OpenSSL Dynamic Engine for AWS CloudHSM Client SDK 5

The AWS CloudHSM OpenSSL Dynamic Engine allows you to offload cryptographic operations to your CloudHSM cluster through the OpenSSL API.

AWS CloudHSM provides an OpenSSL Dynamic Engine, which you can read about in AWS CloudHSM SSL/TLS offload on Linux using Tomcat with JSSE or AWS CloudHSM SSL/TLS offload on Linux using NGINX or Apache with OpenSSL. For an example on using AWS CloudHSM with OpenSSL, refer to this AWS security blog. For information about platform support for SDKs, see AWS CloudHSM Client SDK 5 supported platforms. For troubleshooting, see Known issues for the OpenSSL Dynamic Engine for AWS CloudHSM.

Use the following sections to install and configure the AWS CloudHSM dynamic engine for OpenSSL, using Client SDK 5.

For information on using Client SDK 3, see Using previous SDK version to work with AWS CloudHSM.