Using OpenSSL and Java

working with openssl and java there is a known issue when openssl providers and java both reference the same libfxpkcs11 so file if both environments use the same file, it can cause either java or any openssl pkcs#11 hsm operations to fail if openssl and java will be installed on the same device, to avoid the issue, we recommend performing the following steps create separate directories for java and openssl, for example /usr/local/lib/fxpkcs11/openssl/libfxpkcs11 so /usr/local/lib/fxpkcs11/java/libfxpkcs11 so place a distinct copy of libfxpkcs11 so into each directory configure openssl and java to point to their respective copies for java, edit the library line in pkcs11 cfg file if our recommendation was followed, the file should be located at /usr/local/etc/ for pkcs11 provider, edit the pkcs11 module path line in openssl cnf file if the user chose to edit the global file, run the command to find where the global openssl file is located openssl version d if the user chose to edit a copy of the global file, edit the file where the user chose to place it, and export the envrionment variable export openssl conf=/path/to/openssl cnf