Verifying Integration

To verify the NGINX-P11 installation:

1. Run the following command to verify the kengine installation (on client).

   openssl engine kengine -v
   

   Output:

   (kengine) KeySecure Engine Support
   enginearg, openSession, closeSession, login, logout, engineinit,
   CONF_PATH, ENGINE_INIT, ENGINE2_INIT, engine2init, DisableCheckFinalize,
   SO_PATH, GET_HA_STATE, SET_FINALIZE_PENDING, SKIP_C_INITIALIZE,
   IntermediateProcesses
   

   This is applicable to both Static and Dynamic engines.

2. Run the following command to ensure that the nginx runnable is created and defined according to your configuration (that is, openssl custom paths):

   nginx -V
   

   Output:

   nginx version: nginx/1.19.7
   built by gcc 4.8.5 20150623 (Red Hat 4.8.5-44) (GCC)
   built with OpenSSL 1.0.1t  3 May 2016
   TLS SNI support enabled
   configure arguments: --prefix=/opt/nginx --with-pcre=/opt/pcre-8.38 --with-zlib=/opt/zlib-1.2.8 --with-http_ssl_module --with-cc-opt=-I/opt/openssl/ssl/include/ --with-ld-opt='-L/lib64 -L/opt/openssl/ssl/lib/ -ldl'
   

3. After creation of keys, if you have appropriate access, you can view the keys under the Keys section on the CipherTrust Manager UI.

4. Type http://<Server_Name> (or as defined in the nginx.conf file which can be the IP address of the NGINX server or a specific FQDN) in the URL bar of any browser.

   On a successful hit to the running NGINX Web Server, you should see Welcome to nginx !.