Skip to main content

​
Working with OpenSSL and Java

There is a known issue when OpenSSL providers and Java both reference the same libfxpkcs11.so file. If both environments use the same file, it can cause either Java or any OpenSSL PKCS#11 HSM operations to fail. If OpenSSL and Java will be installed on the same device, to avoid the issue, we recommend performing the following steps:
1
Create separate directories for Java and OpenSSL, for example:
None
2
Place a distinct copy of libfxpkcs11.so into each directory
3
Configure OpenSSL and Java to point to their respective copies
  • For Java, edit the library line in pkcs11.cfg file. If our recommendation was followed, the file should be located at /usr/local/etc/
  • For PKCS11 Provider, edit the pkcs11-module-pathline in openssl.cnf file. If the user chose to edit the global file, run the command to find where the global OpenSSL file is located
    Shell
    If the user chose to edit a copy of the global file, edit the file where the user chose to place it, and export the environment variable
    Shell