Instalar o OpenSSL Dynamic Engine para o Client SDK 3 do AWS CloudHSM - AWS CloudHSM

Instalar o OpenSSL Dynamic Engine para o Client SDK 3 do AWS CloudHSM

As etapas a seguir descrevem as etapas para instalar e configurar o mecanismo dinâmico do AWS CloudHSM para OpenSSL com o Client SDK 3. Para informações sobre a atualização, consulte Fazer upgrade do Client SDK 3.

Para instalar e configurar o mecanismo OpenSSL

  1. Use os seguintes comandos para fazer download e instalar o mecanismo OpenSSL.

    Amazon Linux
    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-dyn-latest.el6.x86_64.rpm
    $ sudo yum install ./cloudhsm-client-dyn-latest.el6.x86_64.rpm
    Amazon Linux 2
    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
    $ sudo yum install ./cloudhsm-client-dyn-latest.el7.x86_64.rpm
    CentOS 6
    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-dyn-latest.el6.x86_64.rpm
    $ sudo yum install ./cloudhsm-client-dyn-latest.el6.x86_64.rpm
    CentOS 7
    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
    $ sudo yum install ./cloudhsm-client-dyn-latest.el7.x86_64.rpm
    RHEL 6
    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL6/cloudhsm-client-dyn-latest.el6.x86_64.rpm
    $ sudo yum install ./cloudhsm-client-dyn-latest.el6.x86_64.rpm
    RHEL 7
    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/EL7/cloudhsm-client-dyn-latest.el7.x86_64.rpm
    $ sudo yum install ./cloudhsm-client-dyn-latest.el7.x86_64.rpm
    Ubuntu 16.04 LTS
    $ wget https://s3.amazonaws.com/cloudhsmv2-software/CloudHsmClient/Xenial/cloudhsm-client-dyn_latest_amd64.deb
    $ sudo apt install ./cloudhsm-client-dyn_latest_amd64.deb

    O mecanismo OpenSSL está instalado em /opt/cloudhsm/lib/libcloudhsm_openssl.so.

  2. Use o comando a seguir para definir uma variável de ambiente denominada n3fips_password que contém as credenciais de um usuário de criptografia (CU). 

    $ export n3fips_password=<HSM user name>:<password>