OpenSSL Provider for AWS CloudHSM Client SDK 5
The AWS CloudHSM OpenSSL Provider allows you to offload TLS cryptographic operations to your CloudHSM cluster through the OpenSSL Provider API. The Provider interface is the recommended approach for new deployments using OpenSSL 3.2 and later.
Use the following sections to install and configure the AWS CloudHSM OpenSSL Provider, using Client SDK 5.
OpenSSL version requirement for ML-DSA
ML-DSA key types require OpenSSL 3.5 or later.
Supported platforms
The OpenSSL Provider requires OpenSSL 3.2 or later, available on EL9+, EL10+, Ubuntu 26.04 LTS, and Amazon Linux 2023+.
Verify compatibility: openssl version
Topics
