OS Manuals

ipsec-initnss(8)

IPSEC-INITNSS(8) Executable programs IPSEC-INITNSS(8)


.SH "NAME" ipsec-initnss - Initialise the IPsec NSS database


.SH "SYNOPSIS"


.HP 336u


ipsec initnss
[--nssdir /var/lib/ipsec/nss]


.SH "DESCRIPTION"


.PP ipsec initnss initialises the NSS database where all private keys for RSA and certificate keypairs are stored. If already initialised, it will return an error. To remove an existing IPsec NSS database, remove all the *.db files and pkcs11.txt from the NSS data directory (default: /var/lib/ipsec/nss).


.SH "SEE ALSO"


.PP ipsec.conf(5), ipsec(8), ipsec-add(8), ipsec-algparse(8), ipsec-briefconnectionstatus(8), ipsec-briefstatus(8), ipsec-certutil(8), ipsec-checkconfig(8), ipsec-checknflog(8), ipsec-checknss(8), ipsec-connectionstatus(8), ipsec-crlutil(8), ipsec-delete(8), ipsec-down(8), ipsec-ecdsasigkey(8), ipsec-fetchcrls(8), ipsec-fipsstatus(8), ipsec-globalstatus(8), ipsec-import(8), ipsec-letsencrypt(8), ipsec-listall(8), ipsec-listcacerts(8), ipsec-listcerts(8), ipsec-listcrls(8), ipsec-listen(8), ipsec-listpubkeys(8), ipsec-modutil(8), ipsec-newhostkey(8), ipsec-ondemand(8), ipsec-pk12util(8), ipsec-pluto(8), ipsec-purgeocsp(8), ipsec-redirect(8), ipsec-replace(8), ipsec-rereadall(8), ipsec-rereadcerts(8), ipsec-rereadsecrets(8), ipsec-restart(8), ipsec-route(8), ipsec-rsasigkey(8), ipsec-setup(8), ipsec-showhostkey(8), ipsec-showroute(8), ipsec-showstates(8), ipsec-shuntstatus(8), ipsec-start(8), ipsec-status(8), ipsec-stop(8), ipsec-trafficstatus(8), ipsec-unroute(8), ipsec-up(8), ipsec-vfychain(8), ipsec-whack(8)


.SH "BUGS"


.PP none


.SH "AUTHOR"


Andrew Cagney, Daniel Kahn Gillmor, D. Hugh Redelmeier, Paul Wouters, Tuomo Soini

10/06/2026 Libreswan v5.4.1-HEAD

libreswan 5.4.1-r0 · enterprise-packages · ingested 2026-10-06