSM
• A machine with OpenSSL and the Primus PKCS#11 API Provider installed (see below)

Install the Primus PKCS#11 API Provider

OpenSSL communicates with the Primus HSM over the HSM's PKCS#11 API. Therefore, please install and configure the Primus PKCS#11 API Provider on your target machine.

note

Versions of the Securosys PKCS#11 Provider before v2.1 were shipped including a version of OpenSSL and httpd. It is not recommended to use these versions anymore. Make sure that they are no longer part of the PATH or LD_LIBRARY_PATH variables. Use the following variable definitions instead:

export PRIMUS_HOME=/usr/local/primus
export PATH=$PRIMUS_HOME/bin:$PATH
export LD_LIBRARY_PATH=$PRIMUS_HOME/lib:$LD_LIBRARY_PATH

Install OpenSSL 1.x/3.x

Install OpenSSL 1.x or 3.x, preferably from your distribution's package manager.

Debian/Ubuntu

sudo apt install openssl

RHEL

sudo dnf install openssl

Windows

Download a precompiled OpenSSL binary. Alternatively, follow the OpenSSL documentation to compile OpenSSL from source.